
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File: RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier: vpQZx3+hxZLhVsWOm3AaxNtUhgVEvLQH/NvaGEuhR1E=
Subject key identifier: 8F:F4:8B:3F:C7:50:B3:25:82:90:20:F7:D7:3F:1F:64:86:15:84:EF
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number: 02AC
Signing time: Wed 09 Sep 2026 01:45:08 +0000
Manifest this update: Wed 09 Sep 2026 01:45:07 +0000
Manifest next update: Wed 16 Sep 2026 01:45:07 +0000
Files and hashes: 1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: DbpZN4FrpgIq/t9zUKihWwO4mM/dcf/Ki09HOIx+vRM=)
2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: evtrgH99xTRhsjxDYSVy8xCMMoeXXNDwtZDEk4wJBb0=)
3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Validity
Not Before: Sep 9 01:45:07 2026 GMT
Not After : Sep 16 01:45:07 2026 GMT
Subject: CN=6aa0ba23-72a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:a5:34:9f:d9:db:8b:e3:82:bf:f3:10:ec:
c8:fc:9a:ea:38:21:59:32:03:e7:a5:26:ca:c0:16:
dd:97:0b:b1:b9:ac:82:92:e8:24:1b:d2:62:54:d4:
64:33:36:b3:2e:35:61:c5:a0:08:ea:ed:db:90:94:
06:dd:67:60:1c:c5:bc:de:bf:68:37:cc:84:d1:ca:
0a:7d:f7:97:8d:9e:2e:7e:a2:0b:dc:b5:7f:a2:8d:
82:d3:46:09:8d:8a:11:ec:c4:8c:b0:fe:73:75:8f:
d9:97:da:d1:92:13:fd:de:bd:32:06:58:3e:0d:82:
3f:41:dd:be:ec:e1:0a:ea:ed:d0:2c:d9:13:35:10:
73:09:da:cb:a2:3b:31:35:4c:7c:98:92:45:db:fe:
07:17:61:e7:88:b3:61:df:06:76:17:75:b1:88:99:
0a:51:72:ca:33:71:e8:ef:44:f3:72:bb:74:33:36:
a8:38:a0:34:fb:51:65:fa:67:ea:a4:99:04:2c:50:
74:68:02:76:d1:e8:05:dd:2b:65:c0:88:fc:d6:76:
c5:b4:c6:15:d1:54:ea:05:d5:3f:1c:f2:47:04:0a:
9b:44:27:c9:f5:0e:e4:27:3e:cf:69:2e:68:0c:ed:
53:64:d2:83:92:1c:1f:75:15:99:b9:2e:f8:0a:41:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:8B:3F:C7:50:B3:25:82:90:20:F7:D7:3F:1F:64:86:15:84:EF
X509v3 Authority Key Identifier:
keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:79:ac:30:33:31:61:cc:6a:6f:97:89:4b:1a:18:33:55:
41:50:00:4e:7b:a5:3f:87:ec:7e:63:aa:f8:d4:de:b6:be:3d:
bc:34:d3:d9:08:c5:e2:1d:06:ad:62:cc:33:c0:e2:7e:71:c0:
58:84:83:2b:82:ae:f1:8d:56:d7:32:bc:b5:2c:88:7f:97:0f:
33:e5:5c:fc:a9:8b:26:37:72:36:4b:fc:86:a5:45:e1:49:37:
f3:a3:4e:be:94:12:ea:75:62:98:00:7d:27:c5:2f:f2:11:89:
83:54:3a:e3:fc:e5:93:78:89:01:f0:7f:88:d6:04:51:6b:d8:
6f:03:fc:4d:a8:b5:fe:95:3f:f8:dc:bf:e3:c2:ce:51:bb:bc:
74:6d:86:5f:89:f9:71:45:d9:cb:d7:ff:9f:c1:35:54:df:1e:
1b:39:19:ad:64:0b:d1:7f:3c:59:11:02:63:e3:a5:3b:de:65:
31:7b:96:62:72:ae:6f:96:5f:46:0c:8c:53:06:66:7a:c6:b5:
9e:ab:55:f7:92:4b:55:c5:51:f8:62:2d:be:d7:90:85:fa:8e:
dc:64:7e:4e:ab:0e:0c:e4:10:7b:13:3f:78:a1:19:af:96:12:
d5:28:89:a5:3f:38:ee:32:20:3f:64:ab:92:77:37:71:60:5d:
f7:a7:c8:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ1OTAxMTAvBgNVBAUTKDQ0OEE2RDgyOTc2QTU1REM1NzBCQTU4MDM3NzBBQzZB
RERCQkQ4ODYwHhcNMjYwOTA5MDE0NTA3WhcNMjYwOTE2MDE0NTA3WjAYMRYwFAYD
VQQDEw02YWEwYmEyMy03MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PelNJ/Z24vjgr/zEOzI/JrqOCFZMgPnpSbKwBbdlwuxuayCkugkG9JiVNRk
MzazLjVhxaAI6u3bkJQG3WdgHMW83r9oN8yE0coKffeXjZ4ufqIL3LV/oo2C00YJ
jYoR7MSMsP5zdY/Zl9rRkhP93r0yBlg+DYI/Qd2+7OEK6u3QLNkTNRBzCdrLojsx
NUx8mJJF2/4HF2HniLNh3wZ2F3WxiJkKUXLKM3Ho70Tzcrt0MzaoOKA0+1Fl+mfq
pJkELFB0aAJ20egF3StlwIj81nbFtMYV0VTqBdU/HPJHBAqbRCfJ9Q7kJz7PaS5o
DO1TZNKDkhwfdRWZuS74CkE3VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/0iz/H
ULMlgpAg99c/H2SGFYTvMB8GA1UdIwQYMBaAFESKbYKXalXcVwulgDdwrGrdu9iG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU5MC8zNjM1NTk1Mjkx
OUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZkeFhDNldBTjNDc2F0Mjcy
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JJcHRncGRxVmR4WEM2V0FOM0NzYXQyNzJJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDU5MC8zNjM1NTk1MjkxOUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZk
eFhDNldBTjNDc2F0MjcySVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEZ55rDAzMWHMam+XiUsaGDNVQVAATnulP4fsfmOq+NTetr49vDTT2QjF4h0G
rWLMM8DifnHAWISDK4Ku8Y1W1zK8tSyIf5cPM+Vc/KmLJjdyNkv8hqVF4Uk386NO
vpQS6nVimAB9J8Uv8hGJg1Q64/zlk3iJAfB/iNYEUWvYbwP8Tai1/pU/+Ny/48LO
Ubu8dG2GX4n5cUXZy9f/n8E1VN8eGzkZrWQL0X88WRECY+OlO95lMXuWYnKub5Zf
RgyMUwZmesa1nqtV95JLVcVR+GItvteQhfqO3GR+TqsODOQQexM/eKEZr5YS1SiJ
pT847jIgP2Srknc3cWBd96fIBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:19 2026 by rpki-client