
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier: bVM/g2XDsFwMRSICiw/Z3/MPmENkLRgR8+rcbslFqGM=
Subject key identifier: 86:7A:CB:BA:2E:D0:3C:53:92:C0:9B:D2:AF:75:DE:94:E9:1A:98:29
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number: DD
Signing time: Tue 13 Oct 2026 02:16:46 +0000
Manifest this update: Tue 13 Oct 2026 02:16:45 +0000
Manifest next update: Tue 20 Oct 2026 02:16:45 +0000
Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: EVRCj2q53KnfaBzSZtKnahVJnzVAR0tdObzNK8TUxWk=)
2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Validity
Not Before: Oct 13 02:16:45 2026 GMT
Not After : Oct 20 02:16:45 2026 GMT
Subject: CN=6acd948e-2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:a4:fd:25:8a:ad:e0:af:0b:ab:aa:7b:69:
11:93:e8:be:b5:eb:0b:d5:9b:f9:33:77:8e:5b:5a:
d1:9f:28:d2:f7:cd:db:9d:66:f5:87:9a:9e:08:5d:
aa:c3:f5:93:13:a8:f5:47:1c:5f:63:43:c3:12:01:
4d:6f:a1:58:0c:f7:79:56:5a:39:5a:08:ec:7c:f9:
5d:22:ea:a8:28:a9:ce:1b:c5:3e:e0:a2:0d:d2:b0:
3d:33:50:a8:32:05:0a:0e:75:56:7b:6b:6d:9c:26:
a6:d9:3d:69:d2:13:d1:fe:04:ea:93:0e:cc:9c:23:
d2:8b:72:91:fb:f5:98:df:34:e7:f0:1f:06:37:bb:
60:f2:42:3c:b1:b1:cb:72:52:d7:d6:e7:8c:c4:97:
66:0f:7b:90:2d:52:39:8b:a8:17:6e:6e:e9:cf:2b:
da:53:a8:ba:77:e6:10:99:d8:9a:f2:f1:f4:af:02:
87:22:72:92:2b:a3:7b:52:f1:87:17:9a:c2:41:ac:
ee:87:93:f1:c2:de:3e:73:8e:e2:7f:d1:f8:5c:56:
91:17:37:24:5e:2c:1b:b1:5b:58:5b:65:0c:1f:49:
8c:4e:44:04:1f:3b:24:3c:d4:da:3d:8a:dc:66:0c:
1f:f6:56:83:74:97:b4:3e:80:da:72:59:70:ca:88:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7A:CB:BA:2E:D0:3C:53:92:C0:9B:D2:AF:75:DE:94:E9:1A:98:29
X509v3 Authority Key Identifier:
keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:08:d1:cb:4c:4f:87:e2:69:4f:a4:10:0d:96:4b:f4:c4:
9a:86:e3:7d:be:82:da:fb:ab:7c:99:92:13:13:58:b7:89:7c:
8d:5d:bd:cc:c7:b3:7c:1f:6d:9c:e5:e5:c9:86:8b:78:d4:b1:
d6:a2:63:59:50:27:f3:ef:3d:48:5f:29:4f:81:96:df:a1:3e:
3e:80:75:55:62:97:c8:05:4a:86:13:5a:3e:f1:46:41:d9:20:
6e:70:09:ac:86:a4:61:c1:53:b4:84:82:f0:8c:52:c6:bd:b7:
a3:a2:9f:9a:23:37:85:4f:81:12:df:f0:86:56:72:66:8b:0c:
e7:18:9f:61:6b:29:c6:32:f5:86:52:52:83:61:98:c1:13:a6:
dd:a8:1c:b3:26:ee:e9:0b:67:20:46:fe:8c:c0:2d:53:0a:1b:
ae:b4:78:12:02:89:dc:e2:4b:11:62:b1:46:69:02:86:e0:11:
09:02:d0:90:c1:48:00:5f:26:86:d2:46:65:ef:a1:ca:bc:e3:
5c:79:ea:b7:2e:cc:bd:e0:98:46:3a:a0:31:b4:65:3a:0a:4b:
5d:2b:0c:73:dc:b9:a7:3f:7d:e7:ef:0a:06:b1:be:ce:89:f0:
7d:97:8e:20:65:f4:2d:05:89:cd:fd:90:4b:4e:f5:e5:6b:08:
a2:0c:77:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDAyNEQ4RjE1QUEzOTc3MjE3NTg4M0EyRURDMTY1MDE0
RTE5MjhBMUEwHhcNMjYxMDEzMDIxNjQ1WhcNMjYxMDIwMDIxNjQ1WjAYMRYwFAYD
VQQDEw02YWNkOTQ4ZS0yY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTWk/SWKreCvC6uqe2kRk+i+tesL1Zv5M3eOW1rRnyjS983bnWb1h5qeCF2q
w/WTE6j1RxxfY0PDEgFNb6FYDPd5Vlo5WgjsfPldIuqoKKnOG8U+4KIN0rA9M1Co
MgUKDnVWe2ttnCam2T1p0hPR/gTqkw7MnCPSi3KR+/WY3zTn8B8GN7tg8kI8sbHL
clLX1ueMxJdmD3uQLVI5i6gXbm7pzyvaU6i6d+YQmdia8vH0rwKHInKSK6N7UvGH
F5rCQazuh5Pxwt4+c47if9H4XFaRFzckXiwbsVtYW2UMH0mMTkQEHzskPNTaPYrc
Zgwf9laDdJe0PoDacllwyoi8vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZ6y7ou
0DxTksCb0q913pTpGpgpMB8GA1UdIwQYMBaAFAJNjxWqOXchdYg6LtwWUBThkooa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80QTEyQTMzQzgy
RjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5RjFpRG91M0JaUUZPR1Np
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2loby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5
RjFpRG91M0JaUUZPR1NpaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgU0I0ctMT4fiaU+kEA2WS/TEmobjfb6C2vurfJmSExNYt4l8jV29zMezfB9t
nOXlyYaLeNSx1qJjWVAn8+89SF8pT4GW36E+PoB1VWKXyAVKhhNaPvFGQdkgbnAJ
rIakYcFTtISC8IxSxr23o6KfmiM3hU+BEt/whlZyZosM5xifYWspxjL1hlJSg2GY
wROm3agcsybu6QtnIEb+jMAtUwobrrR4EgKJ3OJLEWKxRmkChuARCQLQkMFIAF8m
htJGZe+hyrzjXHnqty7MveCYRjqgMbRlOgpLXSsMc9y5pz995+8KBrG+zonwfZeO
IGX0LQWJzf2QS0715WsIogx37w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:36 2026 by rpki-client