
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: VQeITHBi22SyZ+DHn57Xb/e+4g8BKRFf0CAWgaTgAAQ=
Subject key identifier: BC:9A:6B:DB:46:FA:13:08:29:25:4C:B3:BC:64:A0:87:14:EC:A1:18
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 017B
Signing time: Mon 05 Oct 2026 05:08:05 +0000
Manifest this update: Mon 05 Oct 2026 05:08:04 +0000
Manifest next update: Mon 12 Oct 2026 05:08:04 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: f3TF19YVDNjuLlDuFDNmC7I3P34Ab7UQTDVhLhJFaqs=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Oct 5 05:08:04 2026 GMT
Not After : Oct 12 05:08:04 2026 GMT
Subject: CN=6ac330b5-5471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:ee:7b:9d:70:0f:c3:05:13:ff:2a:cb:62:
85:0a:42:9d:f4:d7:29:f8:19:c2:86:a1:21:ca:3f:
13:91:85:5b:d3:eb:8b:f0:bf:bf:fb:5b:94:20:66:
0c:a1:c9:14:28:09:f3:23:f1:5a:9c:b4:b9:11:27:
f0:31:3e:d9:19:7a:9d:22:a6:16:ef:e4:e2:da:20:
84:1c:a6:f2:22:76:f8:17:9c:16:77:b3:b4:dc:56:
1e:de:92:66:13:61:47:a6:3a:81:f7:2d:51:2e:18:
fc:e3:9f:fb:65:21:5d:0a:d7:78:85:f4:1b:bd:c1:
90:42:1d:23:bf:36:52:da:56:1e:c6:87:8a:f8:23:
96:00:49:d4:49:fb:bb:06:9e:d4:16:d7:4a:64:01:
61:ed:52:9e:e6:62:cc:6e:ea:a9:7d:1a:5f:13:53:
f7:a4:e3:1b:75:66:b3:65:d1:4f:db:fd:a7:51:86:
15:74:2d:dd:6e:4a:94:59:53:ff:6e:93:23:39:2a:
16:ab:25:50:bd:63:4b:81:9d:ca:95:43:21:bc:ad:
3f:c2:51:b9:fc:b1:93:8f:bd:a0:9b:4c:5c:21:32:
49:ed:84:33:94:10:33:06:72:0a:4f:a6:7f:a3:b1:
58:6c:04:81:74:ab:ec:58:1b:bc:25:1c:f8:98:77:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:6B:DB:46:FA:13:08:29:25:4C:B3:BC:64:A0:87:14:EC:A1:18
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:53:0f:98:49:32:0b:d0:10:74:d6:0d:76:98:e1:43:59:18:
b0:1e:40:ee:e5:35:4e:89:8f:7f:89:29:f2:1c:03:b2:ec:7e:
e3:7f:85:e1:8f:1e:89:e5:67:d5:89:20:82:61:61:c4:55:04:
5d:f5:3a:7f:c6:39:4d:1a:a0:f0:7f:4e:d3:8c:05:0b:7e:07:
48:10:6c:f6:f4:d2:62:71:1f:f6:f4:8d:6f:87:bc:70:f3:5e:
30:5d:92:6c:ea:8a:0b:29:e8:0f:de:4d:d6:e7:8c:09:b0:39:
58:9d:09:2c:53:aa:8f:41:75:98:07:32:9b:dc:c0:6f:14:bd:
0c:84:8d:da:0d:c2:35:32:1e:5d:80:c6:a7:db:f4:3d:19:96:
bf:90:e2:7d:74:00:57:09:c4:00:19:f8:2f:39:7a:54:ae:64:
79:37:8c:b6:e6:54:d8:82:75:44:57:a7:05:3d:0a:b3:82:c8:
af:b4:21:e3:fb:96:95:56:e2:2c:34:5f:b6:fb:e7:4b:9f:e9:
da:6a:41:ea:6d:2f:11:85:1a:78:6e:b3:b4:0e:72:be:b1:8a:
5c:4e:31:4e:0f:c3:bc:2f:ee:ef:b9:1d:c3:a5:82:bb:07:f3:
54:8a:60:9d:c7:95:80:6f:33:3d:a0:f3:5b:22:c5:1e:a7:c1:
0f:0c:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:18:19 2026 by rpki-client