
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json)
Hash identifier: EaQy9x1bBV6fuDIcsgPXji7EufOgFnNkK1uQVKZyGxI=
Subject key identifier: 9C:E0:FD:3E:D7:93:32:97:C7:35:E6:F6:BC:52:E3:A3:2C:C0:30:64
Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
Manifest number: A0
Signing time: Tue 27 Oct 2026 07:39:35 +0000
Manifest this update: Tue 27 Oct 2026 07:39:34 +0000
Manifest next update: Tue 03 Nov 2026 07:39:34 +0000
Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: /apgHusujZTpNvKQSJp8dMfkYzrIrG15SuxyhlXJLHs=)
2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Validity
Not Before: Oct 27 07:39:34 2026 GMT
Not After : Nov 3 07:39:34 2026 GMT
Subject: CN=6ae05537-1dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:f7:1e:3b:40:2b:fc:b3:05:f5:8b:80:a2:
6a:da:d1:a7:c7:30:73:2f:6b:9e:f6:03:5d:f8:72:
cd:ca:b8:b9:3d:02:59:e7:ad:6c:1b:6a:41:17:70:
fa:7f:7d:24:6e:f4:24:09:a5:cd:43:12:b0:1d:97:
44:90:4e:0f:04:7c:bf:73:78:53:fd:61:c5:c0:a7:
fc:b6:27:d0:f4:56:d9:02:0a:53:de:c7:89:a7:e9:
a6:df:d3:e2:ad:9e:6e:52:80:28:71:17:00:2f:7f:
53:43:e7:7d:ae:d6:7c:ab:ec:4e:fd:67:11:70:5d:
ad:62:04:ad:22:d6:c5:12:af:9f:3b:e5:e9:94:98:
47:7d:eb:a5:1c:76:60:d9:11:59:a5:30:64:7c:d1:
c7:96:88:2c:57:dc:c1:35:b0:cd:2c:f4:b2:4a:d3:
0d:9a:b8:fc:aa:7b:c2:b3:75:5d:39:5f:af:3f:d5:
6d:4d:e4:4b:88:6e:9f:88:68:e6:9a:26:93:94:9e:
a8:5b:97:cc:f1:1a:d6:8b:b2:73:3d:29:67:3c:2b:
d1:58:8b:c6:bd:8c:95:9f:09:e9:d2:e6:b9:3a:65:
cc:80:58:1c:ea:09:39:a0:bb:15:93:1e:56:a0:64:
e7:7e:ed:ea:ba:12:1c:3c:d9:46:20:61:ac:40:d1:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:FD:3E:D7:93:32:97:C7:35:E6:F6:BC:52:E3:A3:2C:C0:30:64
X509v3 Authority Key Identifier:
keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ab:2f:4d:b9:48:cb:74:a0:45:6f:bf:37:9a:8b:a0:27:ee:
6d:fb:96:40:84:31:fa:71:f2:8d:d7:15:84:5b:fa:e7:a8:8b:
a6:2b:17:96:77:77:d9:22:3f:e9:aa:50:4b:81:e0:5e:6b:70:
26:b8:85:82:22:cd:7f:d6:df:bf:61:3b:9b:42:17:6e:29:c3:
e4:46:26:c4:a4:0e:45:e2:a3:6f:5b:66:5f:fc:f4:a3:1f:47:
a4:3e:3e:25:df:4b:f9:da:a3:55:44:58:b5:c1:27:2f:87:21:
be:c9:2a:3a:a1:6d:f2:7d:32:54:4b:6f:a8:01:62:32:7c:ca:
ef:ec:91:95:fb:7a:ac:04:bd:86:5f:f5:47:21:e2:fe:d4:ca:
8a:f2:b4:4c:a4:5a:82:29:60:a2:1f:37:c4:c9:03:75:3d:3b:
9d:61:22:e1:42:8a:b1:40:11:26:7d:56:9a:b3:9f:78:34:66:
57:ea:9f:c4:5d:b1:be:b1:e3:02:a8:d0:13:e7:bb:88:12:71:
5f:42:86:68:1f:f9:4d:0b:27:c4:03:7a:75:9a:13:2f:ed:bb:
ac:ac:1e:a0:ce:a6:75:42:a9:10:0a:d4:9c:34:0f:43:83:4e:
bb:f0:12:2a:91:d9:8c:5c:ee:ca:02:0a:26:b6:fa:20:88:26:
a1:13:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:19:30 2026 by rpki-client