
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier: AZYfEFlcG4cSz4DWci+DZO1WCTJmZpVvEUUXl1H9C1w=
Subject key identifier: 90:36:FA:39:89:FD:EF:59:CA:C2:C0:EB:0C:81:8E:67:02:F0:C8:1E
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number: 0247
Signing time: Wed 23 Sep 2026 02:50:46 +0000
Manifest this update: Wed 23 Sep 2026 02:50:46 +0000
Manifest next update: Wed 30 Sep 2026 02:50:46 +0000
Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: nOJ0jIXHsBFIBv2YRPlhRW1Hx5kEmAfxyEXtxZ3v2FQ=)
2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=)
3: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=)
4: A35C979AA7A111F19DFE33BF4A11F970.roa (hash: HnpdJRvMuQvDGjlrN1zUcFvsx5jXwLrzVWEJuP5dobM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Validity
Not Before: Sep 23 02:50:46 2026 GMT
Not After : Sep 30 02:50:46 2026 GMT
Subject: CN=6ab33e86-4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:98:53:47:f1:4f:a8:60:f1:c1:fa:7c:4e:
6f:21:a2:b7:f6:09:ad:6f:8e:13:67:f8:ac:cd:ac:
a6:4a:88:87:6c:6f:d8:8c:c2:a9:80:62:d2:0f:8b:
14:35:a3:13:95:0b:f0:05:cc:ab:1d:be:96:28:d6:
3b:c8:b0:d7:b8:53:77:2c:21:b5:23:17:61:4c:75:
b2:61:3c:05:70:7a:08:4c:ae:8d:b8:b6:ee:c8:3c:
cc:23:ee:17:9d:1d:c8:7e:fa:ad:ea:d5:4a:14:7c:
0c:a7:a9:a3:4d:09:65:6e:8c:e9:1e:16:4f:39:bc:
37:2d:3c:8f:0d:a2:78:3d:8f:7b:e7:42:ea:4a:ba:
82:45:c6:69:05:24:e4:b5:b4:42:e3:76:be:48:a2:
ca:9a:9f:bf:8c:39:a1:37:8e:d3:35:45:dd:48:11:
24:b6:e9:87:a1:88:ea:63:39:a2:18:30:c9:19:7f:
ba:a9:c6:4a:34:37:73:b0:bd:8f:b9:3b:17:30:53:
f4:63:f9:e6:34:16:52:97:f5:87:69:68:fb:1d:50:
61:56:c1:c1:31:b1:dc:73:1a:d2:9b:e0:e6:c0:21:
e1:12:73:47:dc:3a:d5:8a:47:ce:ef:70:24:28:1d:
a8:e4:51:f5:8c:f7:23:94:80:28:d5:24:c2:c8:56:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:FA:39:89:FD:EF:59:CA:C2:C0:EB:0C:81:8E:67:02:F0:C8:1E
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:86:6c:e1:21:ed:97:87:66:33:47:99:33:98:61:eb:e9:
18:ee:b0:d8:81:a0:ba:dd:bc:8d:95:ab:03:6f:25:00:d7:66:
b6:5e:6e:4d:fd:6e:76:7f:84:46:17:2f:f2:7c:dd:d8:87:3b:
2a:66:84:40:5d:10:b9:10:a9:0c:37:2a:be:70:92:46:aa:e9:
64:7e:a7:8b:a0:e4:64:64:f7:24:db:dd:01:ea:60:58:44:78:
1a:e6:d7:17:75:c7:02:ab:3c:55:54:8e:bd:91:39:1a:04:f2:
05:b9:1b:34:c1:67:06:ad:bb:42:20:89:80:2d:b2:4c:48:e9:
ac:bf:3d:01:02:5b:7a:ef:39:8f:fe:17:c0:e3:f8:1b:20:93:
2e:e0:63:d6:bb:22:2b:4c:fb:e4:5d:16:94:39:88:92:1b:94:
3d:27:51:d7:3e:41:f4:2b:03:26:64:e2:76:65:6d:c1:39:37:
57:fb:9f:9d:47:41:98:13:cf:5d:f1:3c:94:31:3b:b9:03:32:
bc:53:45:3b:83:84:7f:71:11:1e:63:b5:70:0d:26:7f:80:93:
c5:33:85:64:bf:ce:e6:3b:92:68:47:24:a0:ce:59:f7:42:d1:
b3:d9:5b:40:ff:eb:1c:a7:05:77:1c:22:68:3f:ba:df:2a:c2:
74:7b:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:29 2026 by rpki-client