
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier: mGmiW/zvpk/K5CdM375NrQEeY6XHLuj9fwiQabOtLP4=
Subject key identifier: 30:C4:72:FB:22:B9:9F:E3:2B:46:68:29:6D:96:6B:B3:4D:11:79:9B
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number: 0218
Signing time: Fri 09 Oct 2026 03:31:12 +0000
Manifest this update: Fri 09 Oct 2026 03:31:12 +0000
Manifest next update: Fri 16 Oct 2026 03:31:12 +0000
Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: lAZqxwvja0dxMGvVZo9lGjlZkqevqazjFQ+vJ9iWHYE=)
2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Validity
Not Before: Oct 9 03:31:12 2026 GMT
Not After : Oct 16 03:31:12 2026 GMT
Subject: CN=6ac86000-e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:d1:ae:af:47:55:be:c7:57:36:31:e7:28:
fe:c7:0a:96:21:59:f4:fb:14:cf:e4:83:f2:cc:6b:
c7:a4:ea:84:99:b1:68:7e:a2:f3:b1:35:aa:6f:73:
6a:e7:86:6e:87:0c:73:df:8d:98:1f:96:98:fe:f3:
86:81:d1:a2:dc:a8:ea:21:b6:86:3b:6a:96:99:89:
b1:71:d0:b7:88:cd:b0:63:15:3d:87:4e:d0:ef:bf:
74:cc:6e:3a:b6:5e:bf:8e:11:1b:39:d4:c8:1d:3a:
23:b8:12:bf:92:77:c2:da:f1:e3:c4:2b:f3:70:96:
4b:bb:83:45:77:00:63:23:04:ed:f6:dd:d0:c0:ca:
a5:52:86:50:b3:1e:a2:64:f7:dd:1d:a8:31:8f:0d:
70:2a:45:8c:ec:4f:99:66:fa:52:6c:2d:4b:fe:9a:
a9:49:f9:59:11:37:7f:19:60:41:64:20:54:df:c8:
d6:6a:18:89:8e:44:11:fa:a8:19:48:c2:6a:53:33:
77:7e:de:86:01:12:44:fe:bd:9e:03:b6:ee:a7:38:
81:77:c8:e6:c8:6b:11:53:ed:eb:40:7a:97:19:16:
56:fb:e9:a5:8e:49:7f:2b:be:35:62:3e:99:21:66:
24:36:75:4e:b4:48:29:20:1f:34:cc:69:2d:71:03:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:72:FB:22:B9:9F:E3:2B:46:68:29:6D:96:6B:B3:4D:11:79:9B
X509v3 Authority Key Identifier:
keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:7e:34:07:8e:66:54:c0:6c:6b:cf:4a:6d:f4:fe:f3:ce:
70:95:5c:72:8a:e1:55:ae:6d:2f:27:41:d0:db:28:3e:1f:68:
7d:35:92:dc:e2:55:3a:54:8d:02:73:c8:00:e0:45:19:b6:70:
91:a2:f5:74:c6:56:0b:4b:7d:4b:46:0d:8a:7e:9f:87:e4:a5:
8b:b8:15:23:ae:4f:78:5b:7a:d0:f3:39:ae:f7:e3:44:85:26:
d0:e5:af:f9:0b:69:48:cc:b3:f3:10:06:16:8c:35:59:73:a6:
2c:2d:bc:4f:db:b2:63:19:bb:1a:7f:88:56:e2:5f:7d:8d:f0:
0e:97:5d:8f:ec:18:fc:83:78:b3:e7:ae:d3:7b:99:a5:77:86:
3d:d4:3c:06:24:99:b6:c6:c1:4f:42:7f:65:27:d4:20:37:8e:
d0:34:64:5f:26:0f:11:b8:31:12:58:bd:dd:e3:fb:54:83:5d:
1f:42:96:85:a6:86:e6:20:70:b5:db:38:27:84:9b:e7:72:9d:
2e:15:33:cc:67:28:fd:15:b1:d0:0c:46:b0:0b:c2:0d:97:63:
3a:db:f1:c8:e2:6e:c5:2f:67:b4:b5:ab:a1:d6:c0:8f:fd:4b:
84:45:58:65:e4:6f:99:46:00:54:4a:e9:cc:55:72:5d:66:5e:
d6:2d:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:26:28 2026 by rpki-client