
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier: XYfZgEO/F+6BTv2NUk+gC/PKZUrHgILKvZBKfmr7Ncc=
Subject key identifier: 92:A2:C2:C5:18:FD:2C:CE:26:FA:A5:27:72:F4:71:B6:D6:2C:01:14
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 04EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number: 04E5
Signing time: Sat 03 Oct 2026 00:01:49 +0000
Manifest this update: Sat 03 Oct 2026 00:01:48 +0000
Manifest next update: Sat 10 Oct 2026 00:01:48 +0000
Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 4XzKFSYWIw9r/j9TgLFRwbqTP27V4aoCRsdkMKZqyPI=)
2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Validity
Not Before: Oct 3 00:01:48 2026 GMT
Not After : Oct 10 00:01:48 2026 GMT
Subject: CN=6ac045ed-ef9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:57:b1:60:36:19:91:41:c8:24:bf:92:85:
f8:14:1b:20:40:68:f7:cc:26:25:2b:b3:c3:eb:49:
65:39:70:0e:c5:3a:ab:7e:f5:14:a6:5c:b2:8f:b5:
ec:67:61:06:f2:73:db:44:a6:c3:b1:df:de:20:ba:
28:52:ad:90:79:d9:4d:4b:aa:95:7f:2b:ce:28:6f:
b5:e2:e6:ff:f7:da:c2:82:7e:c8:d6:14:ab:f1:26:
be:ac:51:89:56:5d:8b:22:1c:31:f5:57:3f:20:e3:
17:d5:73:ac:62:73:30:73:08:40:36:b4:c1:3e:fe:
93:56:9a:82:bf:e3:dd:75:38:59:a5:4f:02:9a:21:
2b:66:85:2b:64:d7:49:b1:b5:92:c1:38:55:76:da:
4c:0e:74:15:b9:a4:94:bc:3c:22:8f:61:06:36:9f:
ae:c1:ff:b0:11:a9:c1:4b:55:ed:b7:f4:cd:06:d7:
84:09:11:d9:5d:34:d1:71:c3:23:b8:06:d2:c7:01:
27:b0:65:e5:3d:ae:44:34:ed:39:43:68:8a:a6:55:
58:d0:75:a7:8f:84:f5:dc:86:92:a9:37:24:18:67:
d0:75:f9:dd:91:0c:b9:50:99:d6:46:63:5d:53:cf:
82:df:aa:e9:30:e5:cf:f6:1f:70:45:71:c3:32:31:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:C2:C5:18:FD:2C:CE:26:FA:A5:27:72:F4:71:B6:D6:2C:01:14
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:d6:04:d0:f4:fd:f0:35:3d:9c:f6:ca:d5:24:db:b6:12:
4b:f6:a3:5b:a7:fe:95:d9:42:eb:3f:2a:9c:7c:b7:b2:3d:68:
b6:aa:68:ad:5f:12:6a:6a:38:9e:89:bb:bb:e3:be:f3:f6:46:
04:52:fa:d0:e5:e1:30:e3:26:1b:72:91:38:28:c1:88:67:09:
72:d3:07:e0:4d:4d:35:06:a1:31:f3:25:af:87:bf:10:46:98:
8f:76:71:a5:12:17:bd:0c:c0:80:5a:b8:03:6e:a6:74:73:78:
38:a9:04:87:cd:3f:a0:59:2c:f7:70:3d:0d:8e:21:6d:1c:15:
1d:87:e4:39:39:f4:28:06:af:79:91:df:c7:7c:d4:0b:b8:c4:
80:ab:32:6a:0e:38:d5:4d:e4:83:6c:97:e5:fb:d2:af:82:c9:
5d:55:c6:f3:23:47:6a:a8:3d:2a:a7:fb:8c:80:bf:c6:72:df:
00:20:8b:63:0b:39:5f:b2:fc:68:09:46:5e:4e:9f:45:82:70:
49:bb:84:1f:a0:6e:19:e8:50:68:b8:e5:3f:95:be:01:fb:e6:
39:b4:12:12:7f:e5:8b:c7:a0:42:39:16:ea:d2:06:a5:48:a9:
00:64:6e:1f:18:8c:6e:85:41:51:52:12:82:5f:c2:b1:14:47:
26:dd:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:57:52 2026 by rpki-client