
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier: eFJeZUziFyDFv6chqv4xMvi0YYcQNXJmu4pLiNBQ6lM=
Subject key identifier: F4:89:33:DF:C6:92:90:A0:25:DA:26:30:AF:5C:34:19:80:E4:95:BE
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial: 0624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number: 061A
Signing time: Mon 28 Sep 2026 22:58:43 +0000
Manifest this update: Mon 28 Sep 2026 22:58:43 +0000
Manifest next update: Mon 05 Oct 2026 22:58:43 +0000
Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: D7Z5CQeteFXK7C+L/SegNf7yHafhYoM5tyqYZdXWLi4=)
2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: FhhQyHeWyKOZmuPQHPKmrZdEe/8rcAsfsUV6nBHHPzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 22:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Validity
Not Before: Sep 28 22:58:43 2026 GMT
Not After : Oct 5 22:58:43 2026 GMT
Subject: CN=6abaf123-b181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:68:84:07:09:1d:7a:ad:03:a2:8a:90:2f:
c1:8f:93:db:76:a4:d0:6a:a7:a5:2b:5c:43:38:fa:
33:ff:ca:98:7b:47:4d:2c:d9:f9:26:90:e6:4e:ef:
38:cd:c7:06:af:1d:ec:5b:f1:b2:b9:b4:48:c4:db:
db:ff:5d:86:6b:6c:36:1b:5d:fd:76:3d:f4:2b:08:
0c:94:9f:f2:04:34:8c:eb:5d:04:b2:e3:4c:af:3e:
47:40:93:39:46:d6:cf:69:f7:49:d3:80:ef:87:7e:
d0:f0:82:22:07:c0:ab:39:22:67:ae:65:60:79:ed:
2a:1a:a0:10:e6:ab:4c:75:b7:03:26:5e:e1:44:94:
35:90:e3:b5:7d:eb:11:0f:2f:ee:24:35:6f:c2:46:
fb:74:4e:2b:87:fe:1f:a3:68:58:cf:76:7c:87:83:
73:89:de:ba:49:7a:83:2a:db:8f:16:76:85:99:19:
e1:43:51:96:ee:5f:8c:98:82:38:db:f6:4b:1c:90:
0c:14:d3:53:90:27:42:4d:ae:50:b8:8b:6f:1c:a8:
b3:2d:36:06:6a:a7:83:f9:af:83:3b:a0:1b:03:8b:
30:cd:a1:ad:20:32:78:2e:3b:89:06:c3:5e:9c:9e:
6d:6d:bb:03:11:f6:38:e3:ff:7b:19:ec:ea:78:26:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:33:DF:C6:92:90:A0:25:DA:26:30:AF:5C:34:19:80:E4:95:BE
X509v3 Authority Key Identifier:
keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:4b:e4:49:37:d1:7a:6f:dc:16:0b:28:b1:70:f7:64:e8:
a4:f9:de:0b:75:39:9c:92:c8:70:45:56:ad:da:8b:42:1e:d1:
2b:8e:f6:b4:03:55:a3:d9:6d:02:65:6e:f5:0c:13:17:b3:b9:
06:7e:7a:99:8a:52:f9:0e:6f:e2:62:a0:b6:3f:50:67:ef:ca:
ba:ab:bb:9b:ff:68:24:bf:cb:1d:c8:03:59:9d:ef:2b:9f:1a:
b8:9d:14:e5:b2:bb:7d:5c:af:73:89:27:8c:f8:0d:14:a9:85:
a3:3a:1d:7c:43:91:de:5e:f4:6e:f6:25:50:8e:4d:a6:c3:01:
9a:b3:a3:f7:c0:37:45:f8:b6:2d:dc:18:e2:c2:b9:7d:86:b6:
ae:7a:00:da:a1:11:1d:9b:d0:8e:00:15:bb:d2:5d:7d:03:14:
19:3d:f8:d3:bc:1d:50:80:f3:1a:f3:4e:5a:3c:13:04:42:56:
2d:bc:21:cb:b7:4c:0d:79:28:76:e6:40:9c:7a:52:f1:14:77:
57:23:96:a9:d6:8b:64:8a:18:3f:7e:ba:be:fd:93:c0:59:7e:
3e:42:fa:3e:fa:f1:74:21:64:cd:4d:19:ab:e4:73:42:47:6b:
ca:37:9d:28:e9:90:a1:b3:1c:4f:38:82:74:e5:92:1e:75:ff:
a0:c7:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:49:30 2026 by rpki-client