
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: 8p3PXX7HlBYulCIxy5riJ63aZp7gvzFmcRadoCBrrwk=
Subject key identifier: D7:65:1D:68:67:6F:2F:71:9C:8D:B4:90:24:76:DB:F2:BA:02:8C:20
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 08AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 08A0
Signing time: Sun 18 Oct 2026 20:47:51 +0000
Manifest this update: Sun 18 Oct 2026 20:47:51 +0000
Manifest next update: Sun 25 Oct 2026 20:47:51 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 6uEpg9JFb1RPKnDhhEdabswlUJa+/bZ8F/GdeEr2zuU=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: Iy/MAAS9uwJgt11+blyhtzSw8zMnh5vQ9XdYeCcpL+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 20:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Oct 18 20:47:51 2026 GMT
Not After : Oct 25 20:47:51 2026 GMT
Subject: CN=6ad53077-fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:0f:2d:f3:6e:75:9b:80:a7:48:f3:fa:89:
5d:3c:f3:24:15:cc:4d:c0:6e:b7:bf:21:9f:7e:e0:
c3:8f:cc:9e:92:37:ed:14:13:48:3e:bb:a6:ff:b2:
ea:0f:c6:d5:60:ec:8e:f7:a4:72:a1:e7:ec:22:60:
c1:5e:63:37:78:f2:00:d8:17:81:72:47:d4:e1:d2:
42:13:3d:b0:ea:22:ff:dc:8f:0f:dc:5d:af:b2:c5:
bd:65:45:e1:2a:16:9d:76:1d:82:9c:48:64:0f:7e:
d9:04:3e:4e:f0:2f:1a:b6:bc:0e:a9:ce:16:84:65:
2c:0e:5f:09:06:47:c0:cd:a4:5d:dd:b3:83:4c:f8:
a2:59:24:f0:e6:3e:c8:96:28:76:e0:b8:1d:c7:d7:
54:95:f5:fd:39:99:61:7a:39:23:20:0c:8a:46:a7:
74:c6:fe:4b:db:2a:a7:8a:94:df:5c:bd:79:93:2b:
c1:06:75:68:e2:b5:f2:d9:87:2f:4a:e2:e0:95:11:
b2:77:4d:50:89:0c:38:d8:8d:cc:48:00:9d:cf:8a:
3e:fc:a3:5b:f7:5f:18:23:4a:e9:5c:3b:ff:24:7a:
0b:a4:b5:ea:b8:83:26:54:5d:48:69:78:25:37:41:
67:6a:97:b3:05:f9:d5:2e:f6:b3:94:5b:e2:1c:16:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:1D:68:67:6F:2F:71:9C:8D:B4:90:24:76:DB:F2:BA:02:8C:20
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:b8:0f:b6:27:d0:25:3d:15:bd:a7:1b:c0:57:a4:cf:93:
c0:c5:e3:72:78:8e:40:5c:77:b3:dc:a3:ac:14:f2:93:4c:89:
bd:85:b1:13:b4:6d:6d:ff:53:fa:47:df:c5:53:50:7a:7c:7f:
a2:74:af:31:e6:c3:37:bd:ed:d9:cc:90:77:a9:dc:5e:e2:b1:
0c:22:90:b8:e6:fc:ef:d2:5e:48:e6:81:ec:e9:48:1c:31:28:
12:e3:33:e5:dc:06:ed:6c:61:f6:d9:29:bb:df:af:e7:02:0f:
aa:81:33:5d:64:53:00:50:9e:dc:ef:83:69:67:48:1f:a9:ef:
51:1d:6f:46:e4:de:e2:de:73:df:45:d2:70:d9:61:a1:2a:e6:
4f:91:df:3b:c4:a6:06:2c:96:16:e5:02:76:56:c5:f9:2a:ed:
5c:56:22:1f:3d:b2:24:cf:be:70:8f:8d:b0:04:dd:31:04:1b:
bc:c0:a3:c9:88:61:22:07:ea:d2:f4:d0:99:64:60:f3:db:91:
9b:b7:f3:d4:45:bc:9f:62:1d:91:a7:02:1f:ab:3c:d7:6f:60:
b1:af:30:c0:a9:5c:45:47:ba:27:ca:16:d9:0c:ce:b0:0b:77:
13:60:65:78:eb:aa:1a:a0:99:ad:2e:e6:5a:f9:94:45:67:52:
6e:52:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:56:24 2026 by rpki-client