
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json)
Hash identifier: Zqtw2iXpHdGqm2Qeoqy9yfgxbUhk5cmqwBf7wDt+t30=
Subject key identifier: A7:EA:DD:05:1A:96:5A:2E:9B:47:43:90:A0:70:FD:82:3E:83:91:BC
Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35
Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
Certificate serial: 0918
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
Manifest number: 1B33
Signing time: Sat 26 Sep 2026 17:29:46 +0000
Manifest this update: Sat 26 Sep 2026 17:29:45 +0000
Manifest next update: Sat 03 Oct 2026 17:29:45 +0000
Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: CFFqoeiDX6a8sivfu0p9rY5ENk76PFyWpwKknJXqRMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl
rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
Validity
Not Before: Sep 26 17:29:45 2026 GMT
Not After : Oct 3 17:29:45 2026 GMT
Subject: CN=6ab8010a-6ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:66:c9:34:23:69:26:05:80:a9:63:f8:9c:
7b:98:82:20:20:60:dd:cc:af:d2:5f:22:45:ac:2d:
93:3f:00:30:b8:90:f5:14:cf:2e:ca:7b:c7:cc:5d:
84:5a:da:57:4c:61:c8:95:d2:3e:32:81:ab:59:c6:
3b:d4:40:27:b5:bd:21:e0:85:33:c6:fb:6d:0e:21:
f9:47:ca:08:c1:83:47:2e:23:db:1e:25:a6:fe:28:
4e:a9:30:b6:80:6a:1c:8b:76:d2:4e:9c:1c:65:9c:
28:1b:68:33:01:fc:7f:cc:a9:3b:84:a4:d7:4e:65:
1a:97:7b:dc:27:6b:6a:08:8e:08:59:19:6c:2f:ff:
0c:2b:cc:5b:c3:58:e3:94:eb:e0:a2:fe:ee:45:b8:
9e:17:50:87:f6:86:99:8f:8f:23:e2:51:57:ea:80:
f3:cb:2b:75:d8:f1:92:b0:af:73:74:e5:07:b2:97:
b5:2c:6e:74:d4:33:5a:35:c6:3b:2c:89:6a:28:a1:
51:b7:41:f7:8f:22:15:1a:4a:e0:ce:56:0f:25:44:
de:1f:63:66:7c:88:7e:89:8e:5e:dc:77:d3:08:ea:
c1:d1:ae:f3:d2:03:91:f7:b0:93:35:e0:35:dd:d5:
f9:29:04:41:64:91:72:d6:01:fc:e5:5e:a0:c6:ed:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:DD:05:1A:96:5A:2E:9B:47:43:90:A0:70:FD:82:3E:83:91:BC
X509v3 Authority Key Identifier:
keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:e6:d5:7f:2b:a8:8b:43:15:28:3d:f0:cb:5a:5c:14:8e:
9a:0c:41:06:ba:f6:2f:47:07:ad:da:47:71:5c:34:33:58:6f:
53:43:0f:1a:47:6a:3a:df:de:73:11:1b:f7:5b:e1:9e:8f:93:
34:64:cb:26:cd:a5:85:11:fa:e1:05:12:9b:0c:22:3b:43:7b:
b0:a7:12:d6:1f:87:f2:7f:fe:86:40:99:9e:77:52:62:af:92:
e1:72:04:3b:87:50:2f:16:4c:7c:2c:cc:bf:e9:ee:db:63:c2:
bd:cb:3e:9d:d5:3e:c9:ff:4c:19:d4:ae:90:e4:56:10:54:0d:
b3:1f:15:c9:89:a7:6b:00:70:3f:a0:05:65:6c:48:2f:a8:63:
c8:05:e5:20:9c:74:c8:38:d3:24:2d:ad:53:2a:e4:bd:2c:f5:
63:ec:d1:34:a5:dc:c5:64:b5:8e:1a:90:2c:16:31:56:b9:5a:
e6:34:3b:c0:aa:6e:a8:47:3b:f7:17:c7:8a:6d:a5:9a:f6:66:
1e:bd:7b:be:4e:05:b5:e8:ae:00:82:72:1e:a8:80:3d:cb:34:
33:2c:13:86:79:5e:93:8e:ce:38:e2:56:fe:1e:13:37:90:85:
6a:64:45:64:ba:ec:d3:78:d6:2d:23:35:c1:50:cf:10:2d:8a:
47:d2:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:12:42 2026 by rpki-client