
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: Tqkv+nXv+FRkmtAwp2UPiN44nrIWgwws5/9DVK1TedM=
Subject key identifier: 95:56:E9:2F:24:F2:10:E7:6B:FA:AC:D5:B0:C1:EB:3D:D4:44:32:81
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 25B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 2562
Signing time: Tue 06 Oct 2026 15:46:00 +0000
Manifest this update: Tue 06 Oct 2026 15:46:00 +0000
Manifest next update: Tue 13 Oct 2026 15:46:00 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: 8vvOasrxE/jXji69AD24fZQ9/Wvxv5zqUysTP9c/0bs=)
2: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=)
3: 1A13A1D0ABFD11F1A01A66F56A11F970.roa (hash: /mdRJmdwf41+PjME0KrvJ9ifiBelFKWQGM/p14mQGFc=)
4: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=)
5: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=)
6: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=)
7: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=)
8: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=)
9: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 15:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9653 (0x25b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Oct 6 15:46:00 2026 GMT
Not After : Oct 13 15:46:00 2026 GMT
Subject: CN=6ac517b8-49de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:83:eb:ad:fd:7e:c3:75:d5:e9:c8:21:f0:
84:95:63:00:55:96:17:09:71:65:0f:18:1b:26:bd:
f2:52:c6:0f:89:46:53:a7:23:2d:22:55:d6:f5:41:
0f:d7:23:1f:38:bf:ad:ef:4f:fc:9d:c5:a0:32:e2:
dc:c7:91:b0:27:3c:59:bb:d9:6d:5e:24:df:8d:e7:
1f:72:1e:2a:2c:5e:1d:d3:d1:29:36:6c:9a:7e:e7:
91:d8:11:c0:b0:26:e0:a4:e1:4f:2b:3c:90:c6:f9:
4e:46:d1:a6:6e:a6:f8:d4:ff:15:1f:e7:9c:e5:f2:
b9:97:ba:a7:b1:24:29:6f:2a:e8:16:08:4c:13:00:
d1:6f:78:3a:9e:da:47:73:ed:e1:a0:0c:87:55:93:
b6:3e:df:9b:26:05:f6:5d:bf:3d:5d:06:e0:6e:3c:
6e:5d:d9:a6:e6:c4:00:3d:36:2f:63:b7:9e:31:92:
0a:e8:de:4b:a2:9d:18:51:dd:6e:6d:51:1c:90:bf:
46:e8:fa:aa:5b:03:2e:a7:71:d4:6f:17:6c:41:25:
f9:76:e5:26:38:1b:c1:73:c3:5b:eb:3a:28:37:93:
ea:25:f8:27:e3:c3:92:b5:a6:1c:7b:d1:2b:52:16:
3c:61:0a:55:c7:e5:40:39:cf:8b:bf:12:ac:a6:18:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:E9:2F:24:F2:10:E7:6B:FA:AC:D5:B0:C1:EB:3D:D4:44:32:81
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:d6:da:76:bf:74:a0:5c:e0:d6:11:9d:e9:c4:fe:68:7f:
c7:01:77:e2:99:ae:f0:c8:09:e7:be:3a:1a:a5:72:01:66:9c:
35:4f:10:57:70:bd:3e:9e:cc:99:35:2b:66:e3:09:6c:7e:7f:
48:65:c0:2c:ed:f4:2d:d9:53:97:6e:a5:c5:0e:8d:05:d9:8f:
41:ff:4e:0a:68:2e:85:1b:6c:e3:e3:e2:cb:80:fa:de:45:ce:
1c:22:dd:02:5c:12:62:f8:ab:be:b0:4a:fa:cd:b6:fc:c3:93:
8f:75:5f:f7:bb:0c:9a:48:13:fd:3f:e3:c1:f8:3d:c6:89:e8:
b8:82:51:47:eb:98:a6:58:79:f9:51:38:f0:81:2c:8c:29:83:
d9:1b:e9:74:1a:f5:78:a4:da:3b:b9:ff:69:27:f2:d1:f3:da:
7f:f4:e7:32:7f:d7:3f:00:0a:3e:0e:8a:c2:33:ab:db:e9:80:
c2:9c:ee:27:07:91:7e:0a:8b:cd:59:71:2a:99:d7:04:a7:b3:
ac:9d:8b:b1:38:14:c7:0a:7b:70:eb:d0:68:d7:52:eb:fa:b1:
35:13:6c:9b:b1:8c:3f:cb:71:87:85:a5:cf:80:91:8a:29:ff:
15:82:16:4b:4f:40:4b:e4:00:28:01:bc:25:bf:45:25:44:ac:
46:5c:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:07:28 2026 by rpki-client