
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: fj92SZmHEGlPvzBZV3jqpyl+Y0VI8dtiv1pTBXnjB58=
Subject key identifier: 01:B4:F2:BC:2A:76:36:BE:69:90:C9:4C:CF:0C:83:63:D6:07:A8:85
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 19C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 19B3
Signing time: Fri 04 Sep 2026 16:21:55 +0000
Manifest this update: Fri 04 Sep 2026 16:21:55 +0000
Manifest next update: Fri 11 Sep 2026 16:21:55 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: Muo4aALnGuwBJLO1w12QgKsH4sM/PKHVG2AqN6VHDQc=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: yEvt1EWswbQO/Y1nNlXzDVEHUkJrE0Bdp2ONLKPwkEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6600 (0x19c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Sep 4 16:21:55 2026 GMT
Not After : Sep 11 16:21:55 2026 GMT
Subject: CN=6a9af023-bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:2e:b7:98:2c:21:f4:00:dd:6e:ab:4a:b2:
5f:16:bd:18:d9:bd:98:62:73:3b:05:35:63:1f:f3:
57:64:77:5c:f7:be:12:f8:b6:22:54:67:8a:4d:1a:
23:b9:b1:21:81:79:7c:cb:f0:48:6c:a4:f5:51:c8:
35:5d:52:90:c1:ee:21:0a:56:aa:d8:f0:7f:61:aa:
17:f6:ea:42:b0:61:42:28:00:91:40:26:84:e4:68:
72:9e:30:f8:2c:00:ff:e2:fd:9f:5f:73:7a:1c:2e:
2e:7b:bc:d6:eb:43:8f:36:0f:cf:87:a3:51:23:2c:
e9:0d:7f:a2:63:81:8a:f7:da:58:95:61:6b:7a:25:
02:08:05:31:ff:c7:93:e9:e0:f3:23:9d:d9:71:25:
2a:4c:4c:b5:61:37:28:90:21:63:f3:cf:07:76:1b:
59:f9:b4:5f:88:20:22:71:82:d3:18:55:c4:da:a0:
23:5e:70:ac:2f:ff:db:95:9e:21:8c:09:19:23:d3:
fd:30:2c:98:80:63:40:47:da:90:9d:bd:23:73:02:
19:13:91:6e:fe:50:ce:b1:eb:15:de:71:2f:f1:43:
79:af:6f:ce:6f:e5:6b:d0:48:32:6a:f7:21:1f:44:
64:f5:bd:07:5b:e7:ee:9e:be:44:86:47:81:cc:50:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:F2:BC:2A:76:36:BE:69:90:C9:4C:CF:0C:83:63:D6:07:A8:85
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:b2:ef:2e:62:05:66:e1:d3:b9:32:ed:95:c6:72:98:98:
49:48:78:43:a9:8d:3c:5c:aa:70:58:d0:34:e0:60:db:3f:f4:
f5:78:a1:22:0f:1a:75:15:fc:36:28:e5:ad:84:97:ca:19:f5:
cd:aa:e2:e1:1e:77:ea:f6:48:bf:fe:c2:d1:39:00:2e:aa:36:
5d:87:54:10:02:97:bf:8b:53:5a:8b:46:9f:93:20:f2:e2:4b:
a6:9d:cb:e9:24:ee:bc:ef:70:dc:a5:37:0e:06:c8:3f:0e:84:
4e:bd:0c:e1:00:fc:db:28:34:59:17:86:b9:de:42:da:70:ff:
68:24:1b:86:36:d5:b0:b3:6f:b9:b8:5d:fc:3e:54:9c:b0:d3:
b0:e4:d0:1a:19:4c:1c:4a:69:8b:2a:fb:43:15:1a:ca:f6:7b:
b9:2b:a6:81:1d:8e:fb:d6:99:e2:c0:36:f5:56:c9:8a:5b:06:
2b:49:64:43:a6:e6:8b:7c:20:8e:b1:54:ab:35:ff:3b:91:02:
e5:04:97:b6:15:98:89:95:ee:75:8c:6c:b7:a5:9f:53:84:0d:
30:e1:c4:8b:b2:79:f4:93:34:ba:d9:16:1c:f9:d0:74:09:d7:
6c:da:b9:84:f7:94:cb:7b:ce:8d:ae:5e:a1:73:4e:57:7b:9e:
43:e2:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:28:22 2026 by rpki-client