
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier: Lj1EYCMcqJtk64dg7QYHk4ILlXuelO0splAhN38FkaQ=
Subject key identifier: FA:0F:9A:9B:A6:02:7F:41:38:12:78:7E:FA:10:CF:A5:AC:66:F5:17
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number: 02E2
Signing time: Fri 25 Sep 2026 01:05:08 +0000
Manifest this update: Fri 25 Sep 2026 01:05:07 +0000
Manifest next update: Fri 02 Oct 2026 01:05:07 +0000
Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: UyKzd5w2THT6P3ZyHtuSkKOJ6uXKbE8+drkKvfiCYrE=)
2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Validity
Not Before: Sep 25 01:05:07 2026 GMT
Not After : Oct 2 01:05:07 2026 GMT
Subject: CN=6ab5c8c3-741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:ef:5c:fd:84:77:8b:c7:8f:72:a2:6a:86:
85:14:ba:b1:24:78:94:ef:f6:e2:4c:28:c7:23:86:
fd:57:b7:d7:ab:f0:84:a8:c4:f8:ff:20:35:2c:d8:
41:08:1b:0a:cb:7e:85:40:78:7a:b6:f1:85:92:1f:
8f:5e:cd:5e:c0:1c:a2:09:0a:8a:ee:66:88:3d:be:
b0:3f:84:12:f6:a2:22:b3:72:40:55:51:b6:ee:1f:
bf:31:8c:1c:9a:9d:5a:eb:45:d9:d0:ab:bb:62:8f:
e4:0d:27:df:87:b5:37:44:05:9f:7d:81:7a:61:f8:
6a:9b:c6:f6:aa:f7:d3:ab:0b:0a:09:b1:1d:0f:94:
2e:b1:ae:b8:e7:dd:bd:84:ac:66:5c:84:af:d8:5d:
84:ea:57:ff:5e:fc:d6:90:11:cd:c7:bf:15:7d:a3:
1e:b1:a9:cc:d5:07:7c:cf:7b:c6:7a:68:26:1a:90:
98:ee:79:6d:ed:c6:0e:77:55:f6:6d:1e:76:bb:2a:
20:78:8c:0f:c9:fc:f5:1f:9c:47:42:80:c6:86:7d:
86:47:78:f7:3b:bb:3b:79:d4:84:a2:0f:ac:65:86:
dc:67:5e:94:5d:1f:74:da:51:3c:e7:cb:c1:7f:a0:
db:ed:bb:14:b7:65:ad:b1:7f:54:d8:10:36:6b:18:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:9A:9B:A6:02:7F:41:38:12:78:7E:FA:10:CF:A5:AC:66:F5:17
X509v3 Authority Key Identifier:
keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:fa:b0:26:49:df:c7:82:33:84:bf:b9:74:60:7c:07:c1:
00:5b:8b:da:1e:58:0a:7b:9e:4c:c6:7d:89:30:bd:60:94:42:
c8:6e:32:cc:2d:75:a7:24:32:15:bb:59:4b:1a:b2:8b:f3:3c:
39:6d:c5:95:53:3f:be:dd:c5:be:c0:9a:a0:9c:63:a6:91:34:
fc:4f:e2:3d:97:79:25:9b:31:37:7a:be:c1:36:e9:ac:7d:2f:
50:83:b4:ae:6c:99:5e:f0:9e:45:fe:a3:be:5f:79:ff:dd:41:
23:2a:c2:b1:47:f4:e7:31:9e:fe:2c:b8:cf:3f:27:ca:fb:16:
c0:be:ff:56:b5:d5:ca:f1:cd:98:b4:d0:ab:6f:b1:40:e2:91:
ff:78:ff:12:92:a5:4b:57:20:f5:67:e5:c1:0e:8c:a7:0e:39:
d1:ab:98:2b:52:f9:0b:13:6c:8f:c1:52:94:3a:cd:5b:a3:a1:
3b:e1:0a:6a:01:ca:2a:57:41:e9:2a:dc:9c:25:b2:aa:55:dc:
5a:32:de:dc:8f:d0:fa:b7:22:e5:4a:9a:94:d4:ae:79:81:29:
86:ed:3e:03:f9:c2:6c:7b:88:bc:7f:8b:e0:23:60:5d:0b:23:
89:dd:8d:42:e7:3b:7d:e1:0e:0a:2d:58:bb:72:7f:bc:01:27:
19:ef:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:53 2026 by rpki-client