
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: ilJTIZgLdRcCce/lGp+KFErNMhySkiavyiNqgHINQ54=
Subject key identifier: 2C:47:22:F1:7C:B5:0D:33:20:94:C8:56:64:88:4A:C9:5F:E6:0E:D9
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 35CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 35A1
Signing time: Mon 26 Oct 2026 15:03:40 +0000
Manifest this update: Mon 26 Oct 2026 15:03:39 +0000
Manifest next update: Mon 02 Nov 2026 15:03:39 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: fZ8F13Y/Z0468q4YgsoXoqpKPNX/hW/pYLnvbNBK+sA=)
2: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
4: CE938F9ABC9111F19DF02D856011F970.roa (hash: afocyrJS0CezSphS0mhmaopPCzgPtuU3vwPZuoDk+qc=)
5: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: mK8qf/GYIQuZCVYCSo1wm8LPq+SV519KPVQtz/qeeLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 15:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13770 (0x35ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Oct 26 15:03:39 2026 GMT
Not After : Nov 2 15:03:39 2026 GMT
Subject: CN=6adf6bcc-91d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:bc:4e:0b:39:5e:f8:08:33:0d:71:37:bd:
0f:3f:52:0b:40:e3:26:c4:53:04:95:4a:05:10:ac:
02:ab:2b:16:a2:37:73:26:5b:1c:1c:18:ae:b9:6e:
ef:c2:d2:f7:c9:e7:cd:78:5f:a6:b9:33:b5:a5:a9:
9a:05:c0:01:35:ea:c6:c4:ec:a1:bb:36:58:bb:ef:
2b:bf:9a:6b:05:88:a7:52:13:ec:f9:b6:4d:ea:32:
f8:5c:1e:fa:e3:c2:73:8e:a2:71:20:c7:d9:fb:af:
35:f5:36:73:a2:f3:3d:75:dc:a8:9a:e8:01:d9:a7:
f9:f2:9a:84:bf:21:12:cc:b1:f8:be:d7:1b:90:4c:
6d:05:7d:8f:a6:00:be:c1:44:93:bb:6e:ce:cb:01:
53:b6:13:a1:da:91:4a:48:20:32:7d:84:79:65:49:
51:48:c8:a8:0e:2b:d5:74:ce:f9:4d:68:3f:d3:36:
04:5c:d2:e3:99:41:f9:15:07:2b:05:92:34:72:68:
90:d9:cc:b0:78:5b:7f:03:4a:4a:66:23:31:62:c4:
d0:fe:d1:16:52:eb:a0:d3:2f:c3:85:a3:f5:f5:11:
59:82:07:06:0d:7b:fa:42:69:19:bc:08:b0:df:30:
e3:9d:c3:a7:bf:93:85:89:a4:39:10:7e:38:c0:ee:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:22:F1:7C:B5:0D:33:20:94:C8:56:64:88:4A:C9:5F:E6:0E:D9
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:0b:62:60:b1:05:6f:23:7f:18:9e:87:a6:3e:55:ec:85:
b2:cb:42:d5:7f:d0:b3:0e:23:f8:a0:d7:dc:16:22:aa:af:eb:
c2:a8:09:ee:dd:7b:af:98:e4:4d:db:26:34:b0:b1:50:5f:fb:
dd:f3:8f:0b:73:b6:2e:65:2d:05:a6:32:4d:03:7d:e6:68:f9:
1f:e0:36:30:79:6f:dd:cb:d7:db:ae:ef:87:78:90:95:de:3f:
3c:d3:75:1f:18:d6:00:c7:f6:33:2b:dc:75:4e:3b:af:ce:b6:
f5:9f:32:9d:54:d6:59:92:c8:c3:58:2c:13:b3:ce:f5:12:f4:
42:0e:b1:78:67:d4:0b:09:4a:c9:9b:75:be:2d:0f:a9:18:83:
6d:d7:50:18:e4:d8:73:0f:5e:c7:74:ed:78:7c:28:68:5c:f3:
84:5d:6f:82:5a:61:c0:80:21:08:1a:a1:f7:ba:8e:43:14:e4:
c6:af:9c:de:1b:c8:b4:bb:17:9e:c6:a2:88:b3:84:7c:58:b0:
ee:4d:2a:a2:88:58:0e:ba:06:fa:a0:f9:15:c0:5a:07:9e:5e:
99:1f:2c:a1:fd:b2:ea:e7:75:21:f1:c4:5a:f0:70:37:32:2c:
9f:bf:7f:13:eb:b2:a1:c3:c8:15:b2:88:69:1b:a0:97:f2:bc:
80:7d:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:22 2026 by rpki-client