
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json)
Hash identifier: ntKWl7oIbPDCToe6r529q7xk9/RFJAP5N781Lr6vuJk=
Subject key identifier: FF:2A:35:50:2C:9E:3D:33:FC:4F:FD:75:AC:C6:38:9C:7C:CB:AF:4C
Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
Manifest number: 0366
Signing time: Wed 07 Oct 2026 01:03:25 +0000
Manifest this update: Wed 07 Oct 2026 01:03:25 +0000
Manifest next update: Wed 14 Oct 2026 01:03:25 +0000
Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: qVdt+x/Q7nVkZFFtprlDjFpzmR9waIOvzVUVQ4JMmt4=)
2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: rOUffX7k/3LsoRAqIHp9HWCvN8MHO4THAEF6f9L99x4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Validity
Not Before: Oct 7 01:03:25 2026 GMT
Not After : Oct 14 01:03:25 2026 GMT
Subject: CN=6ac59a5d-83be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:3f:cb:c7:f7:0e:53:d0:38:b2:44:0f:11:
6c:1d:72:1f:f8:4e:0c:fd:f5:d9:88:59:2b:23:e9:
9a:03:eb:40:84:08:40:41:f3:b7:66:da:a7:94:fb:
25:6b:37:31:6c:b9:5a:fe:e9:ff:46:14:a8:2b:ac:
4e:9b:08:a6:9a:2f:23:f0:bc:da:bd:a7:ec:c7:e2:
42:20:5e:8c:e9:f4:b8:e5:9c:4c:a6:8d:36:1c:95:
33:56:53:a6:93:36:5f:c9:4b:63:f8:5b:e0:d4:02:
61:9d:ae:5b:c9:c2:11:a1:d3:4a:c0:c3:95:d7:07:
7c:9b:45:90:45:9b:35:b2:a0:80:de:a8:14:c1:1d:
1b:ca:55:c0:b3:51:05:05:1d:2f:11:27:13:95:a0:
03:77:20:9b:e3:71:54:9f:a0:f3:e5:74:b6:0a:12:
e4:88:67:5e:7e:5d:49:f7:8f:05:e4:f4:f8:d6:f9:
98:1e:b2:7b:e6:98:43:78:89:c7:1d:4d:59:c8:6c:
38:f0:61:86:87:62:78:4f:70:18:73:93:3c:76:52:
9a:b9:55:29:22:7c:a9:eb:7c:62:3c:6a:f3:93:68:
fe:6d:78:39:4f:cf:32:5e:04:31:75:75:af:19:ad:
d5:15:38:23:90:e4:51:7c:52:85:6d:7b:74:ce:16:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:35:50:2C:9E:3D:33:FC:4F:FD:75:AC:C6:38:9C:7C:CB:AF:4C
X509v3 Authority Key Identifier:
keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:82:19:6c:c5:0e:0f:15:46:36:c1:27:c7:4a:f7:16:b7:96:
51:a6:29:46:aa:81:af:38:eb:0c:65:79:1c:fd:d3:26:dd:24:
90:12:18:bf:52:54:cc:bb:8d:9e:0e:4e:3c:a7:6e:d3:72:e1:
82:b8:31:c1:30:f4:df:5b:53:5c:34:dc:6c:7e:fb:af:43:e0:
18:5f:e6:26:aa:62:ba:65:8d:90:31:7c:c5:8d:01:5e:07:36:
1a:6f:b2:22:07:ee:08:7a:58:2f:39:87:4c:b3:00:cb:d3:29:
d4:cd:03:4a:ad:40:d3:f7:50:33:5f:c3:af:fd:6a:4d:a2:0a:
ff:84:84:ff:17:b5:b4:cb:91:e6:c0:db:c2:0c:ec:b9:ef:83:
af:83:f8:62:33:d3:84:5d:88:7d:2d:64:9a:eb:57:a6:0a:64:
23:08:60:f8:d3:61:5d:1c:f1:d5:a0:b9:e2:52:2c:c5:05:15:
ac:d2:ac:58:73:34:82:9d:2c:d7:96:eb:d5:7e:82:2a:58:ff:
2d:7a:82:e1:65:bb:25:28:f9:93:d7:a8:ad:63:52:61:9a:94:
ef:8c:d4:a6:3a:87:91:77:b1:69:3f:8b:0b:70:36:77:86:36:
bd:b1:84:ff:86:c4:5f:ab:26:92:55:29:8a:2a:00:3c:09:11:
4b:fb:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:23 2026 by rpki-client