
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier: 513xYeR6FaiI5E7X2qZZv8mXfWfnApb3eI/QLVnEnsw=
Subject key identifier: 91:04:3F:F8:74:4B:E0:71:C0:A4:62:09:24:72:FC:2D:C4:06:A8:AF
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number: 026D
Signing time: Thu 29 Oct 2026 02:41:00 +0000
Manifest this update: Thu 29 Oct 2026 02:40:59 +0000
Manifest next update: Thu 05 Nov 2026 02:40:59 +0000
Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: M1RnP2wtxyO2aGF9++ie5sRb9MMmrPbtrSn98voozvs=)
2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: rkU50GhDXfA75Ey44jTzfhYBTmuiCkN9RKfLyY3jdes=)
3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 02:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Oct 29 02:40:59 2026 GMT
Not After : Nov 5 02:40:59 2026 GMT
Subject: CN=6ae2b23c-7fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:ef:b4:16:30:a6:99:2d:90:47:55:86:bd:
48:21:dd:06:be:4f:b9:2e:e8:63:71:c0:40:72:23:
86:63:81:b9:21:36:4b:0d:be:9c:15:e4:7d:97:59:
33:d8:60:55:48:75:a9:2d:8a:26:14:cb:ca:04:1f:
74:8c:30:f6:87:b6:4a:95:a7:ab:d4:1a:b0:6e:a8:
b4:4d:d9:c8:aa:99:69:0a:f5:18:34:6b:74:13:36:
21:b9:90:47:94:34:66:05:53:c8:3b:98:93:4b:33:
af:a2:21:22:dd:eb:01:a8:8b:66:a5:f0:da:5e:96:
99:7d:56:18:3b:3f:48:5a:95:47:94:3e:48:00:c1:
0c:dd:0a:ed:0f:f5:93:ce:76:20:b8:23:02:98:b0:
0b:64:89:01:e8:7b:a0:c6:3e:da:f1:2a:a2:dc:ff:
55:8e:49:3f:12:83:82:7a:69:c1:1d:2d:28:0c:22:
a5:06:71:1e:36:33:42:1d:47:c2:32:28:63:00:1c:
f0:b5:63:8a:d1:71:f4:da:97:9c:71:b4:df:7d:cd:
de:71:73:bc:3f:b3:af:18:f8:28:50:09:53:dd:bf:
58:d1:9f:e0:37:d5:6d:e3:6a:78:cc:f9:a0:a6:4a:
c7:21:07:3b:4f:18:43:7d:1c:5a:53:ff:60:cd:fe:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:3F:F8:74:4B:E0:71:C0:A4:62:09:24:72:FC:2D:C4:06:A8:AF
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f3:76:0c:0e:a0:8e:54:58:9e:56:b1:08:0a:7b:21:05:d8:
9b:25:32:6e:ba:be:9b:7f:dd:be:e9:90:d8:78:88:0f:eb:57:
8d:c2:d6:de:57:0c:dd:a2:b0:7b:19:b1:6e:b6:a0:70:56:50:
dd:5e:9e:e2:c0:28:d0:cf:d2:85:7b:7c:48:48:2e:d5:0d:43:
bb:e1:02:12:22:10:64:08:49:3a:ba:53:9b:16:12:6f:67:55:
e0:74:9e:16:0e:64:66:51:90:22:e2:37:2b:99:3f:a2:c6:e5:
fc:a4:cb:89:f2:f3:4b:6e:60:22:a9:49:4e:64:fa:43:bd:91:
80:d1:1b:70:30:73:ca:c9:f1:33:a6:f3:4f:5e:be:14:e5:08:
06:3b:40:6a:03:a0:dc:8f:1a:06:3c:64:e5:dd:f1:58:09:08:
d8:d2:a8:ed:1f:cd:cd:70:aa:26:fe:86:db:3b:43:43:4e:ae:
ff:60:0a:df:0b:65:5d:4b:77:7f:a4:e0:3f:d7:75:e0:1a:99:
3e:6e:30:f4:33:b1:49:5d:5c:6b:64:40:9f:f6:a8:76:f2:72:
43:8b:48:6a:39:e3:cb:ca:52:08:cf:bd:88:62:b4:f0:c3:0a:
3f:39:0e:ee:b9:95:a8:e2:58:ac:db:6b:f0:8b:82:e2:6b:88:
96:0b:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:31:58 2026 by rpki-client