
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File: Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier: 9XhuiOzrfYdYRR72wDccDYoenaLRTqIRyDXKi+Ik+/w=
Subject key identifier: E6:CA:F4:1E:A8:CE:D4:64:F8:22:9C:9E:11:0D:56:76:61:A9:C7:26
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer: /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number: 0123
Signing time: Sat 03 Oct 2026 06:29:47 +0000
Manifest this update: Sat 03 Oct 2026 06:29:46 +0000
Manifest next update: Sat 10 Oct 2026 06:29:46 +0000
Files and hashes: 1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: FTDqdlKvEfvFk1ftkHjYiOP8is2AGR6+AsH3tfi4Aww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Validity
Not Before: Oct 3 06:29:46 2026 GMT
Not After : Oct 10 06:29:46 2026 GMT
Subject: CN=6ac0a0da-3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:11:b2:50:37:4b:25:cc:fa:71:5a:35:fb:
84:7a:45:cf:fd:95:a9:9e:2b:7a:7e:b0:5a:1e:13:
5f:6e:1e:80:a0:29:ab:6a:00:72:2b:3f:41:d4:fb:
d7:6b:4d:8f:70:ed:57:09:34:91:a4:96:c3:f2:12:
de:1d:1f:8c:ed:74:15:f8:7c:ad:ec:d3:63:f9:d6:
9e:0e:bf:d1:af:98:e1:68:10:82:b7:38:4a:1d:a6:
5f:d8:db:fa:0d:ea:04:de:ad:1e:91:c7:02:45:9b:
1e:77:38:63:23:55:87:da:80:9a:8c:f1:96:9b:f1:
c4:ca:a1:17:bf:50:05:1f:4f:7a:a1:2e:ba:1a:17:
f2:aa:71:dc:f2:b5:9d:7c:8f:88:18:64:2f:43:fd:
3b:fd:19:14:fa:7d:d3:e8:9c:b1:26:3c:71:97:97:
fb:1f:f0:5b:7b:69:06:85:00:17:93:f9:d9:95:d6:
0b:02:23:80:bb:dc:1d:24:8a:66:f8:5c:bd:ac:84:
2e:89:8f:b3:e4:9c:1e:a7:e3:99:c2:f8:26:cd:84:
51:98:cb:a8:ce:e4:06:d0:3b:e8:d5:b3:27:ab:ec:
d5:cf:6e:56:bb:76:d9:1f:5b:06:30:8f:fe:54:30:
24:c6:79:c3:1d:78:b1:7f:70:30:e6:46:bb:7a:a8:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:F4:1E:A8:CE:D4:64:F8:22:9C:9E:11:0D:56:76:61:A9:C7:26
X509v3 Authority Key Identifier:
keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a7:fe:71:da:44:c5:bb:e2:54:3c:c2:3a:b2:65:7d:1e:10:
20:35:8e:99:70:0c:a1:a4:54:f4:a7:50:31:bb:e1:6a:f6:36:
58:73:7e:2a:3d:c2:1d:25:2a:89:0e:49:82:a9:20:7c:bb:19:
d5:e9:99:c0:a5:9c:6d:aa:0c:d8:22:6e:0d:8c:1b:96:9f:24:
30:ec:a3:7c:c4:0e:b1:ea:87:16:1b:06:5a:fb:26:23:ec:ee:
e9:95:72:22:cd:cf:a0:cd:8b:39:6f:8e:45:63:a7:6c:f3:79:
38:d8:60:46:42:16:07:71:4c:b4:dc:e6:da:f7:d6:46:ff:80:
12:4c:ad:e8:5d:e9:39:32:49:14:90:b1:ca:31:9a:06:80:84:
7c:e6:e7:5d:b7:dd:48:9b:f9:24:3a:06:55:e1:a6:30:a5:d0:
b6:0c:5d:d2:bc:d2:55:42:6a:a8:14:2b:d3:67:87:ed:18:da:
4e:4d:09:55:14:11:df:5a:14:a1:86:49:b7:e1:32:2a:c6:04:
b8:ca:c7:c3:91:22:4f:10:0d:ca:94:e7:02:bf:6e:06:3e:ab:
8e:f2:9f:9b:c4:e4:a1:6d:d7:ab:b1:41:db:91:b3:6c:66:f9:
54:f3:95:ba:3e:7a:b6:ec:2f:25:9f:fa:09:27:47:88:5b:3c:
67:b3:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:12 2026 by rpki-client