
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: mk7oaz1Iq97cwrWNY+XO0jgUeYAeUQxkuEnvyw6Rn7g=
Subject key identifier: 8A:AC:B5:DE:58:29:96:43:22:28:37:9A:3D:0A:4C:35:E4:FE:8D:16
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 0727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 070A
Signing time: Mon 28 Sep 2026 22:28:58 +0000
Manifest this update: Mon 28 Sep 2026 22:28:57 +0000
Manifest next update: Mon 05 Oct 2026 22:28:57 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: 9YATaqH+w8XIyx2VJ8jH0Oy0o8Z2ceHMt0XXzIvw6ok=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: ODIX3oDpfnNWOwtgKPini7l1bVtlb/9n+o+dXisnTbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 22:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Sep 28 22:28:57 2026 GMT
Not After : Oct 5 22:28:57 2026 GMT
Subject: CN=6abaea29-c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:fb:da:2f:a5:3c:8a:51:30:3f:fa:d0:a9:
96:ed:42:93:3c:4e:52:c1:6d:b0:cb:f7:5f:31:bd:
8c:09:b4:40:e4:52:0d:b1:88:88:9e:07:63:a8:c1:
ed:16:2c:65:f1:c2:59:e7:24:e2:8b:99:d5:19:7d:
3c:68:df:d0:73:46:1d:ca:11:34:47:47:7d:4b:f2:
b6:e0:70:94:68:0e:b9:39:7b:6b:fc:58:12:48:65:
cb:37:2f:0c:e3:88:a0:f6:fe:91:4f:a8:04:f7:20:
79:38:61:e5:55:39:f0:12:91:b7:b0:2b:84:2d:c4:
58:3e:e6:bd:91:ce:79:f2:b9:2b:54:18:53:93:d7:
1d:7f:dc:16:f2:69:64:83:56:8e:5d:17:45:df:a7:
4d:04:20:de:95:ae:ac:3b:16:c0:34:c0:d9:c1:4b:
d8:02:33:8c:32:ba:84:e8:47:b5:a6:85:93:fb:d6:
cb:dd:7a:be:1e:4b:7b:6c:6d:ac:2b:9d:51:e1:f1:
74:e9:6d:8e:8b:9c:06:09:f5:72:09:d9:59:26:a2:
8e:72:fa:23:1d:e6:85:b7:8f:20:9f:75:08:10:76:
50:93:6d:e0:0c:e0:6b:6f:2d:90:93:70:49:8d:9a:
84:40:eb:84:a4:ce:64:02:e1:fc:68:84:f1:b5:47:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:B5:DE:58:29:96:43:22:28:37:9A:3D:0A:4C:35:E4:FE:8D:16
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:e0:b1:bc:97:38:81:dc:b9:19:6d:a6:bf:43:54:f9:1a:
2d:0b:d5:90:22:f1:a9:00:aa:ed:d7:89:2c:0b:a8:16:e2:d7:
c7:d1:46:29:c7:e3:37:1e:f9:cb:eb:08:c5:2a:0b:8a:3b:0f:
3d:40:b8:0b:4e:02:e7:69:23:ce:91:84:c5:3f:cb:5b:3d:cc:
29:40:e0:36:9f:9d:fe:31:63:a3:71:5d:ae:12:88:42:65:0a:
46:8f:92:96:a2:a0:11:08:bd:e9:3a:ac:77:77:b2:dc:73:5b:
81:3d:d6:98:5f:87:bb:1f:0e:fc:42:25:4b:b9:18:37:6c:54:
05:66:aa:ae:82:7a:68:97:54:69:46:54:c0:bb:74:60:78:1a:
78:8f:e2:b4:d8:3f:56:07:aa:68:e1:c0:44:76:a9:7c:b1:57:
ba:4b:3d:60:1a:20:f7:a6:b1:0a:d8:de:85:48:52:ce:bb:cd:
b5:0b:e0:81:34:04:78:e2:2c:e5:c5:4c:96:45:51:98:5c:09:
76:28:b8:98:58:2f:ac:bf:5a:11:79:5f:d4:ba:0e:70:5e:75:
2c:0e:f6:b7:c4:8e:2f:7b:ee:0d:95:c8:b1:5b:83:c8:c7:46:
9d:c8:09:d5:2a:0f:b9:0c:9d:eb:63:73:c7:dd:2a:f4:de:7e:
7a:f7:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:37:58 2026 by rpki-client