
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: YOgKV5HzZ9rVWbZhGHsTsYTNv3BG/Ds+hEcxOR5iSvQ=
Subject key identifier: BA:CF:00:DF:BA:AA:1F:69:78:A4:A2:95:8C:8C:81:5C:0A:00:94:BB
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 01F1
Signing time: Thu 17 Sep 2026 03:37:49 +0000
Manifest this update: Thu 17 Sep 2026 03:37:49 +0000
Manifest next update: Thu 24 Sep 2026 03:37:49 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: nqGOUflJi6h9lAAWKQg42b30VsHCfJ5I6wzbln4tfzo=)
2: DB21824E24D411F1AAE44A56AB833773.roa (hash: 8GyDfBA1IZDhkRGLkiUjHXF95KxrCV2FUfNeUOQyYBE=)
3: B2F952F624D411F1AA718F4CAB833773.roa (hash: 2wk92MzDpjsXuOZ8ntASKDQ4sTbjcbY5Km2g9d/wyUY=)
4: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: jUlzv+BPveVCQ4DOQfVrNZRZohUrZQ5kxaV6qLf2VRw=)
5: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: 1IW5uQs2D3mZAea5IiAOQwQMw8/u9YBpsGFLZqR7TM0=)
6: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 9v5gtNpE8dXzfsqG3fdMl6Hr0batTTxdzTp1LP0HWPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 03:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Sep 17 03:37:49 2026 GMT
Not After : Sep 24 03:37:49 2026 GMT
Subject: CN=6aab608d-bbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:30:63:32:31:69:13:88:1d:24:ec:5f:ec:
6d:2c:de:2f:4c:29:ee:4d:b9:f0:f9:ec:3c:68:3e:
29:b6:e2:44:ae:64:bb:29:6c:80:b3:7a:de:ea:e2:
d9:00:e7:40:a9:d7:c5:cd:d6:23:53:7f:fd:90:4f:
9d:ef:e6:d4:56:f1:8c:00:65:bf:e1:44:14:6a:52:
86:ee:d5:a4:7f:47:76:e5:f2:a0:6f:3b:5c:95:26:
99:ba:ee:98:38:a2:26:da:e8:3d:c9:1c:27:3a:46:
ad:df:eb:d3:eb:cc:10:26:04:f4:fc:2e:6e:8a:7f:
43:ae:30:7b:b8:d4:7c:f7:17:27:cb:95:7a:28:28:
d8:c1:22:07:64:c6:53:8f:e8:28:49:ce:90:01:ef:
1f:68:b0:58:23:d0:ea:76:7e:32:1f:a8:32:b5:ae:
3f:7a:40:78:4b:7d:b4:37:7a:f8:2c:a3:b3:20:c8:
83:ac:84:4c:a9:3c:09:bc:91:2f:68:27:29:66:6f:
e6:d6:d8:48:a7:b1:62:c0:be:75:1c:d3:19:04:5e:
9f:b0:f0:56:77:72:b3:4f:73:25:33:ea:05:56:35:
48:02:5d:e9:35:0f:45:cd:13:c6:08:12:21:fc:1c:
57:3e:39:2a:f4:08:14:7d:ad:fe:19:79:44:83:15:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:00:DF:BA:AA:1F:69:78:A4:A2:95:8C:8C:81:5C:0A:00:94:BB
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:f1:4b:bc:23:57:17:01:5e:0c:44:4d:42:f0:2b:1b:c9:e1:
91:0f:a9:27:a1:be:18:3d:0c:0d:b1:55:62:57:e9:1d:be:25:
3c:78:ee:9f:ce:58:1c:be:62:ae:92:19:99:e3:f3:7e:cb:fc:
0d:c0:e7:d4:05:c7:29:ee:4b:39:0a:6d:88:c0:a0:d3:99:6b:
7c:df:f8:be:4c:15:e2:06:3d:1a:79:e7:21:fe:f5:54:87:7d:
6b:4f:58:7a:bb:12:39:e9:5f:0a:8e:4c:87:d1:d8:17:47:ba:
7d:a1:bd:2a:51:35:fa:b1:a5:49:e0:8c:f7:fc:c1:e1:b5:a4:
6a:64:ba:a7:b6:e8:b2:79:e0:12:a4:1a:4d:e7:6f:04:fc:a9:
0a:06:b5:d7:a3:c9:18:0c:9c:4a:2a:cc:2f:eb:3c:f3:4a:0e:
fb:a1:0d:9c:d7:cf:a4:67:f8:87:9e:50:38:e5:5b:1f:37:6c:
cf:06:e5:2d:53:c4:62:33:25:ab:6f:20:24:64:f2:1b:91:0d:
60:1c:c8:f1:19:50:4b:3e:2d:78:3d:ea:e7:79:e3:69:cf:71:
99:56:3a:63:05:6c:c5:5c:70:4e:db:2c:6f:fc:a6:d9:7e:7d:
f4:57:f7:e2:9c:f8:be:4f:b2:c9:41:4c:d6:d9:d7:3a:59:70:
d4:ac:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:22 2026 by rpki-client