
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: izxIVDMY69NhWqzngaj3hjvfFou+jUsRxLmwlFbAXqg=
Subject key identifier: DE:FF:CE:03:91:66:CD:5C:EF:E1:2C:F6:C0:77:BF:3C:77:32:78:4C
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: BE
Signing time: Fri 23 Oct 2026 07:31:36 +0000
Manifest this update: Fri 23 Oct 2026 07:31:36 +0000
Manifest next update: Fri 30 Oct 2026 07:31:36 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: KxseUqu1i7BxDvWJEln3rAqY/HxJurEog4hSHtb2cAc=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: JKJHFFpKhMqZKta0zHh97l6PnllD0+iW/lc7gyj9EKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 07:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Oct 23 07:31:36 2026 GMT
Not After : Oct 30 07:31:36 2026 GMT
Subject: CN=6adb0d58-9dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:77:4f:e9:4d:f6:39:55:ea:2d:dd:d0:55:
15:d0:0d:93:38:55:62:a1:10:d3:3d:50:aa:99:80:
08:63:38:53:1d:11:72:9c:06:c5:32:0e:af:5a:c8:
16:84:d6:54:de:d0:45:fd:eb:ca:a7:da:d2:a2:7b:
6d:09:c4:14:e8:32:9d:16:d5:db:19:26:c4:6e:dd:
4d:f5:67:2d:8a:82:9a:d5:b7:01:4b:9c:ac:33:42:
a9:0a:28:44:80:d6:00:35:ca:f5:dd:14:95:e4:1c:
ba:42:fa:ab:b0:9b:93:d0:23:a2:35:5c:ab:9e:fa:
78:f2:8d:d1:2d:7b:af:fb:9e:7a:61:dc:f2:0b:bf:
0e:2c:f8:f1:44:01:85:fc:c7:de:94:42:ba:fe:b3:
52:83:7e:37:50:ab:42:88:2c:89:e7:91:20:ea:f5:
b0:7c:f5:9f:53:b6:89:52:5e:9d:ef:ea:88:80:41:
f6:b4:0e:e3:52:cc:80:a4:ed:c6:8b:ab:2f:5c:88:
64:a6:86:3f:0d:38:ba:c7:25:b6:c6:75:ed:d2:6d:
22:89:82:d8:06:f8:b6:22:8f:0b:41:b9:5d:15:60:
f3:56:e5:c5:0f:11:15:2c:9e:e5:28:ef:5b:a3:aa:
53:06:3e:86:e9:1a:ae:57:96:ca:07:10:fd:9b:19:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:CE:03:91:66:CD:5C:EF:E1:2C:F6:C0:77:BF:3C:77:32:78:4C
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:59:6f:f8:81:71:1f:ce:51:47:e7:bc:0a:ff:d2:95:b9:4c:
bc:77:bc:c0:1b:f0:3d:58:1a:b0:20:98:0b:a4:0f:65:50:b5:
db:b2:fe:d2:68:3a:06:67:d5:bc:32:b6:88:47:2d:15:29:ce:
3b:d3:68:45:a8:04:f0:7a:2b:84:56:ba:ae:a7:79:a8:26:a4:
58:94:a7:b9:d2:2d:e1:d4:ca:cb:17:dc:66:47:0b:fe:6d:b7:
35:4d:3d:8d:d9:f2:10:ad:78:9d:9f:c4:68:f0:9d:12:b9:fe:
ff:19:40:93:30:cd:7d:00:30:65:0e:a7:5d:26:34:b7:1b:c4:
e4:fd:2c:16:18:50:0d:92:c3:fe:4b:83:17:60:47:1b:38:36:
36:91:8b:1a:3a:04:01:0e:bf:08:34:ff:77:ce:95:1e:3e:d8:
a3:76:f8:08:d7:b0:43:44:8d:70:da:89:df:be:59:89:e9:69:
43:21:b9:9c:cc:e4:95:54:6c:ce:54:3b:b0:30:08:a8:b3:75:
68:db:77:92:f3:8a:55:2a:dc:98:d0:0e:95:b7:28:a5:74:02:
95:f1:a0:81:14:e5:3c:0f:aa:49:58:71:ef:78:20:73:02:c9:
0d:ca:1c:20:61:f4:4b:4e:d2:7d:33:ad:95:26:47:b7:b3:b3:
4b:ee:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:31 2026 by rpki-client