
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier: f5fN5xWTCcs6iD+g+1eq+YXYoNmCxKR3B/06/GITAlM=
Subject key identifier: CE:58:06:CD:62:69:12:99:98:A2:E2:2E:54:1A:DA:40:59:AA:D2:53
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number: 02FD
Signing time: Fri 25 Sep 2026 00:58:13 +0000
Manifest this update: Fri 25 Sep 2026 00:58:13 +0000
Manifest next update: Fri 02 Oct 2026 00:58:13 +0000
Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: g6H/zdKTQh99MwkYZ1W0/fMU1TbwFMEDLMbl1AX1AoQ=)
2: ED55D842ADB111F08582AD1BC4F9AE02.roa (hash: vnOg2u5nZQ11gsb7K4vHWE+A+A3DwNil5+tqHXo/+no=)
3: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (hash: EzUITh41blxqcV425viSW52eQ/6/TgoZvTBJG30visg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Sep 25 00:58:13 2026 GMT
Not After : Oct 2 00:58:13 2026 GMT
Subject: CN=6ab5c725-a11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:81:20:42:1a:c8:f8:59:6b:5c:08:52:e8:
e7:ad:1b:98:6e:57:1c:84:57:a0:da:31:f3:0b:56:
91:6c:51:ba:8c:ed:ae:f5:4e:23:84:ba:49:c0:17:
a0:0b:c3:78:08:4a:28:a8:40:0a:85:e2:55:00:0f:
e1:72:a7:29:e2:8f:f7:11:2c:e5:c1:5c:df:71:3f:
f6:e5:44:b1:e9:f3:a0:0d:3c:6e:35:20:7b:f7:70:
e7:d7:8e:2d:54:d3:72:00:81:82:46:67:a9:ec:17:
4b:57:0d:c3:39:2c:de:6a:9e:ca:76:3f:6d:bc:51:
a6:3f:9a:4e:ba:7a:a2:02:33:60:02:e3:81:d7:c6:
b0:67:a5:07:f2:ac:91:be:27:62:59:5c:fd:bd:5f:
c6:c8:cb:70:f5:e0:3f:1d:b1:99:9e:6d:c5:5e:53:
5f:cf:de:7c:49:b3:aa:6a:bd:00:09:96:75:0b:10:
cc:36:b4:59:81:ff:de:d7:ba:0f:92:26:30:dd:08:
2e:f8:95:f1:7c:4a:60:0f:e3:d9:ac:1f:65:d5:be:
bf:4e:e8:76:eb:e5:7c:10:03:3a:03:ee:89:b7:1f:
dc:f2:3e:66:a9:71:a6:0c:51:cd:88:fb:58:21:bc:
ca:79:71:2a:ce:9f:13:ed:fb:31:e5:1e:e1:cc:98:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:06:CD:62:69:12:99:98:A2:E2:2E:54:1A:DA:40:59:AA:D2:53
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:c1:e9:28:39:8a:0e:2e:ab:4e:17:fd:fe:bc:f3:d3:a2:c3:
83:b4:ce:65:bf:d4:1c:ad:ce:42:b9:98:fd:b9:a2:44:6b:cb:
e1:c4:52:28:0f:06:0f:35:2e:29:ce:a1:b8:a9:f1:f2:76:c8:
73:8a:f7:3c:31:b1:a2:53:48:d0:4a:fd:52:15:d2:c1:c6:d7:
34:f2:17:26:92:d1:f4:ec:5f:6a:a0:ff:d5:d0:5e:61:75:7b:
1c:ae:ed:6a:21:b0:c6:22:7a:c3:bb:9c:0b:21:17:8a:5b:fe:
d9:ee:45:ec:22:a0:69:65:53:91:ac:2d:f8:20:44:40:94:83:
f4:3e:e6:23:9c:ad:62:82:53:1a:85:fd:92:15:bb:aa:7d:7f:
55:b7:27:f6:87:2f:91:60:8c:ef:d2:8d:29:cd:b5:37:4b:16:
2b:50:55:42:55:bb:4d:95:d5:9e:a5:52:73:a9:c7:ac:cc:eb:
b5:75:c6:34:24:53:da:23:43:af:2a:d6:dd:b0:f1:e5:c6:78:
4b:77:3e:36:1b:57:87:6a:d8:7e:ad:64:f1:8c:66:30:99:8d:
20:d4:62:c6:30:95:7e:c0:d3:e0:2a:66:c3:ed:e9:f0:81:0b:
d4:4b:39:f3:cb:55:f4:8b:2c:c3:73:89:64:77:6e:27:2c:1d:
ed:1e:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:05:52 2026 by rpki-client