
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: Yv20SMiC051WkG7j+FYyodQkEScU1k/6RmWzC0HjFRY=
Subject key identifier: A5:5A:33:A8:EE:6E:6D:24:AA:B4:93:7C:10:86:1A:41:5B:78:59:BE
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 0822
Signing time: Fri 02 Oct 2026 21:28:41 +0000
Manifest this update: Fri 02 Oct 2026 21:28:41 +0000
Manifest next update: Fri 09 Oct 2026 21:28:41 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: gKagKxC41teYr4QAqKh8aMacSxAmLGWTUoO4VWMRY0s=)
2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Oct 2 21:28:41 2026 GMT
Not After : Oct 9 21:28:41 2026 GMT
Subject: CN=6ac02209-7d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:e1:38:60:60:8a:e4:f2:95:cf:18:44:3f:
01:54:4e:8c:81:81:37:8d:af:60:1c:aa:68:dc:67:
52:de:32:13:8f:53:2c:e0:03:10:21:aa:8b:3e:dc:
2f:7d:02:45:c8:44:cd:bd:45:7f:4f:21:52:75:17:
17:3c:b5:91:e3:d7:d4:ea:b2:f2:0f:f5:b9:51:20:
75:d4:54:69:c3:0d:88:52:18:25:61:7b:b0:05:ff:
76:9a:e7:bd:2c:f8:1e:95:41:f5:5a:75:eb:44:0c:
78:8e:4b:57:2c:ec:45:62:7a:7f:a9:9c:f4:45:1a:
2f:73:2d:84:b7:5a:61:aa:72:21:16:6e:53:ff:b3:
35:16:30:7f:22:f8:5a:eb:ae:9f:3f:2b:c2:de:0b:
39:fc:c7:a8:9b:09:77:04:6d:ac:72:b9:0d:e5:07:
8d:0a:8d:27:61:1b:8b:75:68:a1:83:52:e5:8f:06:
15:fa:03:3d:b6:b5:aa:71:45:d2:35:0c:13:46:a8:
f3:90:4a:b1:7e:95:d6:7a:f4:29:63:80:df:94:2a:
cf:be:25:ac:63:e0:4f:1b:ed:f6:f8:78:1c:bf:ec:
94:50:5a:20:20:6c:0e:58:21:6a:03:0c:89:c9:b5:
f1:d3:bb:92:d5:0e:77:4d:90:a2:77:0b:23:0a:d4:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:33:A8:EE:6E:6D:24:AA:B4:93:7C:10:86:1A:41:5B:78:59:BE
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8b:da:97:62:85:d1:68:2f:95:b9:cf:de:e4:14:dc:20:c7:
1b:7c:5e:26:39:6c:2f:35:30:cd:c7:97:7d:7f:2c:97:42:ce:
4b:d5:47:c3:8c:e0:c7:b6:f6:96:b3:3f:bc:23:df:62:25:4b:
85:cd:75:fb:3f:9e:00:d9:0d:17:ba:bb:e8:52:bc:a7:7a:5e:
8c:0c:5c:9b:f5:94:0d:e7:04:fc:53:fe:17:02:71:d0:7b:0e:
f9:3f:83:4b:45:50:b0:fd:f1:95:55:31:1a:42:3f:96:df:13:
d7:1d:98:69:7b:f2:29:fe:c3:39:50:c9:c2:17:5b:27:50:bc:
38:ad:b8:a2:14:3b:1e:f3:d3:7c:90:93:88:bc:49:2a:38:67:
d8:fc:09:2f:dd:59:2a:35:75:7f:e7:52:01:55:d1:ac:fa:8f:
6a:91:e5:fb:88:a9:9f:35:0d:63:2b:50:2c:ea:cf:8a:07:0b:
36:9e:88:5b:3b:dc:4c:6f:6f:a6:ec:67:30:03:0e:a9:7f:13:
ff:9b:6d:10:72:a9:f7:e8:c0:52:96:c4:2f:80:3e:3b:2e:a2:
3b:c0:9a:d8:dc:48:db:fb:cb:4a:5e:4e:ef:69:6c:b4:ac:e9:
a9:77:65:4f:08:0c:21:96:3e:f9:b2:7f:ca:21:e5:9d:44:30:
71:ff:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:03:16 2026 by rpki-client