
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
File: cIW1tFSazbW2wnBMhbp4h2D4iic.mft (raw, json)
Hash identifier: 4c4h9mmj4XE/d0kGgW+/vBjhnmGyrgnLSXrTvxNN4XI=
Subject key identifier: 16:BA:EB:66:8D:A2:0B:90:D4:47:6C:03:C7:85:E7:7E:5F:4F:5D:1A
Authority key identifier: 70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
Certificate issuer: /CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Certificate serial: 0C88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
Manifest number: 0C7E
Signing time: Sun 04 Oct 2026 18:42:55 +0000
Manifest this update: Sun 04 Oct 2026 18:42:55 +0000
Manifest next update: Sun 11 Oct 2026 18:42:55 +0000
Files and hashes: 1: cIW1tFSazbW2wnBMhbp4h2D4iic.crl (hash: o3ZlCqj6qm7bROHREHYFRGWAJJ4xcIHCnQopwo7dLQs=)
2: 002DDDC22B9D11EA92F3094CC4F9AE02.roa (hash: bcFMpQtRC/rqeGP9esVeD25xYCU2sXQbGEoW2r6Fpqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91722A3, serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Validity
Not Before: Oct 4 18:42:55 2026 GMT
Not After : Oct 11 18:42:55 2026 GMT
Subject: CN=6ac29e2f-de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:ee:8c:65:88:88:b2:3d:26:ac:11:4f:ce:
67:78:ae:a3:94:37:10:34:f7:4e:7b:d7:2b:aa:0b:
88:7c:bb:58:5d:b4:bd:63:e6:e0:f7:a1:dc:0c:57:
b0:53:cb:af:43:66:f4:a0:8f:94:3e:83:b6:ba:ca:
4e:97:29:17:57:fe:ef:50:85:0a:59:3e:b3:7d:a6:
c6:5f:8d:88:fc:9e:82:94:75:c5:8c:f7:7b:6d:43:
63:2f:36:83:c1:c1:ad:3f:5a:60:da:25:b8:10:fa:
c2:48:9d:5b:0c:69:82:a7:9f:15:ad:f4:db:76:1e:
36:e2:eb:0c:1e:59:a7:2e:f7:7b:74:c3:46:2f:44:
b2:c8:f0:64:81:76:e6:bb:a1:21:7e:8b:d3:0a:a5:
af:fd:12:66:14:2a:a8:5d:84:d0:83:cc:39:0f:f3:
54:89:24:34:41:1a:63:7e:bb:c2:c4:79:30:eb:23:
c6:f7:0f:b6:4f:63:2e:c4:ed:ec:a5:b3:f1:bf:72:
36:29:ef:62:ce:91:47:27:ce:27:03:e9:22:7b:d9:
8c:3b:c6:a1:fc:a1:db:43:f2:1a:37:ac:69:2e:2a:
04:2c:c1:d3:c8:79:32:e6:71:33:93:28:e4:e8:06:
6a:94:70:64:83:07:36:af:a2:fd:22:28:8e:43:f9:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:EB:66:8D:A2:0B:90:D4:47:6C:03:C7:85:E7:7E:5F:4F:5D:1A
X509v3 Authority Key Identifier:
keyid:70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:0f:65:64:5c:1e:08:59:8d:49:bd:76:f0:69:bf:6c:49:
d6:49:7d:a2:6d:6d:08:8d:7c:0e:85:08:04:d9:05:1b:61:3c:
9f:40:d6:23:7e:63:08:bf:dd:ee:49:4a:4c:19:aa:f4:ab:d3:
96:a2:12:ca:43:4a:6f:f0:a2:29:c3:42:7c:df:f7:2f:d7:71:
74:1f:32:5a:0d:0f:7f:46:ab:d9:cd:8a:d6:44:30:d9:c1:9a:
66:c0:08:59:64:65:f4:7f:da:cb:23:d7:25:45:39:75:cb:df:
ff:cb:17:bc:da:35:30:18:88:dd:47:2a:7c:b7:af:4e:0e:26:
c7:f6:ca:05:64:f6:35:32:f0:b1:ec:7a:49:49:74:12:f4:2f:
26:53:fb:ec:4e:ef:14:2e:f3:47:84:6c:d1:49:4f:3f:6d:ba:
81:16:2a:78:bf:9e:0f:ac:af:c1:3c:a5:6a:32:dd:ba:13:49:
2e:72:92:c4:5b:7f:21:25:d3:e7:fb:59:4e:c0:ea:19:55:6a:
66:c5:c1:0d:64:92:b1:5a:e1:d7:f6:74:00:aa:19:3e:55:f8:
12:d9:f5:a1:7b:ab:9f:1a:09:56:d6:ae:d7:09:4e:bb:d5:c5:
33:06:21:df:df:82:e3:0e:a5:cd:1c:1d:36:95:91:fc:f5:7f:
c2:f1:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:23:29 2026 by rpki-client