
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: L1WyBDwQraZ3gC+bMgLjTaCRHooOUiMhGFSteJXSv10=
Subject key identifier: 87:B4:1F:49:98:20:78:02:88:E0:E9:78:8B:0E:7A:0D:45:89:5D:EF
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BDF
Signing time: Sat 26 Sep 2026 15:33:21 +0000
Manifest this update: Sat 26 Sep 2026 15:33:21 +0000
Manifest next update: Sat 03 Oct 2026 15:33:21 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: 7vvweW/UneVi829B4qEWOPMruT4qw4MYI6+REnuY7KM=)
2: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
3: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
5: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11317 (0x2c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Sep 26 15:33:21 2026 GMT
Not After : Oct 3 15:33:21 2026 GMT
Subject: CN=6ab7e5c1-e12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:4f:df:97:bd:bc:50:34:99:e4:9b:6a:b9:
93:eb:ae:2f:ef:ee:88:76:4a:30:85:8c:d2:56:bd:
8f:1b:33:02:4d:f4:05:c9:f4:b2:d1:02:20:ed:5e:
a1:97:d1:9e:0b:7d:3a:74:a0:9c:50:51:3f:30:32:
76:7d:5d:26:1a:77:5b:25:cc:e4:c3:4d:a2:9e:d3:
fc:80:a6:19:b5:9c:6a:30:2b:e0:65:21:ab:e0:29:
bf:d8:09:c4:fe:06:c1:3d:c3:4a:39:c9:e7:d8:0e:
2e:80:89:a2:6c:3d:a2:23:bb:82:53:ba:d7:71:d2:
be:6c:f4:bf:7e:4e:65:6f:46:0f:ca:a4:3b:7b:56:
0f:97:81:21:a5:33:e3:15:29:29:69:69:3f:42:01:
4a:99:07:d7:9f:d9:35:d7:bf:d9:d0:16:28:bb:a3:
aa:8b:4d:a4:31:06:36:60:bc:96:be:12:32:c8:89:
ad:84:b4:43:00:ea:1a:ce:5e:dd:06:1a:80:5c:5b:
3b:3b:55:7a:3b:07:f4:d2:d5:81:7e:d5:ac:00:32:
bb:fb:0d:79:6f:95:b5:78:8e:96:a4:b0:33:95:98:
1a:6f:5c:ce:11:9d:9f:99:1b:66:03:b2:70:03:61:
47:33:d2:07:15:bc:d0:4c:97:be:cd:0b:80:ae:e4:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:1F:49:98:20:78:02:88:E0:E9:78:8B:0E:7A:0D:45:89:5D:EF
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a1:6d:cf:47:64:43:d6:f2:2e:53:f4:51:b6:84:d9:65:ef:
84:bf:2c:31:1b:bf:22:52:1b:a8:db:18:94:e0:8e:e0:24:ef:
47:58:93:28:6f:f2:ee:2c:cd:90:15:a4:4e:82:51:a0:e0:cb:
8f:c3:d6:0e:6d:45:a7:e1:3c:e2:27:08:b3:9e:59:32:68:9f:
87:ff:93:8d:49:18:c5:ec:81:3e:7b:bb:a8:ea:1b:2f:ad:ec:
65:ee:19:b3:15:88:17:ae:f2:06:1c:d2:9e:94:f9:38:3f:f1:
39:bb:aa:13:ce:e5:33:ba:a8:c5:a5:bb:07:e7:d2:cc:19:b0:
ce:d3:74:e7:63:2c:8a:24:bc:6d:d5:6b:53:23:e3:75:15:5b:
3c:d6:06:a8:06:2e:b0:8a:61:13:04:e6:6e:d2:74:a0:32:9b:
fe:a7:88:96:61:fe:ac:99:a3:ad:57:f1:7f:85:f6:51:c3:9a:
6f:a1:31:8a:e9:da:49:4e:10:90:07:13:a4:b3:f3:2e:bb:fd:
91:b1:98:88:8e:3e:07:35:c6:32:33:27:2d:0d:48:a7:89:30:
db:1a:05:7b:67:c6:a1:6d:87:84:53:c6:58:b2:5b:ee:6e:0b:
0e:8e:e3:18:79:5a:63:3e:0a:7e:b8:a8:c9:e6:96:46:75:1f:
7a:97:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:25:14 2026 by rpki-client