
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
File: -mAalrTnqFTJ8SflGdb-adTWa2Q.mft (raw, json)
Hash identifier: 7dj8685HJOYSmxX04iShZCRPJ8dNKjzeVcrdU89z6Z8=
Subject key identifier: 03:96:57:3A:6F:D4:E4:5D:20:96:AB:73:D4:C8:B9:30:32:B2:7C:B3
Authority key identifier: FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
Certificate issuer: /CN=A919CD86/serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
Manifest number: 54
Signing time: Sat 03 Oct 2026 08:39:15 +0000
Manifest this update: Sat 03 Oct 2026 08:39:15 +0000
Manifest next update: Sat 10 Oct 2026 08:39:15 +0000
Files and hashes: 1: -mAalrTnqFTJ8SflGdb-adTWa2Q.crl (hash: 3c5a+RVuICOu3J2ve0KE6jBHoWC57ko8dEv4fyBVrZ0=)
2: 90D7D3723F8311F18CBDD8DAB0833773.roa (hash: P6a6wR+MfhCWdAFG07wpqZk3513aDze1znpd7LlZfvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CD86, serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Validity
Not Before: Oct 3 08:39:15 2026 GMT
Not After : Oct 10 08:39:15 2026 GMT
Subject: CN=6ac0bf33-f74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:e5:e1:85:59:f9:0a:16:00:bb:04:8f:be:
44:00:60:98:01:9a:26:2a:b5:7d:6c:a1:0f:a1:9c:
10:2f:2f:6e:24:72:57:e3:a2:dd:02:c6:63:e2:28:
fd:21:c6:24:e5:86:2a:31:ac:08:cd:ca:19:56:f1:
a1:8d:2f:ce:7a:b6:e5:e9:ea:bf:73:44:f7:b1:e5:
52:9f:8e:9d:99:17:c3:3f:3b:61:a0:c7:36:3a:58:
59:a4:00:b6:48:94:2f:ac:6d:51:ce:88:82:aa:73:
fd:e6:2d:12:0a:72:ed:69:8a:f4:62:4c:91:c6:57:
0b:d5:61:80:3d:b4:ca:a4:19:d8:11:9e:82:e7:7f:
e7:b1:ef:7f:15:a7:3f:2e:6a:cf:87:9d:32:03:ba:
c8:ec:cf:92:c5:80:f1:51:4e:57:79:73:d7:39:54:
3a:70:43:d4:20:97:2f:17:1c:c0:83:10:56:b1:d0:
81:dc:db:9f:43:55:bd:1e:91:bb:a9:e9:a2:2c:74:
8a:80:c7:7e:ae:67:22:e6:1b:0d:c0:29:fb:6d:4f:
15:1d:f3:47:b6:ae:f8:5c:6d:86:5b:f1:3b:1e:31:
17:dc:5f:6b:35:44:2b:ca:9c:4d:06:f4:3d:b7:3a:
f2:cd:58:67:c4:e3:02:dd:e9:7a:28:5c:38:e5:4a:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:57:3A:6F:D4:E4:5D:20:96:AB:73:D4:C8:B9:30:32:B2:7C:B3
X509v3 Authority Key Identifier:
keyid:FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:fb:f9:f9:e1:c0:8d:bd:52:cd:17:87:f6:54:72:45:ca:72:
53:ad:f1:c6:35:42:4b:4f:31:2b:aa:cb:0f:c2:e3:8f:f2:d9:
47:fb:8f:f7:03:0f:a3:1f:9f:68:96:f6:5d:a6:1b:c2:25:f5:
18:e0:6b:b4:d4:3d:f1:c8:0a:f5:de:26:4f:da:1f:b6:95:14:
32:92:60:1d:bc:41:c6:9a:81:80:78:03:97:a9:5c:a3:7e:90:
26:d9:5f:b7:cb:ce:7c:5b:81:4e:58:86:cc:a8:f7:fc:62:95:
86:0d:75:3a:ff:66:a8:2a:a8:91:6f:3a:28:36:0e:ad:f4:3b:
aa:b0:17:fe:7a:c1:e6:db:3b:2e:fb:18:57:d0:89:91:a8:ea:
a7:4a:69:2b:3b:54:18:9a:6c:29:8b:b7:87:2f:da:36:ed:16:
2b:ef:bc:55:d8:7b:c9:ec:30:74:10:71:56:55:4d:02:b1:fe:
2d:9d:e5:cc:4e:a3:fa:10:ef:87:f5:2f:61:54:67:b7:a4:bc:
c4:96:92:49:0a:88:b5:88:aa:8d:a5:18:b5:71:49:37:75:3f:
5f:60:1d:4a:20:69:24:19:26:47:d0:c5:79:50:36:ca:07:7b:
b4:06:35:82:37:75:b8:28:24:85:5d:6e:b6:e7:50:6f:27:10:
99:b8:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:20 2026 by rpki-client