
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json)
Hash identifier: 1mUy8E0rw4wYkxfImJAsCVx2QhSRBa0o/daE2wn8Hko=
Subject key identifier: 81:BE:BD:62:6D:8A:29:58:99:F1:4E:57:C8:BA:4F:2B:45:13:2F:02
Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92
Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
Manifest number: 01DA
Signing time: Wed 07 Oct 2026 04:07:39 +0000
Manifest this update: Wed 07 Oct 2026 04:07:38 +0000
Manifest next update: Wed 14 Oct 2026 04:07:38 +0000
Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: r97AAXls80EZXOYDcU7YwMGPduntRlr9kLdQZv3nmr0=)
2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: phSGmEc2a3ws2qXRRrzbPA214VO9t93SrroXMLPZc4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl
rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292
Validity
Not Before: Oct 7 04:07:38 2026 GMT
Not After : Oct 14 04:07:38 2026 GMT
Subject: CN=6ac5c58b-3bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:02:57:58:24:e2:ba:f3:73:4c:92:d4:1d:
4c:7a:4c:0f:8f:88:ac:6e:f4:6f:98:56:d6:ce:90:
ec:60:92:59:5c:ee:7b:dd:4e:82:5a:51:f8:a0:5e:
4a:e1:21:67:c7:6c:1f:01:cd:86:5b:fe:9f:7d:64:
33:53:84:14:9e:ba:e4:3b:3b:f3:09:fd:dc:fb:a2:
1b:fb:35:c9:f9:91:19:a1:ba:34:ae:a3:03:18:95:
fd:8a:28:8b:bf:ff:1b:77:96:48:3f:1f:27:9f:8d:
0a:c6:f8:14:36:d9:f5:02:8c:b0:27:ab:30:7c:08:
31:af:04:9b:59:c2:bd:b7:c7:a9:3d:de:11:06:4c:
74:f2:c3:ee:8c:05:78:52:32:39:aa:ab:15:fe:29:
f4:e3:04:7f:c7:51:e4:bc:ec:ea:b5:eb:8e:70:b2:
7d:58:e4:70:2a:aa:c9:2e:31:51:cc:b9:36:47:e0:
10:92:f4:aa:13:49:36:ee:ee:a2:9e:c5:f7:46:11:
ee:ea:f1:e6:ae:17:90:23:2a:37:08:43:fc:0e:6c:
f9:aa:f6:87:fc:40:ab:78:fc:c7:d2:0a:a1:3c:b8:
54:f8:03:f3:eb:5c:04:2b:d4:0c:1d:0d:aa:1a:de:
9a:d1:01:8c:ce:5f:fb:d5:3f:59:da:2e:e8:ad:ae:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:BD:62:6D:8A:29:58:99:F1:4E:57:C8:BA:4F:2B:45:13:2F:02
X509v3 Authority Key Identifier:
keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:4f:8e:b0:d8:47:88:fd:53:79:fd:33:e2:c3:66:d0:2d:
1f:11:ac:22:b3:33:36:46:7e:47:2b:74:a9:7c:bb:4f:ce:00:
cd:2e:1a:5f:21:d1:70:f8:60:59:d6:70:ec:8c:99:5e:0b:75:
8d:89:45:32:70:04:b0:f5:93:25:5a:43:52:ee:48:74:37:82:
65:59:be:30:2b:77:f9:9a:f2:ce:fa:dc:63:e4:36:2b:94:30:
48:b8:a6:21:91:4e:07:e6:52:fe:0d:b8:27:9f:84:6e:33:2a:
bf:0a:27:42:21:0a:ec:40:d4:1c:0a:c4:d9:cb:1a:62:68:66:
04:6e:ce:74:52:12:df:3b:8a:92:08:af:30:31:3c:85:36:df:
d7:48:eb:8b:3c:f0:45:d5:80:88:86:c6:5c:b8:31:2f:41:b9:
a6:ad:dc:88:e5:14:bf:f0:6c:c2:af:73:da:e5:cc:16:88:f6:
1b:e8:5d:af:46:71:85:c2:83:58:28:f1:a0:49:b6:a5:f8:a6:
a8:9b:88:03:eb:09:75:53:9c:0f:ac:2c:ff:45:60:76:86:6d:
21:16:37:87:e2:11:99:47:4d:2d:95:d0:8d:5c:cb:a3:d6:60:
2e:e8:c3:1e:9d:98:7f:86:9a:cd:c9:0f:f7:ec:a5:b9:71:65:
54:5a:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:00:15 2026 by rpki-client