
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
File: 32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json)
Hash identifier: 8C54kcNsdFKgXXr79nTjYVL8q2pDZK5c1kFTdTh3fgw=
Subject key identifier: B6:1B:E8:9E:87:BC:BF:89:0F:D4:6B:1D:2B:DE:9E:0E:D7:E1:50:04
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
Manifest number: 0419
Signing time: Sun 11 Oct 2026 00:25:06 +0000
Manifest this update: Sun 11 Oct 2026 00:25:06 +0000
Manifest next update: Sun 18 Oct 2026 00:25:06 +0000
Files and hashes: 1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: ccHeYWa8+7kzfzsWxwioaz4Gd4DEgIxxkv71Q/VfgL4=)
2: 4BBDE05299B011F0B174EC14C4F9AE02.roa (hash: l281WaGzYU7dCqEFuYzIN6MgvSUnWoKB+RqON01Yd2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDA2, serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Validity
Not Before: Oct 11 00:25:06 2026 GMT
Not After : Oct 18 00:25:06 2026 GMT
Subject: CN=6acad762-36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:4a:b3:6e:a3:f8:f5:30:a8:4f:78:7a:e3:
35:26:6b:a3:1e:d5:8d:8b:be:9f:3c:a5:31:25:be:
32:4c:38:8f:71:19:a6:64:dd:4c:76:88:f8:38:df:
d2:13:6c:1d:63:5b:2e:b8:f2:a9:47:05:c3:fb:7a:
8b:3e:99:bd:86:94:b1:46:f9:e1:6e:eb:84:2c:65:
c3:a9:13:f8:89:f9:1d:41:b2:83:14:03:9a:d9:62:
57:30:7e:9f:a1:92:48:81:22:00:55:46:c0:e6:31:
8d:97:a7:3f:69:a0:66:b1:ff:e3:c1:30:65:3b:a6:
82:1c:91:90:ce:bc:ab:bf:c6:74:57:58:fd:13:7b:
14:2e:60:68:4f:82:a0:6d:fa:ad:41:d3:89:fd:7a:
31:3e:fe:c9:49:df:75:71:a1:6f:99:66:2b:11:79:
8f:80:70:0f:71:d8:30:8a:d4:90:04:fe:14:b5:1a:
36:f3:ba:84:ae:82:02:5f:6b:0f:3a:2e:a0:88:8e:
d0:70:06:6a:5d:6e:5a:03:45:37:b6:a1:f3:15:b9:
3d:10:43:1b:14:22:47:e6:21:e0:01:45:25:4b:fb:
db:df:7d:99:3a:98:46:72:21:b0:e9:c3:5e:8d:51:
9d:a4:68:87:8f:99:2b:b0:df:51:5d:74:35:8c:8f:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:E8:9E:87:BC:BF:89:0F:D4:6B:1D:2B:DE:9E:0E:D7:E1:50:04
X509v3 Authority Key Identifier:
keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f0:1c:23:20:21:c6:12:28:c7:0f:b5:09:56:d1:1b:27:d2:
f8:4e:55:33:e2:3a:0e:d6:1d:9a:b8:59:f5:76:71:38:e5:61:
21:40:f7:fe:0d:90:8a:e5:4e:ce:f2:4a:43:d0:0b:08:ef:fc:
c7:15:da:45:fa:b2:8f:f3:ee:b9:eb:7e:a5:4a:38:5c:c1:98:
ab:6e:45:86:e4:e8:5d:ba:2d:f9:b3:ef:40:e9:25:ef:79:87:
3e:df:74:c4:68:1e:8a:e5:2f:8f:63:55:76:7d:e2:46:c6:a6:
28:fe:e6:ed:be:73:ef:49:92:26:b4:69:70:83:b9:be:cc:7e:
ec:2e:60:a7:69:c3:ad:23:32:db:e7:77:cb:02:b6:06:e2:e9:
fd:8c:f6:19:04:95:c7:3f:57:2f:4a:3b:39:97:ae:d1:10:56:
cb:df:ec:93:b9:cc:95:9b:f7:28:c1:13:7a:fd:04:1b:7b:6a:
6b:31:e5:83:cf:10:23:c3:1c:ea:d8:eb:e7:7f:b5:8b:21:01:
19:0f:fe:25:c8:49:f2:c6:7c:3b:60:dc:e4:84:a6:55:63:c5:
a6:f5:4a:ed:84:79:f1:b4:5c:03:81:62:f3:c2:9a:3e:7e:1a:
f0:fb:7e:93:1a:6a:64:ac:2b:88:5c:ad:c3:3f:8a:f6:08:21:
fc:5f:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:11:55 2026 by rpki-client