
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier: iD9n+holXXo48NJJqw5XGz98ChoVshvCOSI5GA20UCw=
Subject key identifier: E4:CB:88:BC:6C:51:DF:D5:B0:B3:7A:46:42:01:14:30:48:98:C8:0A
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number: 63
Signing time: Fri 23 Oct 2026 08:37:44 +0000
Manifest this update: Fri 23 Oct 2026 08:37:44 +0000
Manifest next update: Fri 30 Oct 2026 08:37:44 +0000
Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: MmYhZl8pjmiAOajFAd7dc8zJ1LFchxrYNChIukRR+JM=)
2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Validity
Not Before: Oct 23 08:37:44 2026 GMT
Not After : Oct 30 08:37:44 2026 GMT
Subject: CN=6adb1cd8-7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:73:7a:d2:79:e2:df:0b:14:2e:08:bf:a2:
cd:04:2d:a4:98:b8:50:14:c4:33:69:bc:98:d0:e6:
5d:ac:cf:8f:dd:f2:63:c7:db:0d:df:66:03:69:3e:
f4:75:a4:71:1e:58:50:bb:ef:e4:64:ce:d7:ac:e3:
98:0c:30:b6:f6:f9:80:b6:98:1d:f4:1e:34:6c:e5:
ff:44:14:b7:44:35:ee:c2:da:d6:3c:7e:48:1e:39:
b7:72:4a:b8:47:fa:4a:8c:61:99:ba:9e:47:5d:05:
28:ac:66:d2:26:42:7f:69:73:25:7a:a5:91:76:ec:
e9:94:c1:ff:5d:74:79:46:00:21:63:46:57:c2:45:
79:73:fe:48:ea:b1:c6:90:b2:32:d2:dc:e4:85:67:
db:87:ac:72:95:d0:e2:d7:55:6c:e9:00:1c:02:85:
9d:44:be:79:50:87:ab:4e:3f:dc:f0:e6:8c:26:e3:
6b:71:a1:68:da:04:b4:24:bd:a7:da:1e:9e:f8:7e:
fc:2e:8b:fb:37:63:13:d9:2e:00:c2:2e:4f:93:b2:
90:76:44:95:53:48:aa:35:8a:ad:c0:f2:fd:be:4c:
23:8d:7d:c5:7d:d1:61:5c:00:aa:b4:16:ee:98:f4:
5d:b7:d6:59:c0:49:51:c1:3a:bc:24:7e:93:fa:21:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:88:BC:6C:51:DF:D5:B0:B3:7A:46:42:01:14:30:48:98:C8:0A
X509v3 Authority Key Identifier:
keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:48:e1:2a:76:f0:f6:17:c7:f4:2e:26:4d:d8:fa:c4:c3:
53:74:14:42:f7:e9:ee:12:b8:81:83:16:90:a7:41:b2:26:57:
08:34:d9:52:af:ae:4c:66:8c:3d:6b:29:00:5c:57:be:15:60:
d7:88:91:7c:14:31:18:cd:23:dd:f2:c0:79:14:b6:bf:d6:6f:
bf:24:d2:52:53:d5:2c:40:87:6a:72:4a:0f:fc:87:08:33:c2:
a8:65:c7:af:79:c0:64:94:69:c9:67:2a:3e:e2:68:8b:a8:94:
b6:a3:11:e9:97:44:fe:43:1e:5a:be:31:90:06:08:31:d1:76:
19:df:60:e3:3b:dd:aa:d7:b0:0f:87:61:6b:96:db:ef:3e:ea:
47:95:a5:e2:3f:f5:d1:10:ba:a9:cc:36:b7:7f:1a:06:97:d3:
b0:5b:40:7a:20:e4:c1:7a:d7:c3:44:ad:c5:8d:55:b4:35:f5:
75:a3:bb:9d:db:78:87:41:ad:bc:90:68:38:c5:7f:cc:f4:8c:
18:19:8a:6a:f2:f2:1e:26:e2:07:e1:06:00:40:43:86:75:54:
ee:a1:d1:62:c3:b5:65:d2:be:6b:4b:b5:e9:24:e9:99:ab:f4:
af:eb:63:c3:25:e0:37:1e:96:ef:ab:f6:40:2c:19:de:22:f1:
e1:a3:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:09:19 2026 by rpki-client