
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier: 7rB5Bstnzz0ep2h4xrCUyqszqj4wLxBhPoLzxvpSrNE=
Subject key identifier: 2D:36:66:01:47:7A:6A:05:1F:3D:E4:55:7A:FA:3B:9F:CA:35:2C:18
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number: 0238
Signing time: Tue 06 Oct 2026 19:00:26 +0000
Manifest this update: Tue 06 Oct 2026 19:00:25 +0000
Manifest next update: Tue 13 Oct 2026 19:00:25 +0000
Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: okwSPEaQlL6/xEli2ZfChMr4uk0MF9nQyyT6BdCRCCw=)
2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Validity
Not Before: Oct 6 19:00:25 2026 GMT
Not After : Oct 13 19:00:25 2026 GMT
Subject: CN=6ac5454a-8a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:5a:d5:98:72:9c:47:d1:1b:6a:c0:ef:62:
d2:fd:04:97:b0:f2:c0:d1:c1:a0:96:79:c0:15:48:
35:14:45:c7:f6:95:93:4f:42:68:04:cf:7f:76:d4:
d8:e2:e6:59:48:fc:d1:49:f8:32:6f:f0:32:54:a4:
00:e1:23:96:2b:7f:90:d2:0f:f5:8b:39:08:20:7e:
a7:ab:85:db:63:93:a0:9d:36:dd:70:0c:48:2a:24:
55:64:2e:51:50:35:e0:46:8e:74:c4:be:79:59:25:
3e:14:59:74:d6:30:bb:2c:fb:ad:63:9d:e1:be:7e:
f6:61:69:37:b6:48:b2:d9:16:4a:8f:e2:b1:3d:80:
1c:26:71:e8:fc:d5:a3:44:bd:31:9f:d5:5d:5c:c4:
75:f6:38:5e:95:76:22:86:98:f0:0c:dc:db:2a:4f:
73:f0:f2:48:9d:e3:49:30:bb:0c:3f:f1:0c:00:09:
d5:27:98:6b:53:c9:0b:98:09:3a:85:1a:57:3d:48:
8a:89:38:25:24:46:85:6f:b7:25:07:ec:9b:19:bf:
01:44:b4:eb:56:a5:cb:8b:5d:c6:6f:d2:50:f4:2e:
5a:42:79:3f:93:d8:a1:a8:78:79:08:7d:e5:9c:50:
c0:03:d5:71:65:3c:dc:6f:d1:d1:fb:03:bf:2e:60:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:66:01:47:7A:6A:05:1F:3D:E4:55:7A:FA:3B:9F:CA:35:2C:18
X509v3 Authority Key Identifier:
keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:fc:08:33:3e:fe:ff:cc:dc:af:a5:e8:96:9d:b9:b4:8b:
21:1d:30:c9:66:64:b3:14:9b:1e:76:4f:51:7e:0d:00:31:f0:
36:e0:77:f3:43:b4:9a:aa:71:88:67:4c:a1:13:a9:72:87:1b:
73:9d:61:9e:e2:fe:37:0e:ef:cd:37:04:2b:c8:d0:63:77:69:
28:af:92:61:90:96:46:fc:0a:dc:84:90:fb:72:d8:fa:5b:2d:
f0:e1:b6:fa:bd:7e:bd:7a:14:85:89:9f:6b:e0:da:d6:c8:99:
88:a4:0c:ec:27:fd:26:03:61:19:b0:57:88:9e:49:02:2c:44:
08:a2:76:2c:33:af:b5:ef:ae:e2:10:11:0e:88:45:9b:33:0b:
22:3a:0e:8c:c3:69:53:d6:e9:55:49:4b:bb:2e:a6:85:bf:ac:
be:56:2a:ff:f0:82:fd:d4:ff:db:73:0f:be:36:5e:bc:bc:44:
40:5d:5f:fb:cc:c9:b4:45:79:40:2d:b4:5b:45:d8:19:1a:02:
f2:74:70:02:59:5e:5d:74:0d:e9:71:8f:c9:06:ba:cb:5a:f3:
88:65:78:82:99:7b:ad:69:d2:24:15:d1:77:d0:77:8a:a1:3b:
78:c7:c8:35:35:17:a1:b7:83:a2:8e:e6:16:ae:34:98:71:cb:
49:f6:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:51:59 2026 by rpki-client