
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
File: _-gfY04l5olzmJndVfFB_kR8cAs.mft (raw, json)
Hash identifier: Q4DmPogdSaPSttyLAvf6u8G5swaIAtf9RWtxldGFW7s=
Subject key identifier: E2:2A:B9:18:87:11:C5:89:CA:A3:B6:64:AC:BE:16:14:18:A0:99:C5
Authority key identifier: FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
Certificate issuer: /CN=A913AC62/serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
Manifest number: 10
Signing time: Fri 25 Sep 2026 09:17:42 +0000
Manifest this update: Fri 25 Sep 2026 09:17:41 +0000
Manifest next update: Fri 02 Oct 2026 09:17:41 +0000
Files and hashes: 1: _-gfY04l5olzmJndVfFB_kR8cAs.crl (hash: pGDaf3xSneXzza/xRgCFUCz33myRnKr60Y7tf5BUsJ4=)
2: 2A90286AA74011F1B00B73DC6C11F970.roa (hash: AUbjV4dgZ0W4N6itfjI+ItqjZQKl7Cbq52d8Byg1lbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AC62, serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Validity
Not Before: Sep 25 09:17:41 2026 GMT
Not After : Oct 2 09:17:41 2026 GMT
Subject: CN=6ab63c36-3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:3b:1b:65:bc:a3:67:58:b4:c1:6d:45:fb:
c7:1f:a0:8f:6b:11:8a:bf:2d:1d:2c:7a:a5:b8:e3:
3e:f7:1f:8e:61:c2:e6:af:36:77:92:4e:db:91:e6:
26:24:62:ca:6e:54:ff:23:eb:fa:34:18:4f:01:ee:
70:92:0d:d8:59:ef:74:8b:49:13:f8:c0:7b:63:19:
be:a5:5b:1a:34:3a:fc:82:87:84:d5:28:d9:7f:31:
fd:3f:80:aa:b2:85:39:04:14:72:f8:eb:ba:bf:68:
75:3c:08:9b:50:da:01:89:65:5c:0d:ce:76:d9:1f:
ec:5e:1b:60:9b:20:73:4f:75:03:83:d4:0b:99:68:
0f:3e:d3:e8:e8:cf:91:e7:fb:d2:bb:5b:44:d4:dc:
82:e1:74:d3:32:c3:34:4f:be:c9:be:c4:31:aa:3e:
45:1a:45:be:89:87:a5:7c:0d:eb:c1:a2:fa:bb:61:
2d:ac:00:47:69:24:d4:4e:99:ba:32:7c:8f:d8:50:
df:45:62:95:5c:d3:d8:cb:5d:0a:0b:34:5c:de:cc:
d1:45:21:57:35:fd:10:b7:ee:5c:ad:5d:43:4c:9c:
6f:51:46:4e:c9:3c:36:f1:0f:04:4f:1c:a4:01:1b:
8a:98:a6:6f:a1:11:7a:0b:70:09:cf:ec:ca:43:36:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:B9:18:87:11:C5:89:CA:A3:B6:64:AC:BE:16:14:18:A0:99:C5
X509v3 Authority Key Identifier:
keyid:FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:b1:88:a4:10:1c:19:a8:13:2a:a8:04:b3:7c:49:3c:bc:
ff:93:c6:0d:86:eb:98:b2:d7:e0:4c:d6:72:e9:9d:32:05:76:
02:5b:ca:41:1f:a8:f6:33:d1:1a:ea:65:61:6c:61:fe:f4:98:
fb:9e:80:6f:96:85:70:4b:d9:84:56:e0:ea:7f:cb:13:8e:be:
15:9f:94:46:db:81:4b:83:f1:37:8f:bc:e4:44:e8:d8:cd:0d:
ce:45:94:51:a4:86:b1:62:1e:f9:29:7e:b7:49:96:04:67:c3:
bd:f3:b8:40:b7:5d:0b:4f:93:b2:5b:47:ef:c5:61:ef:9c:5e:
03:b5:2b:29:29:0f:e9:8e:e7:06:37:8b:13:4f:54:f6:29:2f:
0c:d3:97:e8:f5:cf:57:02:48:80:16:eb:59:9a:2c:4d:f6:ac:
ef:e2:d7:a8:02:d1:a1:38:aa:87:11:b3:32:c0:c3:01:3a:0f:
08:e8:13:da:00:df:a8:ce:b5:63:f5:4b:aa:2e:80:3f:7d:17:
27:94:30:5d:81:95:a6:b9:87:eb:1e:dd:7d:d7:6a:c8:01:26:
e9:f0:db:dc:df:f4:b3:12:17:f1:24:cc:85:7a:3d:9e:ad:93:
9e:66:5b:71:a3:3b:5b:72:ef:08:09:e5:26:ee:3a:0d:8b:f7:
be:e4:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:25:01 2026 by rpki-client