
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: NPI0GNiLMz7rpVLTW4bX0E7lnJyVps/Pu4gfWrn7KLM=
Subject key identifier: B8:1E:B2:79:FC:0E:10:2D:FD:E0:2B:62:EB:15:9F:A7:08:1A:05:09
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: 011E
Signing time: Mon 05 Oct 2026 06:17:29 +0000
Manifest this update: Mon 05 Oct 2026 06:17:29 +0000
Manifest next update: Mon 12 Oct 2026 06:17:29 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: LWVdZfv2vIXnTrpkPiUXRy15KniM8fIOY85l3CvMPfM=)
2: 8601959679DF11F193D499DB65A30FBC.roa (hash: dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=)
3: 3A6DC4F4829C11F1A9F8AFE869A30FBC.roa (hash: WUHe+xm2s7KQRGDEn1dhB4Wm51SPdg0ugPZNxSGnrGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Oct 5 06:17:29 2026 GMT
Not After : Oct 12 06:17:29 2026 GMT
Subject: CN=6ac340f9-e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:70:42:dc:d6:84:43:d6:24:69:21:7e:c6:
f9:2d:ff:3c:d2:39:40:a8:a4:4f:11:00:50:ca:fb:
c5:06:aa:67:53:5f:f4:29:80:43:f1:86:cd:01:81:
fe:93:c0:40:3e:5a:e8:28:7b:0e:6a:4b:7b:75:46:
40:6c:fd:25:0e:3b:56:0e:cf:96:f7:57:62:08:67:
cd:bc:d5:68:63:19:20:00:99:e4:6a:06:a8:89:d2:
c1:34:53:b5:c3:de:93:61:9f:f8:24:cc:27:a2:9a:
d8:94:e3:9f:b3:21:58:aa:45:5d:c5:30:3d:f0:73:
c3:0a:8c:0a:7d:ba:85:0f:44:e4:b0:0c:8d:bb:57:
ba:75:5f:46:03:2b:bd:9a:b9:26:ea:02:b7:94:37:
e2:a3:80:e9:f3:88:98:6a:e1:3a:cb:70:58:69:df:
f7:20:c2:ab:d7:c5:5d:86:18:8b:9a:9e:a6:30:3c:
fd:84:e4:93:81:2f:bf:7a:ac:b3:40:a0:f2:2b:f6:
8d:7c:c4:08:d0:b5:00:a0:11:83:36:ac:af:95:ca:
c3:09:1b:4a:cd:aa:c3:61:61:f3:0f:b3:9d:8f:a7:
82:fe:a4:f0:9a:a4:0d:b3:8c:5d:6d:f1:cc:8e:f5:
3f:b1:7b:a1:9b:f6:63:9a:17:1b:41:c1:dc:71:10:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:B2:79:FC:0E:10:2D:FD:E0:2B:62:EB:15:9F:A7:08:1A:05:09
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:00:02:94:0a:10:08:87:f8:75:dd:8b:ca:05:d4:15:66:
66:af:6e:99:57:03:45:c4:c3:bd:7d:47:5d:7a:ae:f4:32:c6:
2f:e3:91:7b:0c:18:46:a8:84:9e:47:06:2a:da:57:a7:2b:48:
0b:6e:80:8c:6c:e3:36:47:24:41:d2:54:26:77:52:3b:53:a6:
da:7b:7e:b9:7b:48:81:8b:5f:44:73:0c:9a:f5:8b:80:48:50:
c9:e0:54:02:a4:56:27:e0:ed:a4:84:56:5f:31:9a:06:03:9f:
8a:2c:03:0b:b6:16:04:fa:a1:64:05:a2:c4:2e:40:7a:b1:32:
94:51:4e:16:13:44:59:ba:3c:f0:f1:85:07:2e:47:b6:5d:a3:
51:13:b3:b5:95:d8:e6:d0:23:5f:9a:bc:dc:e4:e2:db:4a:bc:
1e:59:d0:8f:bd:ef:42:0a:6c:20:f9:de:49:71:91:c1:a5:0d:
e5:c2:49:2a:91:31:3b:49:d7:a3:0b:1e:0c:c6:7e:68:bb:e9:
31:5a:89:b3:b6:de:6a:c1:f3:95:df:72:2d:b0:af:10:cf:c8:
18:6e:7f:cc:98:1d:24:6e:4e:02:c1:a8:bc:6a:23:2d:9c:89:
e2:4c:c0:b7:a6:e2:71:bc:00:28:8f:b6:1f:b2:24:1c:87:4a:
3d:60:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:09:06 2026 by rpki-client