
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
File: tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json)
Hash identifier: mqr3Pgq5kaCeznvfcrNizf3QC73gtc937eIlR1mkllU=
Subject key identifier: 1D:C0:BD:D1:9D:5F:F6:F7:43:BD:F6:1E:15:9F:07:C3:BE:CD:64:EC
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Certificate issuer: /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
Manifest number: C0
Signing time: Wed 07 Oct 2026 07:24:26 +0000
Manifest this update: Wed 07 Oct 2026 07:24:25 +0000
Manifest next update: Wed 14 Oct 2026 07:24:25 +0000
Files and hashes: 1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: iJX5++i69hyFPtmkbvEgxBkDA9+QnWBYMyL4WgyJzsI=)
2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: 7Nz08dDyFaiyXyaRG47k8xQgh89h8nQMPXHHiTOBsIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Validity
Not Before: Oct 7 07:24:25 2026 GMT
Not After : Oct 14 07:24:25 2026 GMT
Subject: CN=6ac5f3aa-101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:c8:bb:f7:2c:32:51:ae:ec:62:dc:af:37:
bc:9b:d1:be:69:e0:2e:3a:80:0b:77:e9:51:63:f0:
38:98:9c:3a:6c:e7:01:b1:37:af:75:84:5b:54:fb:
05:ca:0b:5b:d6:d3:d0:ba:dd:03:ac:2d:00:b1:65:
b9:8e:8e:2a:4f:84:60:4d:f3:f6:f3:33:93:b8:c2:
01:c3:ec:d7:bf:c3:3c:ee:dc:07:99:04:cb:a0:67:
ec:f9:78:0e:6a:31:c4:c5:df:cd:0c:39:5b:53:c7:
56:81:7c:37:95:1d:d0:63:57:71:7c:f4:3e:8b:83:
57:19:2d:ae:51:30:cf:0a:13:04:1b:c4:4a:a3:76:
21:62:2f:b3:4f:cf:05:d0:7b:8a:5f:56:5e:4f:64:
2b:b5:2d:f6:7c:a7:0d:74:97:f8:bd:d3:aa:68:78:
d5:47:2a:2f:0d:0a:45:19:f1:30:7e:08:cd:ad:50:
2f:9d:6c:4d:6d:1e:af:0f:49:7f:e1:65:16:f5:52:
76:a6:0f:4a:26:d0:33:99:9b:48:e4:bb:a8:a0:29:
79:f7:88:cc:3b:95:9b:f3:40:a5:c4:e4:32:5d:2a:
50:e8:32:7a:ad:60:7f:37:45:aa:ce:45:4c:bb:b4:
08:dd:4a:40:f6:a0:94:74:7f:9d:5f:6a:1c:31:1d:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:BD:D1:9D:5F:F6:F7:43:BD:F6:1E:15:9F:07:C3:BE:CD:64:EC
X509v3 Authority Key Identifier:
keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7e:89:e0:82:b5:92:23:4c:dd:0b:ec:ed:45:56:87:d0:a9:
56:4c:ef:43:19:fd:be:e3:60:d1:c9:45:ce:05:d3:6f:ce:a0:
0a:2b:bd:27:d4:07:28:38:7d:a7:ca:a9:ca:6e:9b:48:2e:c4:
17:60:a6:ca:70:e1:6e:6e:ad:58:e6:3c:b0:24:62:61:ce:34:
f7:0e:56:4c:c2:46:6b:3c:81:c5:95:16:55:13:d6:7d:af:08:
bc:50:11:e4:e9:3f:7c:3d:c6:fd:f3:66:6f:98:a9:a8:9e:9c:
8f:af:be:74:86:7f:29:f6:80:c6:81:36:fb:a4:5b:54:5a:d5:
6a:56:0b:41:cb:28:3e:21:00:d4:2f:7d:f8:65:b2:77:0d:ea:
8f:dd:20:00:95:6c:78:c9:a6:48:89:98:2a:23:79:44:50:84:
a3:fd:97:ff:53:2a:54:10:40:13:7f:98:70:74:c1:67:6d:3d:
e0:61:07:a4:bb:76:f6:76:8a:e7:f6:1e:c5:e8:27:a1:f8:a8:
c6:35:e5:60:eb:67:9c:bd:63:ed:f2:de:be:f4:f5:ee:8d:b3:
05:bb:da:fe:25:2d:c9:47:ad:28:f2:82:d0:3a:78:f1:bc:cb:
04:88:b1:10:9a:df:80:04:35:b8:fb:04:d5:58:fa:8d:57:e2:
6e:57:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:58 2026 by rpki-client