
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier: YjDegy1M3mWPpbmnRb8GhtUhLsKFjJ81PeT6m7bo1QE=
Subject key identifier: 1B:B9:FA:DC:EA:EF:C2:FE:9F:E3:30:73:C8:78:8F:9B:2E:99:B1:4A
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial: 0D59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number: 0D4E
Signing time: Fri 02 Oct 2026 18:18:34 +0000
Manifest this update: Fri 02 Oct 2026 18:18:33 +0000
Manifest next update: Fri 09 Oct 2026 18:18:33 +0000
Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: 9HEjEo5eJxh4s6iRboKB1zrTQCp3CEHMk9E+1wBMVSk=)
2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Validity
Not Before: Oct 2 18:18:33 2026 GMT
Not After : Oct 9 18:18:33 2026 GMT
Subject: CN=6abff57a-992f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:57:0c:ac:ef:12:2d:cb:ab:2d:26:93:4c:
ca:8a:b5:a5:fa:63:29:0f:5e:1e:ab:5b:57:1f:38:
2d:7e:4e:1c:80:f1:2b:5e:1d:76:26:4d:dc:35:30:
29:f0:5c:ce:0e:83:ba:c2:4d:39:0e:11:fd:9b:70:
c3:67:00:fe:e0:09:56:f6:dd:b3:72:c3:ca:04:d1:
7f:dc:86:22:87:2f:c8:ea:4f:2f:d9:7d:7c:d9:60:
21:76:d6:fa:cc:1d:a5:72:db:f4:f6:36:78:16:1f:
30:34:30:b4:90:de:f3:f5:35:e9:ad:cc:5b:a1:db:
72:1d:f1:de:b3:2c:1a:79:be:80:16:34:b3:2c:3d:
ff:52:66:64:51:93:6f:2c:7b:9b:ee:f3:3b:a6:37:
8f:ac:82:81:c6:db:f6:c7:25:bc:57:14:86:a2:84:
02:c4:02:54:50:80:9c:bc:bd:ec:b5:36:fb:c0:3e:
3a:0b:74:63:42:c8:04:de:d1:47:2e:56:b6:fb:52:
9e:0d:33:26:b0:f6:0c:46:a0:42:84:6a:a0:29:71:
91:82:62:74:40:32:45:9f:0e:cd:c8:8a:2b:32:38:
3e:25:be:f6:77:7d:2a:33:48:2c:b0:8a:10:3e:c7:
aa:23:8d:56:83:1f:e2:a5:72:5c:66:8a:e1:e3:90:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:FA:DC:EA:EF:C2:FE:9F:E3:30:73:C8:78:8F:9B:2E:99:B1:4A
X509v3 Authority Key Identifier:
keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:09:0a:97:60:7f:1b:f0:ca:5f:f1:ce:5d:52:94:69:2e:ab:
ce:03:7f:d9:85:84:df:24:13:88:40:60:96:e0:d5:0e:fa:99:
f4:fe:bf:b6:5b:17:1a:11:8c:70:49:ac:51:c8:3e:42:a9:38:
7b:ed:b6:26:3b:95:03:7e:11:41:61:b1:27:09:ea:a7:f6:5a:
9a:9f:9f:b5:67:03:15:7b:02:5c:9a:8d:db:c7:1b:50:cf:3b:
4f:2e:21:57:d1:c5:a5:0b:ed:ee:44:74:21:01:52:6f:7c:6f:
51:59:75:66:16:df:46:0c:36:cb:09:fc:f5:65:ba:a6:71:b7:
32:29:3c:74:ea:7d:0f:a5:93:86:1c:13:f1:4f:42:e3:da:5a:
d1:dc:fb:94:83:00:8e:69:d0:36:3d:44:0c:43:4f:8c:0d:52:
1d:0e:ed:c2:24:f3:d9:fb:c7:ca:f7:87:f5:c4:a7:f3:f0:64:
95:46:97:6f:76:63:10:6d:a0:73:cb:fe:57:b3:59:86:44:f0:
77:32:cb:49:63:19:e5:d0:37:89:cb:f8:be:fb:0a:2b:eb:44:
47:ca:1f:e4:d8:1e:a9:f6:35:4e:80:5a:1e:46:0c:ee:78:3c:
28:19:7c:13:4a:5e:5a:c0:b2:6a:04:e3:7e:cd:c9:27:70:1b:
ca:0b:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:14:16 2026 by rpki-client