
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
File: drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json)
Hash identifier: c6yPErXIIskklZrlR0uozi2i97ascBwP9dINCwIFjNQ=
Subject key identifier: E9:EF:E5:BA:F0:1F:7D:1C:40:FA:3B:1A:7C:CF:95:65:36:1A:D9:63
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial: 0BF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
Manifest number: 0BD5
Signing time: Sat 10 Oct 2026 19:04:40 +0000
Manifest this update: Sat 10 Oct 2026 19:04:39 +0000
Manifest next update: Sat 17 Oct 2026 19:04:39 +0000
Files and hashes: 1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: UHhu3LEbYvbOTsKhVhN75jkC5J4jr2RXIm79kkiJbso=)
2: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: NYJZvZPzyDgeHzpdsKVjfnf0vb6jVGfn+iXWogNI5w0=)
3: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc=)
4: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: nvrbL4K8UTuSHUzb0sameKGMaeUHHtqeYardPlMzhKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Validity
Not Before: Oct 10 19:04:39 2026 GMT
Not After : Oct 17 19:04:39 2026 GMT
Subject: CN=6aca8c48-e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:5a:90:6f:ec:cb:c5:69:b6:71:47:bd:cd:
3b:40:79:f5:69:3d:7f:fd:2e:52:db:76:65:f1:6a:
88:22:96:7a:05:4f:7e:aa:b3:af:aa:70:80:88:98:
88:b9:99:84:fd:54:97:8d:ac:68:52:da:ce:3e:98:
37:57:87:a3:81:be:27:4a:a9:85:75:c5:10:01:b2:
43:d9:b1:a7:91:40:63:57:9b:7c:6b:80:d0:a9:7c:
04:0f:4b:46:c4:80:5b:19:6c:dd:ec:d0:95:26:ad:
f0:8f:96:92:67:79:16:b6:25:4d:a9:84:b7:56:28:
f3:28:39:a9:2b:2f:31:f0:4a:77:0f:85:6a:a9:e0:
09:72:1f:41:1d:b6:44:60:c1:70:d6:00:b2:f4:a5:
eb:75:57:59:6f:37:12:85:44:22:80:92:d2:1c:5a:
b2:03:26:c3:89:9c:72:58:fe:00:68:a4:10:26:cc:
33:c3:6c:d7:27:03:71:26:2f:50:53:b1:3e:98:30:
a4:ce:ac:03:ac:5e:2b:b2:4f:e5:4f:2e:85:b0:2d:
70:5f:da:57:9c:e8:72:f5:e6:d5:03:74:a8:88:b0:
05:ba:05:6b:a1:fe:7d:61:d9:2b:72:d5:3b:e7:0f:
01:f2:41:d9:37:c3:db:2d:d0:dd:67:6e:9c:85:50:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:E5:BA:F0:1F:7D:1C:40:FA:3B:1A:7C:CF:95:65:36:1A:D9:63
X509v3 Authority Key Identifier:
keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:6f:42:bc:54:45:2e:f1:81:91:24:9f:1e:8f:bd:de:b4:
5e:f5:91:3f:07:ed:ac:da:7e:33:1e:e6:79:51:9b:aa:43:2c:
e0:16:55:17:55:0f:47:cb:b4:8b:fb:c8:07:72:2c:75:2e:a1:
86:2e:cf:58:b9:86:41:8e:c6:ba:b5:c2:35:df:87:40:9f:d6:
45:1f:fc:30:b3:4c:f8:13:42:41:fa:8a:cc:55:40:57:79:4f:
c5:1c:10:12:a6:91:a8:2f:a0:39:63:f3:90:d7:7c:14:5d:eb:
ac:e4:a4:21:1c:d8:73:bb:71:2a:f9:2b:79:bd:0f:38:96:79:
9f:1a:77:ff:2c:b5:99:07:12:01:62:98:74:be:87:89:1b:af:
c3:f0:2d:cb:2c:0b:6a:a5:ec:30:81:ae:6e:26:31:15:a0:c2:
3f:fd:ad:d5:40:97:e8:34:8e:17:c4:49:03:f7:fe:64:43:4c:
9d:b6:43:83:ee:06:21:f4:6a:a3:3a:e0:73:bd:ad:16:a5:39:
85:de:17:ad:7b:6f:f3:cd:32:d4:93:88:0f:21:12:64:9d:ae:
09:13:1b:78:5e:42:a3:89:57:fe:8f:eb:bd:e9:21:1f:17:18:
cf:12:53:a3:01:7e:24:60:37:f4:05:17:e9:b2:b0:10:fe:83:
99:53:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:26:01 2026 by rpki-client