
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json)
Hash identifier: Lc309kh2T+Q/lhWdTjmJTRon9WWCKuGvc/sGOcFty8g=
Subject key identifier: C3:3B:45:CD:5D:E3:CE:E6:F7:9F:8C:5A:B9:34:C4:5E:0D:A8:27:FD
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
Manifest number: 0202
Signing time: Tue 03 Nov 2026 03:58:37 +0000
Manifest this update: Tue 03 Nov 2026 03:58:36 +0000
Manifest next update: Tue 10 Nov 2026 03:58:36 +0000
Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: rLO0rvo7FMI+JjSZVHLAM1yPzt7w8Pjrr02a6ghSTHk=)
2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: yp4A2ISsOVYuTmO6d9hWCCMDfhvrp6UrWBSAOlQdSqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Validity
Not Before: Nov 3 03:58:36 2026 GMT
Not After : Nov 10 03:58:36 2026 GMT
Subject: CN=6ae95bec-6fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:90:4c:d2:04:16:c9:f2:43:54:06:5d:8b:
32:7f:9e:0a:9e:27:94:2d:04:6f:b6:c4:30:38:c8:
7c:03:7a:28:41:ba:0d:09:a0:04:d9:27:9a:ce:34:
7f:34:08:e5:1d:0f:d5:0d:b0:71:91:5c:98:e6:57:
fe:38:99:06:e2:f7:9b:a6:d3:67:f6:f1:30:82:4e:
aa:66:24:54:c5:bb:f3:34:3a:04:69:fc:d3:15:5d:
36:b2:1f:57:d9:66:7e:e1:7b:e0:a9:4f:8a:da:23:
04:c3:06:73:da:eb:40:69:02:4e:41:bb:eb:7c:66:
db:c6:91:3c:f8:b5:ed:40:80:ef:85:86:1a:96:54:
d7:9d:97:c4:4d:62:ef:69:a5:e6:99:be:1a:57:d1:
2c:3a:9d:7f:af:1d:8e:ef:17:27:52:b8:99:e3:11:
e6:c6:fc:cb:df:af:8f:64:47:8b:70:d1:3b:dc:85:
24:19:01:ee:84:c8:cc:94:95:83:89:f7:72:a8:8f:
3a:a9:10:10:81:95:ec:60:e7:88:27:1d:1c:1a:4b:
20:b7:8f:e1:78:8b:07:88:2a:a3:83:c3:1d:30:e2:
1f:29:d9:49:e1:10:e2:28:c2:19:9e:14:1d:42:9f:
37:ad:33:b6:30:12:9b:2d:99:c2:ee:e5:6c:e7:99:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:45:CD:5D:E3:CE:E6:F7:9F:8C:5A:B9:34:C4:5E:0D:A8:27:FD
X509v3 Authority Key Identifier:
keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:90:10:2b:18:75:12:8d:ff:3c:2f:e3:c7:40:58:14:b7:e2:
da:1b:8b:76:59:ad:a8:ca:22:03:52:70:ba:c5:11:12:7e:5e:
e9:f1:f3:99:de:39:da:05:85:0b:b8:82:f3:88:f8:a8:76:05:
5e:7b:fd:cd:46:10:e6:d3:db:71:6f:90:3b:8e:db:44:b7:a1:
14:b8:6c:85:de:cd:25:e3:27:56:dd:05:1a:f5:11:a0:9e:c9:
37:56:01:66:ae:af:07:88:24:37:af:37:c3:8b:0d:1f:3c:d2:
56:e9:21:1d:a4:09:ab:b3:d3:ad:3b:e0:59:6c:fa:86:6e:b9:
ba:f1:b0:42:dc:e6:e4:db:21:7f:0f:ee:ff:bf:c9:81:be:b7:
f0:bd:8b:d1:e4:e5:61:35:50:1a:9d:7e:76:d2:21:2c:04:24:
ad:da:01:51:a4:af:c4:b8:45:1b:3e:3a:0e:2d:24:6c:3f:1e:
d9:a7:01:c7:36:95:46:12:67:65:64:b8:0d:89:fc:96:e0:05:
e2:5a:bf:c0:98:c0:3e:e8:66:81:28:f8:9d:9b:f4:c3:a9:b8:
37:1a:8e:36:47:8a:ec:82:3e:ed:b0:af:27:ef:49:99:a1:18:
be:34:46:bc:92:76:4b:7e:8e:3e:54:c4:a1:48:c6:2f:9a:42:
b0:de:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:19:15 2026 by rpki-client