
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
File: V0mF4m2MdxawntUDGbTOZJYd5w0.mft (raw, json)
Hash identifier: g/IpJQ/4pTkV5AYU4McjiKMkhY5Fbt+qfGR8JR9rUYc=
Subject key identifier: AC:0A:DB:B2:86:3D:E2:AF:51:CF:76:90:E1:1E:77:95:AC:46:4C:B5
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
Manifest number: 0268
Signing time: Wed 11 Nov 2026 02:18:11 +0000
Manifest this update: Wed 11 Nov 2026 02:18:10 +0000
Manifest next update: Wed 18 Nov 2026 02:18:10 +0000
Files and hashes: 1: V0mF4m2MdxawntUDGbTOZJYd5w0.crl (hash: rq0rIy+7gstw3Q05KyVc7f7UvkKlO2V5C5Lckc0M6wQ=)
2: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (hash: 6eIJZK0oiLd0UznYNIj37wg5WuQq/dk6pLPO3ugwOzA=)
3: 67CDF190321211EEA6FE6D43C4F9AE02.roa (hash: IPJpEJ2b1P619Sycsmd/PwlrksD/ztfD2mrryV7B1ps=)
4: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (hash: mldR1c5S1yIfEmhTTVAPWz7vwYz+ft3qmT964ffqtmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Nov 2026 02:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Validity
Not Before: Nov 11 02:18:10 2026 GMT
Not After : Nov 18 02:18:10 2026 GMT
Subject: CN=6af3d063-825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:37:f4:00:f4:82:7a:18:4d:fb:61:07:0e:
c6:ce:68:6e:0c:35:07:54:a1:6a:4c:71:15:20:38:
e0:68:a9:fc:f4:ba:ca:e8:7c:77:44:42:2a:a0:f4:
15:47:59:fd:79:77:a4:14:da:ad:52:80:28:0d:e1:
93:bf:d0:d6:d2:0d:8a:5b:1e:b1:f2:74:e2:eb:61:
7b:1f:5e:a2:e8:e9:e7:a0:d0:98:3b:55:e0:fd:c1:
bc:2e:ae:29:46:34:dc:21:90:08:5f:9b:41:51:fd:
8f:86:11:b5:a0:d5:1b:2d:79:11:b8:df:26:63:81:
02:6b:ec:d9:bd:e1:cf:93:f8:25:b8:10:43:70:0f:
ca:18:b2:45:55:3b:7f:99:75:07:8b:3c:09:68:6e:
5d:88:3d:28:9d:24:c7:59:94:00:0e:45:08:f9:e2:
f3:5d:58:d7:4a:f4:1e:43:9d:53:42:d4:26:00:d6:
1a:d3:1d:2d:1e:04:25:85:89:91:03:ac:c2:cf:d0:
d2:b8:73:af:99:a2:84:c4:ad:74:56:06:2c:14:8b:
fe:bf:d5:59:09:b8:bc:1b:48:f4:58:24:77:1f:04:
7b:a8:1c:60:65:ad:14:a2:03:74:f1:b7:62:7c:0f:
2a:ca:4b:28:11:8c:ee:a6:19:f0:43:f0:4a:7f:59:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:DB:B2:86:3D:E2:AF:51:CF:76:90:E1:1E:77:95:AC:46:4C:B5
X509v3 Authority Key Identifier:
keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a5:e5:9d:e4:d2:4f:7d:b2:73:b9:f1:24:3e:02:ce:a4:c6:
76:61:53:c7:08:ab:64:5c:1e:f1:c3:8e:37:46:bc:31:91:f4:
3c:ef:99:d1:9a:07:e2:28:7a:eb:7d:09:52:e4:34:f3:99:6a:
cb:44:3b:82:e5:ec:81:f8:dd:ab:e8:40:96:8d:52:50:52:7b:
dc:27:0b:99:fa:63:4a:f0:a0:95:32:e4:73:ff:00:d5:e3:fc:
e9:c2:f7:a0:77:38:5b:69:30:5d:4b:b6:c3:1a:c1:05:0a:24:
5f:9f:c3:7e:67:62:f2:64:75:7e:c7:58:fe:30:9f:78:cf:78:
c6:d3:23:81:47:2e:12:fc:35:c7:36:d9:a6:4f:ce:f1:94:d4:
b1:ca:ef:22:8e:b1:fa:c8:22:86:d9:9e:ad:f9:ed:16:b5:0b:
a5:69:57:b1:d2:88:98:a1:6d:32:ec:24:73:50:99:50:20:77:
06:17:ce:4b:5b:43:02:2f:2c:17:81:dc:39:08:cd:d0:ea:24:
36:cc:70:ac:cb:3d:15:20:42:a9:ab:8f:b8:0e:54:3a:00:36:
cc:69:e9:c0:d8:62:3f:82:ca:d7:14:08:9c:e4:8c:f0:03:dc:
7a:ff:5a:20:bd:6a:db:bd:91:df:50:70:47:22:1a:05:6a:15:
7e:a6:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 21:55:36 2026 by rpki-client