
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier: GDvnplOamKf/RB9eGpWzT77tIFzR7ckYCEWTPAqNVoE=
Subject key identifier: 25:40:68:0E:65:B5:97:B3:35:CE:3C:52:6D:DE:92:EC:51:A8:C1:28
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0EA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number: 0E63
Signing time: Thu 10 Sep 2026 17:47:18 +0000
Manifest this update: Thu 10 Sep 2026 17:47:18 +0000
Manifest next update: Thu 17 Sep 2026 17:47:18 +0000
Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: 25OnAsNHmzMLLhi6pap7xutQbZvL/+VjBWJgJcUSQ3I=)
2: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: njqCophIvGbWqZOEZO7iH5P4olbdrXCLsypP82DCs2Q=)
3: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: vICYDNS9kD2vGmiU8XjONZtvToD23t4bowNaFlpgJxM=)
4: CDA4E0082E6511F19AB402C39E833773.roa (hash: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=)
5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A=)
6: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: MqeW/D/8P52Csk263/GYlr8+c8ERIR8aUwn81bPGMe4=)
7: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: OMljntVkgQs+vfOk+Rb1tcPgapnLq21/6pFdv7k+86s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Sep 10 17:47:18 2026 GMT
Not After : Sep 17 17:47:18 2026 GMT
Subject: CN=6aa2ed26-6531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:48:5c:5f:84:fa:16:88:7a:29:1b:84:b4:
0f:9e:ea:d2:af:c5:94:9a:ed:b1:ed:7a:de:1d:c6:
14:56:a9:b7:c6:f3:56:f4:8c:66:80:49:86:44:dd:
bf:65:40:4f:56:40:56:13:79:b1:2d:5e:ce:dd:d6:
fb:03:11:84:f1:55:de:41:68:dd:93:af:76:c4:a0:
42:5a:28:f1:d9:19:88:fe:43:ef:24:d9:08:58:14:
f7:92:0f:33:06:c3:e6:c0:e0:41:ee:32:e8:22:d9:
0a:fd:c4:d7:3f:ca:fb:99:98:8e:33:12:3a:e3:ba:
45:4c:6c:0b:fc:27:e2:9a:65:15:b2:ae:25:56:44:
42:5d:d1:91:05:ba:3b:07:84:15:74:e3:ae:74:a2:
00:59:7e:95:51:e9:49:59:a1:fa:7a:87:59:fa:2f:
18:07:26:9a:12:aa:a0:de:ec:21:b8:7b:b5:e0:6e:
1a:3d:fe:5b:e9:77:0b:b9:b9:e4:aa:38:27:a3:cd:
28:ed:d3:63:7d:e6:30:f7:1d:9c:99:0f:74:51:16:
59:45:fd:14:f7:35:2f:11:51:63:57:fd:2b:59:d3:
bf:c7:14:cf:c1:09:4b:23:13:6c:95:c6:9f:3c:a8:
6c:00:e6:7b:f2:a4:ed:21:a1:1b:3d:0c:0c:bf:b3:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:68:0E:65:B5:97:B3:35:CE:3C:52:6D:DE:92:EC:51:A8:C1:28
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:82:4d:67:15:b9:0b:2e:e2:c9:c8:72:5e:94:aa:b3:eb:
39:d6:5e:d8:bc:64:27:a1:ea:19:a2:05:c7:e3:c7:ea:b9:3e:
07:63:ed:23:bc:9e:11:4f:20:be:70:48:74:fd:1e:84:3a:6c:
07:17:aa:bc:3f:17:63:86:92:87:0e:06:2a:76:09:3b:9e:7f:
38:0b:27:81:23:91:db:6a:a1:f6:c7:f2:d4:75:c4:59:2b:82:
98:97:97:4d:0d:ae:cb:a6:b1:d2:6c:19:c6:66:78:c6:8b:b9:
6e:cb:35:4f:25:90:a1:8b:49:d1:70:d9:27:17:94:ad:98:c7:
5f:01:56:07:76:05:98:1a:fb:1c:bc:4a:0a:67:f2:6e:94:86:
77:2c:ba:e9:b7:15:62:84:c8:3a:56:a8:d6:83:17:26:37:e0:
ff:d2:56:f0:88:86:2c:6b:ce:ac:1e:e1:9b:05:0d:87:54:36:
18:6a:9b:53:6e:f6:21:47:df:8a:8a:b1:a3:b9:de:4d:76:54:
fd:05:5c:79:0d:47:b0:1d:b8:1f:56:eb:0a:89:72:5d:cf:71:
3b:26:1a:cf:a4:c0:34:71:b4:fb:f3:a2:d5:2c:f0:c5:01:d7:
af:2f:a0:51:0c:de:70:8c:d9:c4:01:5e:16:84:a2:47:1f:21:
c4:83:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:44 2026 by rpki-client