
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json)
Hash identifier: G97gp0iMIGW8F4f8zowG6j0Tjf7O7yxdgsaSCrTBaa8=
Subject key identifier: A0:1B:C1:94:3F:39:B6:2D:31:BE:B8:73:D3:8D:FC:B6:15:BF:14:7C
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
Manifest number: 022A
Signing time: Mon 05 Oct 2026 03:04:20 +0000
Manifest this update: Mon 05 Oct 2026 03:04:20 +0000
Manifest next update: Mon 12 Oct 2026 03:04:20 +0000
Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: F9TVFV7EUZUNznrEGFqVdUk/zjDJvW+F5KuE8OUH6fQ=)
2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: Gh38xaTvZrK4l0ysrgYsOoGdHMrtwRr8XVbczv1+ALU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Validity
Not Before: Oct 5 03:04:20 2026 GMT
Not After : Oct 12 03:04:20 2026 GMT
Subject: CN=6ac313b4-b3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:da:fb:aa:d3:ab:62:05:9d:0a:d2:a8:84:
7f:6e:d9:22:da:aa:c8:c5:57:a4:8b:d1:25:7d:3f:
41:2a:5f:f6:e0:d2:27:88:61:20:01:33:f0:70:49:
5d:d5:3b:ac:94:88:6b:e3:e3:5c:5f:d3:63:43:13:
73:d8:2b:56:a9:62:9d:17:b3:56:5e:d5:94:c9:50:
f9:c6:6a:8e:49:7c:ee:51:36:a4:ac:9e:05:46:b9:
fd:d7:a7:b7:b0:be:6e:65:12:02:ab:f4:f6:10:e5:
c6:3d:6a:fa:82:f0:ff:9e:7c:29:57:a1:04:6d:b5:
2c:d6:b7:50:d5:a1:f3:32:8d:80:11:76:31:5e:ab:
fe:fc:eb:fc:ae:c1:8c:49:49:90:f5:37:05:bc:50:
14:7f:ba:15:f8:4c:2a:3d:d6:9e:8b:be:5c:2a:e2:
31:0b:11:12:e5:74:2d:db:48:0b:72:62:29:08:8a:
38:17:db:47:49:d1:bc:05:86:75:cb:34:05:2b:b7:
03:31:e9:67:ae:4a:d4:a8:6b:f1:e9:06:f0:0d:af:
1a:14:b5:e9:10:6a:da:32:1d:2d:c7:5d:2b:c3:a2:
90:cb:ea:4b:92:fb:1f:8d:ac:eb:8a:24:fc:92:ba:
2c:fd:91:a3:bd:14:f7:ee:47:e9:9f:9f:de:f7:57:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:C1:94:3F:39:B6:2D:31:BE:B8:73:D3:8D:FC:B6:15:BF:14:7C
X509v3 Authority Key Identifier:
keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ab:ec:86:4d:7e:82:c3:b0:dd:5a:68:bc:b2:21:1b:dd:ab:
bd:a3:75:e6:91:3f:4a:a2:ce:99:ec:d7:c2:3f:06:92:b0:55:
95:28:d2:4e:38:88:39:0f:fc:a9:03:14:c6:6b:99:ca:e7:b1:
bc:3e:c7:d5:e0:1c:db:ea:d8:e6:bf:c8:9b:54:21:e6:6c:11:
22:60:4a:0a:d8:1c:29:bf:82:dd:81:c6:2e:cd:3c:4d:f6:b2:
31:13:89:44:18:78:81:1b:d6:d8:6b:8e:2f:0c:93:82:65:9a:
5f:cd:b2:1e:33:1f:38:ee:a0:99:e8:11:81:82:af:82:77:9e:
f9:b1:d5:2f:9b:87:a9:b4:0d:c8:93:da:f7:31:d9:46:da:e1:
00:87:71:20:02:c2:2a:54:b4:b8:a4:ca:ec:6a:1d:ae:5c:70:
5a:d1:50:cc:9a:d2:9e:dd:56:f3:0c:fb:da:a1:d0:ce:93:41:
24:91:e6:2f:45:45:30:a0:05:51:24:29:ca:a5:57:ea:cf:b2:
bf:03:de:04:13:14:4f:08:67:76:78:58:5e:2a:28:8a:b9:47:
0d:be:bb:97:06:7c:c6:92:a5:4d:dc:ff:10:6b:b1:ed:64:63:
a4:a7:72:dd:dd:c2:3f:99:ec:e4:3a:f3:8c:fe:c1:ca:07:2d:
ed:78:62:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:23:33 2026 by rpki-client