
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: U29fuutZpv/M7bYyBy+oUiiPM/ANcbEasZe+hEm6sJc=
Subject key identifier: 57:64:B7:5B:60:40:8F:D7:DE:0C:93:5F:A8:AF:1E:7D:53:8E:73:A7
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 03E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 03D5
Signing time: Sun 27 Sep 2026 00:33:57 +0000
Manifest this update: Sun 27 Sep 2026 00:33:57 +0000
Manifest next update: Sun 04 Oct 2026 00:33:57 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: 3P12tKiSvpX++K67s2NOh6rqT845shz3fsxEGEoS/Tw=)
2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: Sep 27 00:33:57 2026 GMT
Not After : Oct 4 00:33:57 2026 GMT
Subject: CN=6ab86475-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:c7:65:a1:98:0f:05:10:97:6f:19:12:4c:
56:29:a8:10:c5:d9:3b:6c:31:60:1f:35:cd:a9:a0:
48:94:60:e7:f4:fd:10:d3:4f:39:1e:6e:3c:af:54:
b6:e6:73:21:ab:95:ef:c9:74:88:66:00:2a:75:83:
d2:9a:66:75:38:79:7a:da:30:0b:b7:de:5c:de:32:
21:e0:0a:a4:de:b2:c0:ab:a3:5d:e8:7e:35:36:0b:
fe:f2:70:9e:f1:76:fe:cd:af:c0:f5:7a:8d:78:a1:
7a:32:91:52:92:02:99:0b:a9:e4:ac:0a:a5:55:5b:
f0:95:4a:a6:d4:0c:24:b8:f2:86:b5:13:eb:04:5a:
69:b1:66:52:05:c5:5d:7b:eb:c8:3e:41:84:ce:38:
00:d2:df:6e:c4:32:b6:34:81:e1:4d:dd:01:38:57:
9a:55:51:9d:7c:17:bc:b8:0b:cd:a4:fb:d1:8a:ea:
77:67:c7:82:b3:be:c0:7e:58:97:58:b7:25:71:49:
f4:3f:9a:80:98:f9:d8:66:0c:be:35:86:11:f1:b2:
41:a9:50:d2:ae:d1:1e:7f:77:1f:ab:7f:bc:ba:6f:
ba:7a:44:36:40:46:d4:58:6c:1e:02:8f:db:3b:8f:
04:32:41:59:b8:7f:1a:51:75:71:6e:ce:b4:f5:f2:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:B7:5B:60:40:8F:D7:DE:0C:93:5F:A8:AF:1E:7D:53:8E:73:A7
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:5d:10:c4:aa:ef:b1:95:8c:3f:d5:e7:ee:a5:9d:10:95:
81:91:c8:50:55:09:c5:ec:38:43:61:01:03:c2:ec:7b:08:d8:
80:e4:aa:88:39:0f:76:81:0c:b5:0b:02:6b:1d:25:af:df:79:
20:e2:30:db:09:7f:02:46:36:c8:44:08:50:a2:d9:84:4a:3b:
d3:26:7a:45:ca:c1:a6:7c:81:18:f1:0f:99:a4:b4:9f:57:02:
f9:fd:3d:99:f5:de:14:0b:fc:05:c2:58:82:ea:91:44:2d:21:
9b:0b:f0:cb:89:78:75:3a:90:c8:d9:1e:42:f4:50:08:91:59:
9d:eb:9e:73:c4:54:55:33:21:ef:d7:44:f2:0b:74:e6:ab:6e:
dd:13:40:a8:ce:c6:35:14:3d:a5:46:f5:ba:b6:65:92:e7:c4:
70:75:98:26:c8:9b:1d:c2:1b:29:d6:02:b1:5d:58:ce:44:0f:
0e:a0:82:12:2b:1e:68:df:db:3a:1d:af:bf:1b:c1:c6:f9:c1:
49:ae:c8:90:65:c1:65:e1:f5:a4:41:b4:28:39:b3:12:c7:3e:
55:08:b5:ae:2a:d7:f8:2f:b4:2f:77:0d:52:a1:9e:ed:be:ee:
6b:14:f0:c5:21:69:4d:ae:b0:18:14:e3:42:da:76:f4:00:5f:
b5:ff:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:38:22 2026 by rpki-client