
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: mzruKaKf0cYdOOaqf4/UX8MuVTpCTOI1hjvOIH+5Kro=
Subject key identifier: 17:E0:C6:FA:B8:1E:90:AC:39:00:E3:49:29:64:DD:26:13:8B:71:DA
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 021B
Signing time: Thu 01 Oct 2026 03:45:56 +0000
Manifest this update: Thu 01 Oct 2026 03:45:56 +0000
Manifest next update: Thu 08 Oct 2026 03:45:56 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: MAOLVM9myWy30mt9dARnemTyysoYGyWVTVDJmFEDtCY=)
2: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
3: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 03:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: Oct 1 03:45:56 2026 GMT
Not After : Oct 8 03:45:56 2026 GMT
Subject: CN=6abdd774-87b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:01:3c:8d:86:b5:90:bc:63:2e:99:3d:6e:
aa:01:19:c3:6d:67:15:e3:f0:d0:1c:e3:16:e6:34:
a9:a0:83:de:c9:71:21:f3:0e:52:f3:f2:0f:19:4f:
24:a9:4f:6c:2c:02:e9:23:17:9a:cb:4a:1b:f7:a0:
6e:af:8a:3c:ba:cf:bd:e2:f8:3c:83:81:dd:e1:8b:
60:67:af:a8:02:41:9d:90:bb:56:4c:5a:d4:0d:9e:
ef:c2:9f:db:92:eb:f5:8f:dc:07:ce:44:94:b6:7e:
19:c8:96:5f:90:a4:66:76:04:50:8f:e8:5f:77:82:
12:9a:68:9b:a7:1d:d0:42:02:47:1f:78:7f:a5:c3:
64:10:6b:10:9c:bf:11:c3:44:bc:dd:b3:b2:a9:f7:
fd:84:6d:4f:88:fd:90:fb:d0:b4:f5:76:c9:4e:6c:
04:e0:ee:bc:58:3e:de:16:05:08:88:c5:75:ab:3f:
07:c8:f8:77:6b:9d:7d:3f:97:ac:10:8e:be:39:07:
f7:55:2b:87:70:b1:aa:7e:4e:a3:55:ea:93:c5:f8:
ca:fd:41:0f:97:aa:27:47:f3:4b:94:02:d5:b0:d0:
50:cb:58:dd:96:0d:52:94:f7:f5:4e:5a:07:1c:b7:
f5:de:b0:44:d0:ea:78:8e:b3:44:da:8c:53:7f:07:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E0:C6:FA:B8:1E:90:AC:39:00:E3:49:29:64:DD:26:13:8B:71:DA
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:fa:14:a1:4b:4a:70:75:7d:80:8f:ed:0f:90:71:8a:17:
1d:b4:f8:67:5d:0b:cf:bb:fa:92:4c:ed:5f:7e:2a:da:58:aa:
73:22:93:db:42:a4:84:06:6f:5f:b2:27:a1:6e:34:92:ea:72:
75:0b:6a:6b:bd:18:b0:c6:bb:50:d0:4c:57:93:e6:17:62:18:
f5:53:2b:1f:2c:8c:70:57:eb:d6:04:5e:9d:79:ce:34:a6:0e:
3d:41:3a:b4:ba:f4:aa:8a:e9:51:45:5a:d2:a7:72:52:42:cf:
04:25:0e:d7:f2:84:9c:4b:59:63:0e:72:69:71:6a:d9:60:4d:
79:3f:9d:e6:68:cd:aa:6f:93:01:78:5c:a9:0b:c1:20:31:e2:
22:e1:65:09:45:71:cd:0c:69:af:7c:d7:bd:89:64:8f:47:1e:
90:4b:58:a3:a3:50:ee:ec:ae:62:73:ec:9c:27:1e:92:6c:71:
05:ef:61:91:f7:05:e0:ea:3e:d7:37:0e:d9:0f:74:aa:76:b6:
d1:b4:71:0e:0e:58:0b:7e:34:d5:cd:f2:0a:4c:b5:76:e4:9d:
ec:61:88:e7:1b:f2:28:e0:66:5b:12:8a:7e:51:7a:67:ab:d2:
7f:37:dc:c4:00:c8:dc:11:7c:c0:35:08:6c:36:55:18:d0:9a:
79:e7:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:46:21 2026 by rpki-client