
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json)
Hash identifier: cJkItEO17xi+7A3cW+57OPkQbSdfSCINowxEECh7IF0=
Subject key identifier: 1B:A0:CE:1C:04:62:72:AB:73:5F:AF:AB:79:2D:43:A0:6C:FA:B3:78
Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
Manifest number: B1
Signing time: Sat 03 Oct 2026 07:45:55 +0000
Manifest this update: Sat 03 Oct 2026 07:45:55 +0000
Manifest next update: Sat 10 Oct 2026 07:45:55 +0000
Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: D4m1PpumaB4lswUobXpFVuy5izfHPUEgZ8ekBO+iP7Y=)
2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: 0eYQs4+CcW1n3DAWa3b99gSSE/qKrGxFztudMbxy8B8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Validity
Not Before: Oct 3 07:45:55 2026 GMT
Not After : Oct 10 07:45:55 2026 GMT
Subject: CN=6ac0b2b3-966c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:67:ee:be:d1:e1:cc:c9:6d:11:da:75:12:
3c:98:c8:73:37:30:8d:3a:d3:80:4c:79:28:07:31:
d2:52:c4:25:e9:f1:41:95:a2:de:81:39:bb:d6:50:
a3:6e:19:6a:6e:23:5b:71:3d:b6:f5:e4:0c:46:0e:
62:0f:7a:b7:79:72:9c:5d:ca:50:39:b4:4b:ac:32:
d3:4e:0c:8a:34:95:a7:09:84:b1:98:89:af:4e:ee:
69:4f:68:f9:a3:3c:0e:68:7e:50:99:9f:32:b8:14:
a9:f1:c0:0a:53:62:a2:91:be:ab:02:c1:dd:17:9f:
38:e4:c6:79:41:90:fb:36:68:97:80:dd:af:73:90:
5a:a2:d9:57:83:5e:a3:2c:81:4e:c9:d1:4b:b5:be:
7d:78:90:e7:9c:80:47:6d:ab:6b:b6:51:57:2c:9b:
19:67:bf:3b:f5:32:a4:79:50:99:8c:60:ea:0b:7c:
a4:88:b4:c1:c6:a7:43:ba:3c:cc:27:f6:cd:78:85:
88:08:b5:64:f0:e5:39:5a:7b:71:08:66:77:ef:2f:
5d:7a:4f:eb:93:11:fa:f2:14:46:1c:a5:c9:cf:a3:
b8:21:16:fe:07:0d:3d:8d:a5:da:17:ea:a7:7a:62:
4b:01:31:d3:93:01:d2:a4:2a:87:74:fe:00:49:f1:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:CE:1C:04:62:72:AB:73:5F:AF:AB:79:2D:43:A0:6C:FA:B3:78
X509v3 Authority Key Identifier:
keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:ac:0d:70:6f:e5:f4:fd:f8:79:15:e0:be:85:98:da:4f:
e2:2b:82:16:45:8d:d8:4d:50:2c:6d:50:0b:da:47:df:5c:58:
fe:34:bc:10:bd:02:c7:16:6f:7a:5c:b7:c8:cb:4e:85:c9:96:
e4:d9:7e:41:95:f7:c6:ac:43:48:e5:ae:b4:b2:7c:0b:30:72:
d9:df:a7:9e:9c:9e:09:fe:cb:13:a1:c1:a5:6e:9b:4d:02:5d:
8f:a0:8b:ec:78:fd:51:d3:64:ff:f4:7f:2e:fe:5c:64:1a:f8:
79:bb:b6:36:3b:ed:7a:35:b4:80:76:17:30:f4:18:a7:ef:04:
ca:97:8a:c9:07:db:da:bc:a0:d4:5d:ac:02:94:f3:64:a5:d5:
88:99:ae:b8:e3:e5:86:f3:bb:29:0f:c4:29:3c:40:6a:58:c6:
0e:58:b2:50:a8:34:47:f3:41:02:c3:46:0f:6a:40:61:21:04:
99:1a:ae:4b:b0:32:fa:d7:9c:07:8a:af:f9:b5:5d:3e:f6:24:
d1:73:09:cf:b9:b3:5d:33:68:57:58:6b:8f:49:e5:10:16:bb:
2d:fd:3b:41:35:82:11:de:bd:6a:c4:d4:6a:3f:51:de:23:11:
1f:b5:cc:6d:38:8d:f4:39:1e:f5:1d:28:a1:8d:a7:3d:45:e7:
9f:d7:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:09 2026 by rpki-client