
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier: meqrVKdA2dhGRwdJf0SCdJBgupmEhhDZaia6ZPeRAb0=
Subject key identifier: 94:36:94:A0:D8:42:5B:04:04:BD:0D:E5:0D:F8:C4:7C:2F:87:20:A3
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial: 0922
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number: 0913
Signing time: Sun 04 Oct 2026 20:19:15 +0000
Manifest this update: Sun 04 Oct 2026 20:19:15 +0000
Manifest next update: Sun 11 Oct 2026 20:19:15 +0000
Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: TyIoo9GYwNS/JOzPOIGSFpBVNZ+UsH6ts5G0P6wDtRY=)
2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=)
3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Validity
Not Before: Oct 4 20:19:15 2026 GMT
Not After : Oct 11 20:19:15 2026 GMT
Subject: CN=6ac2b4c3-61b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:39:b0:13:a5:4f:96:e9:59:92:32:b7:9a:
aa:31:43:94:ca:f3:ef:5b:66:f6:16:48:ca:e7:8e:
fa:84:e8:e9:3c:01:d1:6b:ac:29:af:4d:31:18:97:
c0:af:22:84:a1:0c:88:4a:8d:74:42:58:4f:99:de:
8e:f0:04:ba:22:73:5d:3f:93:de:06:b6:f6:56:51:
5c:7c:9e:ab:0a:94:da:41:6c:36:44:f4:72:c1:bd:
5f:bb:aa:1a:b8:b7:98:c4:42:c5:c2:bd:2b:f3:18:
23:0b:29:0f:85:10:06:04:af:4d:5a:f6:14:3a:e1:
3e:9e:fe:e9:07:2b:b4:91:e1:82:26:8e:94:ea:59:
a7:c2:8b:12:d5:fd:cd:47:11:e7:9e:a1:e8:37:1d:
06:56:eb:7d:a4:db:72:1d:ab:d6:f9:85:a8:fa:0c:
80:1f:50:77:5d:6c:40:fb:3e:13:73:87:ed:46:2f:
26:ef:9b:93:22:8f:18:26:5b:7f:37:b2:50:9b:31:
86:bc:32:08:09:23:2e:b1:fe:cd:ee:20:b4:4e:25:
f7:dd:2a:15:03:25:9b:4c:b9:db:b8:bc:2b:9d:5d:
00:fd:64:6d:c9:0a:52:76:cb:c7:bf:2e:af:e3:5f:
b6:75:ae:99:1d:ff:c8:84:cf:67:ff:7f:a2:f7:a9:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:94:A0:D8:42:5B:04:04:BD:0D:E5:0D:F8:C4:7C:2F:87:20:A3
X509v3 Authority Key Identifier:
keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:57:7f:77:73:e3:e5:37:1e:7d:65:c2:df:48:e8:78:76:
6c:83:46:0f:fa:c8:14:90:c6:67:9a:4e:bd:17:3e:22:83:db:
f1:6a:a1:7e:99:e4:6d:b4:c4:88:78:af:1f:dd:01:34:95:25:
29:8e:ec:d9:47:91:62:9a:d7:30:5b:83:94:a8:41:d9:19:ad:
11:b2:61:0f:de:bf:78:5a:01:ae:e2:af:76:c8:39:df:84:c0:
5a:5c:34:f1:4b:65:c6:df:18:97:b0:5f:11:ce:72:bf:b9:ed:
c3:5b:81:9a:7c:16:ac:c2:1f:ec:b8:44:92:d2:0c:c6:27:f1:
02:35:94:a3:87:bc:90:c4:b8:d9:36:68:dd:7a:f4:1b:c3:bb:
e9:5f:5b:d3:29:ce:79:da:6f:ed:47:b6:2f:5c:7d:97:c8:f3:
54:0a:58:47:ff:2e:6a:17:6f:54:40:0b:c9:f3:e2:af:d7:5f:
a4:e2:b2:8a:59:6f:83:cf:51:41:5a:67:0c:77:1c:b9:e2:46:
08:f5:1e:2f:c7:1f:1b:70:7e:84:c5:0b:30:1f:76:58:4c:30:
57:4b:76:ee:6d:18:26:50:55:90:6f:21:1d:92:b7:39:40:84:
2e:61:c4:2d:df:65:9d:2e:ff:53:35:59:81:a3:c9:5b:30:98:
14:0c:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:56:57 2026 by rpki-client