
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: U2+AcZkUFZoMzds+x3Mwste8Q++TCdD8oyjAGADwDF4=
Subject key identifier: BD:5E:70:7B:CE:49:52:FA:F5:AE:B1:06:D0:6A:45:90:6B:22:27:26
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 0A5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 0A31
Signing time: Sun 04 Oct 2026 19:52:59 +0000
Manifest this update: Sun 04 Oct 2026 19:52:58 +0000
Manifest next update: Sun 11 Oct 2026 19:52:58 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: ceDBrroJbIQvjAxXZhawm/cHky7LgWMzAL3XC8ZSU78=)
2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ywh+EspzzTB1z73ivawXczceUdTNF+vMHbVnAWHY+X4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Oct 4 19:52:58 2026 GMT
Not After : Oct 11 19:52:58 2026 GMT
Subject: CN=6ac2ae9b-45da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:86:c3:7e:66:da:84:da:54:b5:e3:5a:8e:
99:b0:b8:41:71:8c:e0:c2:7c:b8:b3:bb:6e:0b:c5:
98:10:02:44:10:5e:95:b8:f4:80:a8:20:9d:a3:c0:
3c:7c:97:e7:89:e4:d0:12:06:c0:32:af:5a:aa:51:
05:25:01:c8:86:54:61:e3:b8:82:ec:29:53:f8:f7:
60:d9:9f:0a:bd:e8:58:42:26:ec:de:27:1d:aa:61:
d2:1e:9d:25:e4:8f:88:c8:1b:fa:33:a1:04:4b:11:
4a:e6:db:77:2f:30:2d:4d:ea:2d:c7:fb:d9:cb:d3:
43:87:4f:23:b6:b5:22:3c:12:ea:51:e5:ee:ff:dd:
f2:98:ea:48:f3:7c:13:41:a0:e5:b3:95:48:89:5d:
74:75:d4:13:52:03:4c:8f:95:9e:59:85:9c:c1:9b:
ae:03:be:8a:ff:a1:0c:98:a8:87:e1:be:3c:14:27:
5e:6d:cc:e9:e3:20:f7:74:1d:eb:34:6f:d8:0e:d0:
69:a7:88:31:75:d7:6a:ea:19:c7:f5:c8:0e:ae:3d:
26:c5:58:73:19:7d:c2:71:37:5d:1b:a3:7a:2e:16:
df:a0:d2:a9:7a:f9:c9:31:de:41:5d:81:fd:61:bd:
6e:13:29:e4:0f:c0:83:b1:84:2e:4a:74:78:6c:58:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:70:7B:CE:49:52:FA:F5:AE:B1:06:D0:6A:45:90:6B:22:27:26
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:55:3e:7f:b8:a7:ee:cd:51:5a:b8:4a:7e:43:32:4e:40:
ac:f8:11:ed:a5:02:37:14:51:75:96:95:ca:fa:9a:65:02:0d:
82:9d:21:c5:41:de:9c:2b:35:c2:db:f0:ef:5b:f4:de:f8:f8:
5c:ef:ff:5e:af:6a:c9:b2:c8:13:09:2a:1c:88:27:7d:94:f0:
28:7a:0a:ed:d4:bd:60:92:21:e9:50:55:d0:46:c0:a0:72:69:
1e:c7:b7:a6:5e:60:0c:55:11:38:99:8d:ac:a6:6b:48:6e:b4:
87:93:4d:5e:e8:98:47:6f:45:70:97:f5:f8:fa:5e:a3:b3:3e:
de:4d:17:e5:5c:7c:e9:61:df:4b:62:f7:6f:dc:d2:36:1c:1d:
97:3a:dd:d8:76:d9:05:05:ee:35:97:64:9a:14:28:d3:71:1d:
02:91:fd:e2:b8:1e:06:37:54:19:07:2b:06:a6:1c:7f:a6:5c:
37:41:13:75:99:77:43:94:2f:aa:1e:64:94:ec:16:c3:10:fe:
71:f3:f6:02:c1:aa:54:40:7f:17:5e:19:88:6a:f3:25:52:f0:
6c:7b:f5:49:4d:e2:c8:ad:c9:4b:5c:48:f2:c8:9e:e7:7d:8f:
c5:8f:08:f0:2c:03:6c:6e:bd:38:8c:07:6d:c7:bb:77:d5:d7:
62:84:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:04 2026 by rpki-client