
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier: y6ogfEfRyeTMwl7bf/whRAKIOGBZQD1s+rpcxZ+Ubas=
Subject key identifier: 6F:CB:2F:E8:E9:BC:6B:3E:4D:68:A8:AB:4C:A9:5A:E7:A1:3A:17:1F
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial: 0CCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number: 0CB4
Signing time: Tue 06 Oct 2026 18:42:15 +0000
Manifest this update: Tue 06 Oct 2026 18:42:15 +0000
Manifest next update: Tue 13 Oct 2026 18:42:15 +0000
Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: AsuqLALyq4qFaFOzyi+lTZLpT6P560/B4SYwfsaczI0=)
2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=)
3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Validity
Not Before: Oct 6 18:42:15 2026 GMT
Not After : Oct 13 18:42:15 2026 GMT
Subject: CN=6ac54107-d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:21:2a:53:84:eb:2c:d6:c9:75:cc:60:59:
2f:5f:e1:b7:71:d8:2c:d5:33:e9:e2:79:34:f2:80:
96:c0:16:fa:3d:74:91:3d:81:ab:d9:1a:a9:19:92:
be:3c:be:e0:12:44:1b:01:11:ca:de:11:f5:65:74:
bc:76:d4:9a:e7:e3:34:20:30:03:f9:0a:c5:84:48:
26:78:84:65:bb:ef:d4:d0:8e:cf:25:12:90:f0:9e:
67:5a:30:62:9a:d1:a5:7a:0e:dc:46:df:9b:f1:60:
84:f6:b3:e7:d4:0d:03:86:0d:eb:8e:88:39:fe:f7:
e2:d3:79:27:d3:e5:e9:90:8c:dd:96:20:c6:fe:46:
69:39:6b:c6:11:98:fc:fb:84:5b:9a:8f:12:93:eb:
95:3f:d5:c9:81:b0:a8:37:4f:cb:64:58:29:41:d4:
eb:2f:e4:a5:b4:62:0c:68:3a:08:2d:8a:62:98:82:
b9:0f:c6:72:58:36:8a:d8:4a:72:f6:13:be:b2:e0:
a9:a3:14:49:8f:bc:61:7c:53:0f:c2:85:98:33:c5:
ec:a6:23:b4:b7:b3:2f:ac:3d:ed:58:40:03:96:2f:
5a:4f:54:61:58:29:ad:4f:19:48:e5:de:a8:be:df:
ee:8c:9e:14:d8:7c:ed:42:09:71:ba:e6:e2:42:b5:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:2F:E8:E9:BC:6B:3E:4D:68:A8:AB:4C:A9:5A:E7:A1:3A:17:1F
X509v3 Authority Key Identifier:
keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d3:a9:2e:a6:1b:da:80:92:20:2a:7f:02:32:cd:c1:02:a8:
ee:94:51:02:d3:9f:12:35:1a:0e:81:99:76:9a:6b:a4:2d:70:
04:62:91:48:53:6f:77:be:33:ce:31:3d:b5:c8:ee:19:26:a3:
e3:fc:d9:58:c8:7a:17:42:d0:77:db:28:b1:b1:1c:59:ad:fb:
33:7e:f2:2a:b2:19:9a:d8:69:ad:9d:3b:d5:b7:58:a9:b6:ef:
0e:a2:09:85:31:ef:9d:5f:55:4a:43:c8:6f:5a:af:65:0b:d4:
11:b9:74:37:50:2e:b8:e8:8f:2e:a0:80:66:4e:28:a0:fd:6f:
55:33:5a:6b:7e:66:04:44:f6:d6:db:e6:6a:e6:53:24:9c:cd:
a7:bc:52:f7:ed:66:97:b4:02:61:49:88:65:ae:18:f6:3a:c2:
98:a3:b2:34:3e:47:6d:ac:40:aa:bc:b7:08:03:8a:ce:b5:a8:
06:b1:fc:75:9c:72:63:1a:9b:24:1a:3a:ef:ca:08:11:a0:2c:
36:1e:2e:43:51:62:8a:f9:e1:1f:37:fe:0e:66:10:12:f6:24:
85:0d:f7:28:48:9c:61:4a:b3:46:35:d9:81:0b:87:69:ef:04:
81:ef:c4:1d:09:b7:cf:c8:d6:e0:57:cb:2f:f7:26:2c:57:82:
92:fb:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:09:15 2026 by rpki-client