
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: 7fTcaaBn9FEtGKRGXDd0tKkBfEBihI7RLsCUh+mwGDw=
Subject key identifier: C8:B4:9D:BF:95:FC:56:3B:7D:95:41:49:BD:1D:5A:E2:41:0D:93:38
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 08B8
Signing time: Mon 12 Oct 2026 20:42:27 +0000
Manifest this update: Mon 12 Oct 2026 20:42:27 +0000
Manifest next update: Mon 19 Oct 2026 20:42:27 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: mazDbHvgKbmaF4qHHjBwma0l8qlVpvB/q5TzT0+Aq10=)
2: 315AE00CACB511F198E045286211F970.roa (hash: OLqvN5SGsXkC45N993N8hmDykDKyNvPNdNsxaA78pOc=)
3: 58B1CFE4ACB511F189514C3E6211F970.roa (hash: +HPyzRFev15hy8mDLs8iQh4n1cJtMPGtUSACNLvB6Lw=)
4: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Oct 12 20:42:27 2026 GMT
Not After : Oct 19 20:42:27 2026 GMT
Subject: CN=6acd4633-5546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:01:1f:dc:3c:20:43:79:0d:6c:49:78:6f:
9e:19:04:fd:99:63:8b:9f:75:18:80:43:74:a7:d3:
19:b2:b4:e5:91:b9:39:f3:14:88:86:f1:ed:dd:42:
06:85:c3:05:0b:3d:01:6c:49:04:fe:9f:9f:12:a2:
ab:54:21:f5:ee:4e:86:50:97:bb:9a:68:a5:6c:8c:
6e:c2:9b:d9:3d:bf:bd:bb:25:7f:2e:90:61:19:89:
6f:8b:a9:97:bc:bb:09:dd:6d:b8:f0:35:f7:42:0b:
9c:0a:55:d0:5e:eb:30:ea:ed:29:e5:01:9e:a9:6d:
4b:3a:83:ee:40:7b:dd:53:03:1a:ce:2e:bd:62:5f:
84:e9:b0:77:26:a1:e8:f2:60:1f:9a:39:90:82:06:
da:d5:36:8f:3a:1a:8d:65:58:c7:91:78:5b:f7:8a:
9c:58:fc:c4:62:7f:7e:fb:2b:be:ce:b3:b2:f3:25:
df:6f:1f:e2:7b:a2:ea:e2:28:ec:00:43:39:68:b1:
66:4e:f8:4c:08:84:93:84:22:38:c9:78:e7:0e:a4:
28:6b:c8:de:de:21:1c:3a:aa:e8:7d:84:38:bb:5c:
9a:52:84:74:eb:82:af:0b:6e:5b:d5:dd:b2:99:78:
ea:f7:0b:09:cd:ee:0c:61:cf:cc:b7:f1:7b:5f:0e:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:9D:BF:95:FC:56:3B:7D:95:41:49:BD:1D:5A:E2:41:0D:93:38
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:ed:f4:a1:82:4d:1e:f2:81:cb:73:c6:de:4d:41:23:5e:
5f:f5:0a:45:25:77:d4:3c:06:fc:1a:f7:8c:d4:6f:e5:8c:22:
fc:25:8d:e5:31:9c:79:5d:92:a4:eb:7d:e2:43:8e:e7:32:a8:
db:ee:47:34:31:b5:15:f1:64:64:26:97:10:89:00:92:3e:9f:
4a:77:cc:cf:01:04:9f:f0:0e:12:48:20:86:a9:f0:43:ad:71:
31:75:e5:17:01:9a:e7:52:4c:95:8a:2a:f5:67:d4:ca:c0:a9:
7a:ff:56:6d:35:f9:6f:3d:bb:a7:88:d8:b9:28:ed:72:24:30:
44:cc:03:4b:70:72:3d:f1:d4:f8:e9:f0:68:71:c1:1c:10:7e:
7c:51:49:ef:51:5c:77:81:b5:df:5e:1d:90:0d:5b:66:94:5d:
f5:f8:75:b0:8b:a0:05:7c:74:b4:d9:f5:0a:7d:f8:1d:78:bf:
2b:e4:3f:aa:c0:35:7e:cb:da:07:5c:44:9f:0a:a3:ec:34:ad:
c2:7d:95:6d:c9:80:b9:76:63:76:39:46:eb:16:f3:d2:03:d1:
d8:2d:7d:3c:12:e5:49:b7:8d:ca:0b:a2:33:f2:e4:54:a6:60:
de:7a:17:38:ac:8e:31:19:a4:ba:ce:70:e1:59:e5:2a:ea:0c:
1b:d5:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:17:09 2026 by rpki-client