
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier: gprlDdpbcT/v4xppma20H4JdthWynJO18ghJgSE1hDY=
Subject key identifier: EB:3C:7E:DD:CA:EF:ED:A2:FB:41:AA:69:92:73:54:6A:22:DB:05:AE
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number: 0129
Signing time: Thu 15 Oct 2026 06:43:54 +0000
Manifest this update: Thu 15 Oct 2026 06:43:54 +0000
Manifest next update: Thu 22 Oct 2026 06:43:54 +0000
Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: 0AaAKGEFWM62OxFq3SsbFxHJH64ayy20qTsp28lybfw=)
2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 06:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Validity
Not Before: Oct 15 06:43:54 2026 GMT
Not After : Oct 22 06:43:54 2026 GMT
Subject: CN=6ad0762a-bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:7f:82:28:5c:99:ac:09:df:f6:d5:9f:96:
8e:71:28:c2:03:e7:81:92:d3:0c:9d:12:ea:df:11:
a9:58:ae:08:86:47:c2:37:cd:99:55:4f:a4:9b:d6:
94:93:6e:57:9f:86:10:57:78:7c:32:92:3f:54:d7:
e1:89:b0:93:bc:a1:bd:5c:b8:ef:3b:f5:7b:26:21:
42:f5:f8:cb:77:22:23:46:89:aa:c2:5d:c0:60:bc:
e9:ef:06:d3:7e:cc:a0:1d:04:7b:dd:37:ee:32:8e:
e4:ac:86:1a:1c:5b:85:09:c8:6e:07:4a:ef:64:9c:
fb:11:5e:a7:96:14:24:8d:c1:38:31:22:7a:3c:48:
2d:1c:14:81:08:89:92:39:a2:42:6b:42:d2:f4:a7:
f0:67:03:21:59:dd:2b:ad:6d:cc:db:f4:e2:93:21:
f5:3a:b9:cd:df:41:fe:4d:88:93:6a:57:dd:86:45:
29:f4:f8:d3:de:cd:82:cf:fe:4e:6d:cf:f4:a4:72:
c1:5c:5b:da:8b:fa:83:e4:22:dc:e7:79:ea:cd:c6:
ba:4a:b0:3e:09:a8:a4:e8:af:64:c8:4a:04:09:86:
61:73:96:76:d7:b8:9e:98:35:a2:f3:3a:40:c8:98:
85:ec:e1:53:70:35:29:22:97:5c:f6:c9:f2:b7:32:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:7E:DD:CA:EF:ED:A2:FB:41:AA:69:92:73:54:6A:22:DB:05:AE
X509v3 Authority Key Identifier:
keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:fc:41:ad:7f:1f:f3:30:f5:c4:f1:08:df:f8:e7:d9:74:08:
56:18:4b:d4:12:7f:37:65:a6:d4:c4:05:28:68:19:e2:87:a9:
ce:a4:a9:25:ca:37:3b:4c:d7:00:18:22:95:bc:92:a9:08:0c:
cf:e1:10:0c:e3:ac:3c:c8:02:af:ef:7d:9d:26:5c:00:44:ea:
60:4c:c3:69:47:21:fd:0e:fb:db:94:9f:3c:4b:53:9b:02:5c:
03:d4:8c:44:ca:3b:85:b9:f5:57:0d:80:0e:e2:7f:46:bd:84:
7a:52:89:a4:f4:c5:8e:4f:a0:34:9b:4a:e5:33:7c:aa:0c:52:
5a:73:a3:ce:bb:a2:e1:6a:67:53:71:98:f4:48:eb:03:f4:99:
98:0e:96:66:73:68:45:2c:9a:9d:7c:51:15:98:65:e3:81:31:
79:af:54:ba:b1:16:a7:db:9e:21:89:18:7a:59:40:e2:81:db:
bd:2c:75:96:0e:45:e2:01:2d:af:ae:28:ce:71:88:c3:a0:f3:
85:9d:08:c9:91:12:b7:cf:57:77:af:36:50:d3:6c:75:3b:a1:
76:01:4e:70:99:34:3e:5d:98:0c:03:e6:a2:6b:40:d0:cf:af:
d7:31:d7:ee:82:3d:7e:a3:12:93:0b:b5:95:5c:32:b4:d2:07:
18:ea:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:52:38 2026 by rpki-client