
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: edwp3GqtC5iWzev4i6CoZDlD7Q5rYGuio+pimbY/4rk=
Subject key identifier: 4A:1F:24:95:1F:91:3A:02:A1:A9:05:2D:18:1A:16:CA:EC:A1:8B:14
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 0718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 070F
Signing time: Tue 20 Oct 2026 22:13:39 +0000
Manifest this update: Tue 20 Oct 2026 22:13:38 +0000
Manifest next update: Tue 27 Oct 2026 22:13:38 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: 5sawQ05K1hCVk96Koz1yMVxXMV8Zld+zszR+42VfgkE=)
2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: HEumvxRhLmm4XHqnIYgge5GXrN6qJb1ZanXvvpMCGxE=)
3: 0771A364485311F1A9744CF89D833773.roa (hash: nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 22:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Oct 20 22:13:38 2026 GMT
Not After : Oct 27 22:13:38 2026 GMT
Subject: CN=6ad7e792-790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:17:3b:92:e7:61:34:42:d5:ee:15:3b:ff:
05:8d:02:c9:92:73:01:b7:d1:d6:25:7f:af:89:e2:
a0:02:89:73:70:d7:23:c1:68:76:37:e7:d8:45:32:
2e:b0:e6:ad:67:14:5c:2d:86:2a:51:92:1d:35:d6:
f7:9c:5a:ac:df:09:1e:0b:cc:bd:e7:bd:44:0c:0b:
53:49:d9:ed:36:5d:73:e9:5a:d3:e6:ec:46:d5:cc:
e3:50:82:0f:4e:19:d2:6b:b3:2e:fc:92:ff:ad:21:
5e:de:6f:3e:a8:c1:96:12:2b:01:26:41:56:97:a8:
2a:3d:dc:ed:44:21:61:b5:c6:db:05:14:55:65:7d:
4c:e1:e0:c2:42:31:81:29:35:6d:f6:3b:48:f3:ee:
2e:da:96:bc:2c:c5:58:43:6e:28:6a:57:de:01:2d:
7f:14:a5:29:b1:c4:b9:63:82:50:2d:a2:3a:0f:e4:
aa:6e:e8:b6:b3:51:ff:ed:7b:c6:a8:3a:6b:25:f3:
4b:c3:4c:7a:0c:2a:3e:cc:f6:35:13:85:8b:9e:12:
0f:01:e3:8e:06:f9:48:c2:84:c9:8c:98:93:52:68:
51:08:92:65:ed:b0:7c:42:b3:5a:23:ee:96:37:57:
f9:1c:42:6e:68:c1:33:66:ce:60:70:31:b0:4e:3e:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:24:95:1F:91:3A:02:A1:A9:05:2D:18:1A:16:CA:EC:A1:8B:14
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:87:f8:f1:6a:ee:8d:99:15:18:ae:b0:f6:b4:31:12:20:
28:29:fb:bb:2a:ae:ec:37:fc:bc:1f:17:1e:6e:2c:7d:d3:58:
bd:fe:8b:c0:45:a7:d8:a4:ae:89:f3:c5:be:2c:3f:32:95:f0:
3a:9e:ab:26:78:54:70:31:73:f6:b7:a2:42:cb:e5:98:29:5a:
6d:4c:9b:11:99:e1:4b:f1:52:3b:06:73:9d:97:d5:42:da:c5:
ba:a2:a3:0d:9a:b8:40:8e:5c:01:b5:d1:09:6c:1a:f5:c3:78:
52:78:29:10:4a:1b:37:79:5d:28:93:5e:b7:37:df:30:1f:ee:
61:13:13:eb:11:50:e5:35:01:d5:e8:70:3e:e6:33:7a:01:89:
c6:91:8a:d0:35:d2:fa:a6:ea:96:bf:fd:85:cd:79:67:4d:22:
ee:6d:99:ff:e4:89:76:8a:75:79:42:bc:43:43:77:78:e0:eb:
f2:0a:6d:3a:c0:20:f1:36:4b:9a:88:7c:36:4c:21:eb:47:f2:
f1:4e:82:2a:e9:6b:45:1b:5d:b9:d5:3c:84:96:bc:1a:79:d2:
8d:fc:64:27:fa:7e:7b:bb:c0:3d:89:ba:e2:dc:d9:84:db:43:
36:86:17:2f:56:33:73:32:d0:f6:09:56:05:14:96:e7:e9:5d:
fc:00:7c:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1
MzIwNzM2NDgwHhcNMjYxMDIwMjIxMzM4WhcNMjYxMDI3MjIxMzM4WjAYMRYwFAYD
VQQDEw02YWQ3ZTc5Mi03OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSUXO5LnYTRC1e4VO/8FjQLJknMBt9HWJX+vieKgAolzcNcjwWh2N+fYRTIu
sOatZxRcLYYqUZIdNdb3nFqs3wkeC8y9571EDAtTSdntNl1z6VrT5uxG1czjUIIP
ThnSa7Mu/JL/rSFe3m8+qMGWEisBJkFWl6gqPdztRCFhtcbbBRRVZX1M4eDCQjGB
KTVt9jtI8+4u2pa8LMVYQ24oalfeAS1/FKUpscS5Y4JQLaI6D+Sqbui2s1H/7XvG
qDprJfNLw0x6DCo+zPY1E4WLnhIPAeOOBvlIwoTJjJiTUmhRCJJl7bB8QrNaI+6W
N1f5HEJuaMEzZs5gcDGwTj4XvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEofJJUf
kToCoakFLRgaFsrsoYsUMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2
ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj
TWxRZW1PVjFveHhUSUhOa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdVaH+PFq7o2ZFRiusPa0MRIgKCn7uyqu7Df8vB8XHm4sfdNYvf6LwEWn2KSu
ifPFviw/MpXwOp6rJnhUcDFz9reiQsvlmClabUybEZnhS/FSOwZznZfVQtrFuqKj
DZq4QI5cAbXRCWwa9cN4UngpEEobN3ldKJNetzffMB/uYRMT6xFQ5TUB1ehwPuYz
egGJxpGK0DXS+qbqlr/9hc15Z00i7m2Z/+SJdop1eUK8Q0N3eODr8gptOsAg8TZL
moh8Nkwh60fy8U6CKulrRRtdudU8hJa8GnnSjfxkJ/p+e7vAPYm64tzZhNtDNoYX
L1YzczLQ9glWBRSW5+ld/AB8lw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 06:14:52 2026 by rpki-client