
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier: j+ytz9AxRDZzjcUHTR2w28BaffghndRW/xeNz9G1ozk=
Subject key identifier: 9C:2C:99:85:FF:91:0A:48:F6:C6:4B:A3:9B:AF:26:DC:27:C7:A0:89
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 3601
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number: 35AE
Signing time: Thu 08 Oct 2026 15:11:22 +0000
Manifest this update: Thu 08 Oct 2026 15:11:22 +0000
Manifest next update: Thu 15 Oct 2026 15:11:22 +0000
Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: d7tGkDubJSDYU8/Le2vndrQZZBKhgmdv5oXHKks9mJw=)
2: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: t2gAVW67A8FPQSw43kqZ8vJl5Z2f7QWlR2JHEjIknys=)
3: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: PQ4w7noPPd89kB2ZqP2GFIaidvBQ5795NUCgBNRfmkU=)
4: E243CD9C227811F1B65A16B9A4833773.roa (hash: yUigKe1dmxmlY5PK8ANeaQZIVKCiPZVhXoUmPCQH+IA=)
5: 861025FE5FE811F1B01C65CA7947A888.roa (hash: LHiDdvarbkdpEuPe2M9rxWr2BXS9n0jE/IDZDbqEKUU=)
6: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: /ntl2F/1LsBUf6mHzNKm8AWIZa2QHwO1EhVJc7GNAWY=)
7: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: WwnnEfKvQW8AHFCsNUFqMuebGESi69lq9dTap91nOMg=)
8: 9B26CED6A5CD11F19849D7873311F970.roa (hash: 1s9JWmvLoOT3oTZ5WTALsLP5ZSFYgG75xPCol597wac=)
9: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: F6yN5hb+szomI3vf40niMr65NLLfxzSYiGO/WL4S7C0=)
10: 4CF39D56A79511F185FBCE2B4711F970.roa (hash: SMW4S5FYxczF25s5zzpkvjJXs6KT4YiUOpb73XRxxU4=)
11: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: RB+erqG+XmR03HPaW893e5ncuWrZ91RUCBgWmmNGCLs=)
12: 98AF39F22E4211F1901494E893833773.roa (hash: P8wptNIupCQw4+edhARjRq5yF0V3iibh8gRUxBJqX1U=)
13: DF361B00A5CC11F1A22117043311F970.roa (hash: Pob24smwgTjPWg3/zZl4f+wy5+QycWgluq4+t3FuClk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13825 (0x3601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Oct 8 15:11:22 2026 GMT
Not After : Oct 15 15:11:22 2026 GMT
Subject: CN=6ac7b29a-a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:df:40:c4:fe:f4:de:0c:3b:c3:95:af:30:
81:1e:fa:08:aa:27:1e:9b:e0:1b:62:3b:c2:65:db:
1e:dd:14:72:f0:55:5b:0d:f2:71:62:94:a5:b0:70:
c0:76:d1:90:c1:c6:d4:e9:17:e0:8b:97:fb:62:b7:
c2:e2:15:c3:66:b3:ac:aa:50:dd:ec:a2:b5:6a:c5:
06:06:fd:04:a8:04:9c:54:27:fb:cd:6c:50:50:f0:
8c:60:f5:38:ef:57:06:72:66:54:a6:9d:24:12:fc:
cd:69:90:0a:5e:40:8e:84:99:61:1b:c1:8c:a6:3a:
54:e9:09:64:e6:0a:3e:1c:6b:2a:47:40:12:2b:95:
28:2f:f6:9c:f1:5c:18:ea:b5:66:0d:20:97:93:4d:
9b:26:05:24:83:06:de:6f:52:7f:88:60:8c:52:58:
7c:21:0a:27:59:37:40:89:22:b0:16:82:b3:50:01:
58:4d:c3:c5:9e:30:75:14:92:a3:ba:5c:bd:94:2a:
1e:cb:4d:06:95:7b:9e:86:c9:a6:15:ad:a2:07:66:
6d:27:0e:32:dc:7a:9a:60:e2:6c:19:86:39:5f:00:
3d:c9:86:64:c3:97:eb:79:bf:3a:d0:84:21:5f:59:
01:73:93:77:a9:25:66:86:94:5a:1d:08:92:25:ce:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:99:85:FF:91:0A:48:F6:C6:4B:A3:9B:AF:26:DC:27:C7:A0:89
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:49:f4:6a:1c:64:f4:75:4a:ca:13:5a:43:3a:b2:cd:b8:61:
3e:d2:da:1b:14:6e:b5:46:bd:71:67:69:a8:60:1d:4d:11:59:
f6:8d:b1:90:b4:b5:71:4f:9c:04:f7:fc:c4:32:28:2e:ab:52:
d9:94:5e:b6:96:5b:60:30:f4:03:cc:cb:84:1a:0c:97:22:09:
50:92:cd:ee:1b:f1:2b:f2:e1:27:d1:02:04:1d:17:fe:e9:2e:
b8:a4:42:73:2e:99:26:84:a9:4b:92:40:b0:d9:e2:79:28:f4:
45:ae:44:fa:ff:0f:22:a2:33:e6:27:6f:93:bc:81:24:de:6b:
d8:9f:b7:a8:75:bd:a0:83:7c:79:f3:f3:30:10:ad:fb:31:3c:
66:ec:e1:6c:ee:15:0c:62:81:29:eb:ba:df:33:97:d0:e6:ef:
7b:39:7c:e3:09:9d:f8:ef:4b:5a:3b:eb:d9:74:b0:73:5c:0a:
89:96:c2:f1:e0:e2:48:80:91:97:99:8b:6c:e3:02:83:f3:62:
59:64:c3:44:77:8d:d1:06:f7:23:c9:bb:b7:80:1e:3d:90:a5:
48:e6:99:38:70:cd:52:1f:e4:50:e8:29:27:56:d9:29:35:7c:
99:b6:97:c1:a0:f2:e1:47:77:2c:45:b8:e4:3e:7f:2b:3c:ab:
de:89:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:44:20 2026 by rpki-client