
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft
File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json)
Hash identifier: gAwwgvQo+cAY1YZEqnFDjMWP8cEhjH9KhLlY8DpHkDM=
Subject key identifier: 76:F3:B4:B1:84:5E:5A:08:89:CB:5B:E0:BB:79:AE:62:89:93:A6:AB
Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87
Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft
Manifest number: 68
Signing time: Wed 07 Oct 2026 08:36:41 +0000
Manifest this update: Wed 07 Oct 2026 08:36:41 +0000
Manifest next update: Wed 14 Oct 2026 08:36:41 +0000
Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: X2ff4ze6znz60UJK3poeXlq5X9XzOgJmv+vRzEYxY50=)
2: C6185536273011F1A8149F74AC833773.roa (hash: VQ3oYzA5eze5dJ+k0aE2k8+qDA0R0GjFfFrLw7ghtPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl
rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87
Validity
Not Before: Oct 7 08:36:41 2026 GMT
Not After : Oct 14 08:36:41 2026 GMT
Subject: CN=6ac60499-3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:e9:80:b7:ef:33:74:34:20:9d:9c:2f:81:
da:08:5d:55:8f:21:7c:a5:c7:b8:c4:dc:59:11:80:
c1:87:d9:51:33:0d:df:55:a2:02:14:e8:2f:af:84:
87:46:96:16:7a:06:b0:5c:9d:dc:88:19:f4:92:b2:
31:ef:5c:d2:15:32:73:9e:5a:da:f4:fd:07:e0:ab:
f9:df:9a:a1:01:a6:fa:59:bd:10:78:bc:86:1d:0f:
cb:6a:0c:cb:17:a0:7a:be:5f:40:12:ef:65:30:3c:
a3:c8:5a:2c:75:6e:84:60:80:f7:23:c2:7f:06:08:
21:0a:c0:3e:cb:8e:32:e6:91:71:58:63:e0:29:fa:
8a:0a:dd:e2:6f:79:22:48:b0:5d:01:db:03:a5:ef:
5a:13:06:05:e0:bb:0d:cc:58:01:4a:2f:46:6b:c1:
0e:74:e1:d2:51:5a:6c:49:17:be:a0:3a:8c:d2:ef:
6c:dd:33:6e:15:36:10:ce:20:1c:b8:aa:a0:ca:c0:
72:23:98:2f:ce:9d:47:0e:87:fe:36:4f:0a:c3:4f:
14:b4:c3:f4:c0:e8:ab:7d:e0:b9:2b:8d:1f:8a:2a:
59:81:e1:9b:83:97:97:73:d5:a3:a8:0d:d6:33:db:
3c:97:a9:e8:f4:ca:ee:84:3d:4d:ce:f2:98:39:3c:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:B4:B1:84:5E:5A:08:89:CB:5B:E0:BB:79:AE:62:89:93:A6:AB
X509v3 Authority Key Identifier:
keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:3a:01:8b:87:ac:9f:74:01:fd:2f:98:c2:92:fc:43:59:34:
c9:6c:89:b5:07:a4:29:27:75:79:92:8c:00:97:93:ac:48:af:
9e:a0:af:04:02:e6:dc:76:28:ec:f4:f7:04:da:cc:28:f8:7f:
ba:e3:f9:78:e5:9d:a4:ce:08:13:1c:7d:8e:88:d9:3f:db:dc:
cf:54:d8:15:33:e4:4e:cf:94:aa:52:39:3c:4d:13:a7:b8:d9:
20:65:3e:db:46:b7:83:dc:77:f8:93:23:ea:ed:70:46:ac:1e:
de:81:d1:0a:06:7c:31:eb:dd:9d:46:9b:b8:50:f5:e6:bd:1a:
2a:4e:a2:e0:ee:d0:d8:f9:f9:f3:15:c6:55:e8:81:83:57:e1:
d4:3c:58:47:9f:0b:f9:7e:78:9c:eb:a1:77:2b:e6:24:59:b3:
90:dd:bc:eb:2b:cc:58:ae:de:5e:96:f6:38:c8:86:e6:dc:1c:
35:c0:40:8e:32:c6:c2:e6:eb:bc:73:69:81:3a:8f:3e:50:cd:
de:81:65:d9:2a:14:02:fe:73:ed:51:f6:80:76:c9:99:d9:0d:
5b:86:e8:be:13:bf:4b:7a:6e:f8:a9:a4:89:9f:4f:0a:bf:04:
c9:23:b1:95:30:b7:93:a1:f6:aa:84:f0:53:29:7f:24:74:92:
4f:25:7b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:25:49 2026 by rpki-client