
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: LeP+tFLbfvhZxyyOstaJMQNKd8tSZtlwoqsNIVi+Oto=
Subject key identifier: 43:09:6F:93:AE:A7:E0:B6:94:15:D9:34:7F:A0:4B:0C:62:DD:B4:F6
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 06FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 06F6
Signing time: Mon 31 Aug 2026 22:07:51 +0000
Manifest this update: Mon 31 Aug 2026 22:07:50 +0000
Manifest next update: Mon 07 Sep 2026 22:07:50 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: kLevBS6UAwq0HjDCczSN/h0pVHe2k/HcqAd1ulZjWmI=)
2: 0771A364485311F1A9744CF89D833773.roa (hash: nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=)
3: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: HEumvxRhLmm4XHqnIYgge5GXrN6qJb1ZanXvvpMCGxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Aug 31 22:07:50 2026 GMT
Not After : Sep 7 22:07:50 2026 GMT
Subject: CN=6a95fb37-91a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:c4:5c:8a:13:99:92:60:32:94:2c:0e:b7:
fd:e8:8b:ed:82:4d:2e:ec:65:d1:29:4a:c9:47:be:
8f:d6:ce:6b:6f:cf:19:22:1f:d9:c8:a6:1a:55:2b:
38:2a:44:4d:fa:6f:0c:bd:ce:e7:b4:29:27:2c:4e:
b7:25:43:c3:99:d4:d4:a0:48:2e:b8:c2:1c:7b:c9:
e0:48:f1:83:fe:c2:6a:85:28:fc:49:54:69:3c:d8:
23:9c:59:62:a5:4d:60:83:3f:ff:dd:90:d4:91:35:
68:34:a3:cd:c4:cf:e7:ac:a9:a1:e2:88:cf:5e:d9:
59:db:2c:d0:02:c1:ff:74:bf:39:1a:50:e3:db:f7:
01:0d:48:3c:26:f9:44:be:7b:9a:ae:51:13:b1:27:
c0:47:b4:6b:e4:5d:88:75:45:d3:32:6e:c1:03:9c:
56:68:d2:ef:3f:86:64:26:2e:4d:bf:fa:cc:7b:29:
bc:43:6a:50:d9:bf:4f:a6:58:ea:37:35:8f:1f:5d:
a4:b6:a7:be:6b:23:b7:8b:a6:51:92:d6:77:2b:4c:
82:1a:46:77:24:96:83:5d:37:18:a7:6e:f6:3e:98:
a9:ce:d4:1b:c2:e7:ad:b7:16:ee:68:51:5e:d0:46:
cc:32:6d:30:a6:1d:50:9b:51:2c:ef:0a:69:dc:e1:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:6F:93:AE:A7:E0:B6:94:15:D9:34:7F:A0:4B:0C:62:DD:B4:F6
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:95:8c:86:c9:e0:b0:0e:f3:df:ee:39:16:aa:e3:c8:5f:
0b:c7:30:b3:3a:16:41:b9:6b:44:70:eb:9d:0c:a7:05:c8:4f:
93:ee:1b:3f:fc:46:c2:35:73:1d:33:42:87:5b:b6:e0:99:1a:
e8:98:96:50:62:6c:eb:50:93:e4:20:9b:5f:18:21:b4:a6:9a:
49:67:21:28:7c:fd:b2:1c:d5:1c:d3:83:7c:bd:15:26:89:83:
b8:13:22:ae:bf:c7:9e:a9:a3:9e:b3:41:2c:4c:9a:22:ec:a9:
4f:c7:9f:a5:d0:ab:48:cb:2b:a3:14:96:34:d0:18:56:f6:f1:
bb:ef:b7:73:34:a5:73:dd:f7:8d:08:9a:16:df:d9:26:34:f1:
ca:36:90:41:ba:9e:c3:6f:be:fc:af:2b:e1:7e:fa:90:76:73:
24:8a:c6:de:dd:32:5e:72:9a:a2:45:07:d5:48:c6:e8:38:c6:
4d:35:dc:8d:2f:2a:12:c0:db:8c:8c:dc:99:1f:cd:8c:d3:fc:
cd:d5:1d:0b:36:32:ff:1c:c8:ef:a3:43:e4:c8:ab:4b:c5:76:
05:7f:77:24:fd:f6:f6:41:7e:53:bc:24:88:a3:66:21:c3:7d:
da:08:72:6d:d5:ae:9d:5b:24:b0:26:ea:71:7b:79:4c:0e:24:
13:97:f2:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1
MzIwNzM2NDgwHhcNMjYwODMxMjIwNzUwWhcNMjYwOTA3MjIwNzUwWjAYMRYwFAYD
VQQDEw02YTk1ZmIzNy05MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsM/EXIoTmZJgMpQsDrf96Ivtgk0u7GXRKUrJR76P1s5rb88ZIh/ZyKYaVSs4
KkRN+m8Mvc7ntCknLE63JUPDmdTUoEguuMIce8ngSPGD/sJqhSj8SVRpPNgjnFli
pU1ggz//3ZDUkTVoNKPNxM/nrKmh4ojPXtlZ2yzQAsH/dL85GlDj2/cBDUg8JvlE
vnuarlETsSfAR7Rr5F2IdUXTMm7BA5xWaNLvP4ZkJi5Nv/rMeym8Q2pQ2b9Ppljq
NzWPH12ktqe+ayO3i6ZRktZ3K0yCGkZ3JJaDXTcYp272PpipztQbwuettxbuaFFe
0EbMMm0wph1Qm1Es7wpp3OE1awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMJb5Ou
p+C2lBXZNH+gSwxi3bT2MB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2
ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj
TWxRZW1PVjFveHhUSUhOa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJriVjIbJ4LAO89/uORaq48hfC8cwszoWQblrRHDrnQynBchPk+4bP/xGwjVz
HTNCh1u24Jka6JiWUGJs61CT5CCbXxghtKaaSWchKHz9shzVHNODfL0VJomDuBMi
rr/HnqmjnrNBLEyaIuypT8efpdCrSMsroxSWNNAYVvbxu++3czSlc933jQiaFt/Z
JjTxyjaQQbqew2++/K8r4X76kHZzJIrG3t0yXnKaokUH1UjG6DjGTTXcjS8qEsDb
jIzcmR/NjNP8zdUdCzYy/xzI76ND5MirS8V2BX93JP329kF+U7wkiKNmIcN92ghy
bdWunVsksCbqcXt5TA4kE5fy5A==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:57 2026 by rpki-client