
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.mft
File: ndBXuMKNWb3TOt87Y_l0KNFuAs8.mft (raw, json)
Hash identifier: CyadpYRsNw2sGhrGBfZsXHau27pNsuy06jjP/zDAYYk=
Subject key identifier: 77:CA:21:1C:FF:BA:04:4E:A0:A7:3E:6F:CB:63:1C:09:BA:48:C5:53
Authority key identifier: 9D:D0:57:B8:C2:8D:59:BD:D3:3A:DF:3B:63:F9:74:28:D1:6E:02:CF
Certificate issuer: /CN=A919243F/serialNumber=9DD057B8C28D59BDD33ADF3B63F97428D16E02CF
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ndBXuMKNWb3TOt87Y_l0KNFuAs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.mft
Manifest number: BE
Signing time: Sat 03 Oct 2026 07:46:20 +0000
Manifest this update: Sat 03 Oct 2026 07:46:20 +0000
Manifest next update: Sat 10 Oct 2026 07:46:20 +0000
Files and hashes: 1: ndBXuMKNWb3TOt87Y_l0KNFuAs8.crl (hash: LQxKxWSFJKJOY7yubv3k0wPYOEA2ZttPr42IVXl67GA=)
2: 1AEF4082B6F211F181269CD8A4EE528E.roa (hash: 67cGCjFPiu6gmHzBr4awjYTlA9fDb86URM4ItAZ5ubw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.crl
rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ndBXuMKNWb3TOt87Y_l0KNFuAs8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919243F, serialNumber=9DD057B8C28D59BDD33ADF3B63F97428D16E02CF
Validity
Not Before: Oct 3 07:46:20 2026 GMT
Not After : Oct 10 07:46:20 2026 GMT
Subject: CN=6ac0b2cc-55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:35:24:15:e0:21:10:65:ad:67:ae:7d:a1:
c6:9b:03:86:06:0b:3e:83:e9:e5:cd:e3:78:a8:f3:
25:88:ec:9e:b2:c7:69:2e:5b:7e:3c:f3:ff:15:f9:
e7:df:3c:65:ed:a3:41:33:49:e6:64:6f:4a:e1:8a:
ef:e4:fc:53:38:a6:2e:7a:25:b0:b2:f7:2c:e1:5d:
f1:f9:b3:44:52:ce:bd:50:cc:a2:fd:03:3e:e0:af:
c9:36:68:7e:bf:92:34:61:49:f5:16:6a:7f:75:47:
90:6c:51:c0:e3:61:15:68:4c:98:f4:04:cf:af:21:
65:72:c2:21:b7:72:ba:87:4f:96:8d:97:43:85:0e:
e8:ca:2c:bc:71:d2:d8:68:03:04:0a:70:f4:03:41:
0f:01:d4:31:17:7a:ba:64:10:ea:3e:91:64:cc:7a:
5b:f6:b4:ae:8f:ec:ca:f2:09:27:79:4e:ba:43:8c:
51:d1:64:68:fe:6b:68:f1:d2:c3:34:59:e2:19:12:
0a:2f:c5:12:10:e6:3b:56:0e:e5:45:83:14:e6:e3:
3a:9b:cd:78:93:a2:40:68:22:ad:86:d4:f6:b2:fd:
a1:fd:d9:47:ac:cf:ea:37:ca:1b:a4:ed:34:3f:e3:
64:73:85:76:93:1d:b0:03:76:43:88:19:5c:96:b5:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:21:1C:FF:BA:04:4E:A0:A7:3E:6F:CB:63:1C:09:BA:48:C5:53
X509v3 Authority Key Identifier:
keyid:9D:D0:57:B8:C2:8D:59:BD:D3:3A:DF:3B:63:F9:74:28:D1:6E:02:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ndBXuMKNWb3TOt87Y_l0KNFuAs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/ndBXuMKNWb3TOt87Y_l0KNFuAs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:bd:72:83:58:a9:1d:d8:82:14:a2:4f:71:46:5a:b3:24:2a:
74:26:38:95:e8:46:b5:e1:ff:75:84:01:6a:1a:bb:74:5b:16:
1d:ce:1c:33:8f:83:04:31:30:49:6e:e9:51:b4:da:d5:e0:e9:
1e:6e:0f:96:df:20:3f:6f:fd:de:6a:6a:fd:98:dd:d2:e1:71:
8a:ae:c6:31:0f:3e:37:a5:30:05:d4:f4:bd:94:f5:b0:71:a6:
2e:e0:e6:db:18:7c:41:4e:b2:79:3f:3d:5d:7d:4e:d6:da:06:
2d:6f:b7:6d:26:df:ed:b3:bf:9f:22:c4:42:70:7d:28:a0:c3:
77:37:20:05:da:12:43:26:2a:29:d1:62:f7:10:af:20:dd:e1:
d7:4b:67:cf:95:7b:47:37:b7:89:27:d3:d5:64:dc:4d:3a:a1:
46:2b:5f:80:87:d7:0c:6d:4c:36:8f:4e:2a:d7:b8:c9:73:33:
08:a9:32:10:9d:dd:b3:1e:8f:97:f6:e6:58:5a:cc:7e:76:c0:
45:59:be:0d:e7:b8:20:71:cc:6e:a9:6e:ec:6d:a5:96:e9:ff:
68:41:2a:40:38:f9:d3:8b:aa:5c:54:15:61:95:cb:c6:fa:fe:
f9:a2:bd:54:9f:1a:23:df:46:3f:e9:12:6f:d8:f4:30:b4:37:
d9:c2:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:23 2026 by rpki-client