
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier: EinO3c78tAsO4skKkgI8f64hHYzYP9PtibXheQIbANE=
Subject key identifier: 93:30:A4:F0:23:7A:20:2C:E5:3A:03:12:E0:3B:F7:6C:56:85:98:4A
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 35EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number: 35B2
Signing time: Tue 22 Sep 2026 14:37:51 +0000
Manifest this update: Tue 22 Sep 2026 14:37:50 +0000
Manifest next update: Tue 29 Sep 2026 14:37:50 +0000
Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: 8s1+U/+YgRRDem2dNaAu6BwpE05rVHhKnAHDuH03aTY=)
2: 1423BD3EAC2311F185E54DC43511F970.roa (hash: JIP+JS+Iln1TqN0mICpcvfIW+0HBJma6VdmhYTs2aZE=)
3: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
4: 58213782AC2311F1817C69D13511F970.roa (hash: ZgJHAZVTMmGqaB24EGOqNAsXR8XE/1yCeyICN4nO8I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13807 (0x35ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Sep 22 14:37:50 2026 GMT
Not After : Sep 29 14:37:50 2026 GMT
Subject: CN=6ab292bf-bd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:00:f2:dc:a4:21:8a:3f:50:be:50:18:ea:
11:28:4f:25:23:f2:7d:54:a9:1c:0f:2d:a2:eb:c5:
1c:9d:0c:c2:07:88:42:bc:99:c9:ab:d2:01:84:6f:
a7:e6:45:57:95:24:4e:7a:c7:f3:23:7b:2d:28:64:
25:cf:94:06:1e:c5:ed:88:f0:92:f9:b6:7e:db:25:
f8:9f:a4:d9:ab:13:4d:84:8d:79:8d:90:fd:2d:71:
7a:52:ea:9b:9b:09:5c:58:6a:27:6f:a8:32:7c:9d:
6e:59:34:5c:34:b2:e5:b0:a1:e2:8d:e5:be:18:9b:
f8:2e:88:ac:b2:c6:69:c0:a4:8a:5f:3a:18:61:ce:
92:9a:51:d4:83:4e:53:ce:d2:79:59:e2:88:53:17:
ad:a0:30:26:8d:7c:38:6f:1f:c1:01:69:cb:78:ca:
f2:cf:78:95:27:d9:8d:9d:8a:f2:20:4f:bb:e6:38:
6f:88:a6:33:25:7d:43:79:fb:03:07:9d:13:2d:32:
02:6c:5e:b2:4e:ea:36:c2:be:0b:e6:70:b9:24:85:
3f:c6:6e:d2:bd:06:af:ef:67:5a:ca:aa:02:59:53:
7e:47:42:a5:e4:7e:4b:51:4d:0b:5d:93:3a:36:34:
9c:d8:09:fe:e1:4f:1c:7a:df:2b:f2:83:e2:bb:81:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:A4:F0:23:7A:20:2C:E5:3A:03:12:E0:3B:F7:6C:56:85:98:4A
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:ab:c1:eb:e9:91:55:13:3b:86:79:7a:5c:9d:3b:d3:93:
8f:cd:3f:0c:87:10:13:8b:3e:17:03:ff:28:54:60:55:c8:d7:
98:ad:39:30:83:af:a3:bc:56:44:c2:a1:f3:29:45:b8:9d:be:
42:fd:cb:31:c9:71:77:ed:57:dc:38:d6:fd:a5:73:a0:1e:d4:
44:ec:cd:2a:16:ab:ac:4b:c3:85:36:a7:52:89:6e:74:d2:de:
a4:db:ba:a1:39:1a:cc:e1:69:08:ab:0e:8d:ea:8a:21:9a:c0:
2d:b7:12:fa:cf:88:3b:90:57:da:36:3d:72:7a:cf:d3:63:db:
cd:53:f7:ea:00:4b:89:88:be:8d:7b:e5:a7:d7:7d:73:d4:c8:
6a:28:24:d4:43:62:7c:ef:9f:74:7c:98:42:62:92:ea:ee:8f:
47:81:f5:35:de:55:dd:aa:ec:e7:45:45:9c:15:c9:5e:54:ea:
fb:3c:bf:66:f1:5a:ef:bb:5f:9f:15:21:ea:1b:c9:52:ee:04:
84:0d:86:1d:a4:fc:9a:c9:a3:06:5c:3b:d5:8d:a7:c9:3b:3a:
e2:bc:77:f5:7a:1d:42:0a:5b:b0:89:92:0b:a1:59:c5:a8:ac:
f6:98:a5:39:dd:07:47:10:d9:c4:65:e4:80:8c:52:88:67:b5:
cc:3c:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:58:57 2026 by rpki-client