
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier: 4DwZ6copKmE9RN0Jf1Z6dKn4WVmL3+ch7rgdW22hxqo=
Subject key identifier: DB:F3:20:00:80:AE:79:FA:9F:05:1E:48:B2:14:24:48:D8:D2:34:89
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial: 0863
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number: 085D
Signing time: Sun 04 Oct 2026 20:58:46 +0000
Manifest this update: Sun 04 Oct 2026 20:58:46 +0000
Manifest next update: Sun 11 Oct 2026 20:58:46 +0000
Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: dHHW+uboT8Fp0/+Xuo3Zoeradryrv92Nf+TfM4l1sO8=)
2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: dWIZyaUXtS3+l+2OTps4tqiCz5E9mMM/Wq+9JsY8Y08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Validity
Not Before: Oct 4 20:58:46 2026 GMT
Not After : Oct 11 20:58:46 2026 GMT
Subject: CN=6ac2be06-ecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:f5:4a:9e:ba:ef:8a:a9:ce:70:87:25:6a:
f1:76:9b:61:bb:6e:fd:d4:ed:a6:a6:4c:5c:7a:23:
94:c2:8c:4e:15:0d:27:5d:77:4d:4d:8f:6b:6d:ef:
cc:3f:a9:ff:a1:dd:0e:82:58:2a:a9:65:07:ce:c0:
f1:7b:a7:a4:53:a6:68:6d:dd:e9:d3:ab:80:85:5c:
b0:2c:98:33:c8:c0:84:94:77:dd:4c:5c:44:c1:65:
24:c5:08:fd:36:a9:80:cb:0b:63:e8:fa:87:dc:11:
a3:1d:a5:ee:61:f9:6f:68:28:ad:07:7c:cb:64:d9:
8f:d5:a2:4e:53:b5:e1:ac:3a:95:15:12:d1:b1:dd:
e9:d4:83:53:c3:cb:27:e2:15:30:b3:ce:1c:12:b5:
74:d6:ae:c1:28:be:7e:f8:36:fa:18:b4:ec:f0:b3:
d7:0d:38:42:58:c3:65:8f:f1:ed:21:c1:c8:69:d7:
56:9e:9b:a8:d3:61:20:02:b9:68:8c:bb:1b:f8:8b:
28:98:ff:74:19:28:b0:81:1c:69:80:09:d6:a9:a7:
05:e3:db:d0:3c:52:6b:35:56:2e:1d:33:e8:66:9f:
84:a5:a0:c9:96:ca:55:73:8b:85:45:1e:fb:43:03:
8d:0e:5b:84:11:27:f8:60:fa:8a:90:31:6a:bd:51:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:20:00:80:AE:79:FA:9F:05:1E:48:B2:14:24:48:D8:D2:34:89
X509v3 Authority Key Identifier:
keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:ad:b3:80:83:7b:95:f9:6a:5e:0e:d0:c4:a5:0d:e3:b1:
51:0c:5d:0b:b9:39:8c:a9:6b:c5:ee:58:cf:b4:de:ac:cd:cb:
6b:28:b1:f3:14:89:0c:a5:f6:a3:1f:61:13:41:15:77:d8:94:
ab:2f:67:5c:1c:77:76:2c:2a:e9:1a:9b:43:40:0f:f3:3b:db:
81:19:8f:d1:5b:f2:af:bd:9f:4a:03:7c:0e:60:0d:d0:10:e8:
4e:87:8b:09:93:f5:d8:c1:d5:a3:74:64:43:7e:eb:3d:fa:ae:
b8:e3:8b:b5:75:42:32:38:bd:0b:3f:64:94:63:d6:a3:0f:7a:
7d:03:12:22:39:f1:75:21:0d:1a:b3:f8:7e:a0:9e:ea:48:2d:
ee:85:76:15:c8:82:c7:0a:89:22:0e:f0:8c:10:48:82:c7:c0:
2f:6f:aa:41:c2:2f:03:3a:83:30:f8:59:6b:da:59:45:78:1e:
9c:56:33:13:6d:34:1c:ea:a4:20:9e:57:8f:99:85:06:69:c3:
25:63:d6:67:c6:c3:39:4f:80:2f:f8:43:8e:65:8d:17:10:b9:
16:31:1c:48:ff:56:91:90:d2:1a:f2:19:3a:bc:f0:19:86:32:
a0:23:46:9e:79:4e:7e:92:a2:21:bc:2a:35:5d:bf:57:4c:56:
7b:98:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:23:43 2026 by rpki-client