
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: T3i+k1EVOi4qerh2LZrJfqrmTafagrtXrv2Td1bmPoE=
Subject key identifier: 41:63:8C:67:29:4C:71:64:26:D6:78:9D:92:7F:A5:08:99:18:18:A3
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 01F5
Signing time: Wed 23 Sep 2026 03:15:55 +0000
Manifest this update: Wed 23 Sep 2026 03:15:55 +0000
Manifest next update: Wed 30 Sep 2026 03:15:55 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: fDGQoOSJG+8vs9pdybb4cOaEguJgFNombTYx16vLjPc=)
2: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: jUlzv+BPveVCQ4DOQfVrNZRZohUrZQ5kxaV6qLf2VRw=)
3: DB21824E24D411F1AAE44A56AB833773.roa (hash: 8GyDfBA1IZDhkRGLkiUjHXF95KxrCV2FUfNeUOQyYBE=)
4: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: 1IW5uQs2D3mZAea5IiAOQwQMw8/u9YBpsGFLZqR7TM0=)
5: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 9v5gtNpE8dXzfsqG3fdMl6Hr0batTTxdzTp1LP0HWPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Sep 23 03:15:55 2026 GMT
Not After : Sep 30 03:15:55 2026 GMT
Subject: CN=6ab3446b-4b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:1d:bf:62:1c:fa:96:da:a2:2b:43:b9:cd:
9f:8c:ca:78:ea:22:81:93:7a:06:4f:26:55:ba:ba:
5e:75:b7:ce:1e:43:76:cd:9a:76:4b:ff:da:fc:cf:
e1:04:83:e4:76:87:13:1b:bb:66:0c:28:b3:45:6e:
ee:e1:8c:11:bf:51:e5:bd:23:99:e3:b9:2d:94:44:
d5:ba:c3:5d:eb:58:3c:25:5f:10:82:4e:38:00:16:
67:4b:a4:7b:a8:8b:89:64:50:57:54:90:a5:e9:94:
fd:97:c0:d8:35:6f:27:e3:45:2b:ec:3e:fe:d7:f3:
5c:e8:c5:64:9d:b7:a0:c0:cb:1f:de:96:fa:9b:4f:
71:35:04:9a:a7:5a:d9:32:62:da:b1:82:2b:04:92:
51:69:99:5a:c9:a4:cd:19:1a:9e:11:78:f8:92:79:
50:50:54:46:a0:f7:56:06:eb:e4:db:39:6b:db:4a:
ef:3a:0b:60:f3:5d:44:6d:5e:4d:7f:64:6b:a1:17:
3b:27:54:47:3a:d7:66:e4:39:7f:e8:c3:96:d6:08:
40:c0:65:07:11:9b:cd:7a:31:e0:14:a1:1c:56:26:
27:ef:e4:ad:ef:be:88:de:7c:5d:87:21:ab:70:55:
01:d6:72:4e:77:03:d5:7a:22:2a:6d:25:a8:80:d2:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:8C:67:29:4C:71:64:26:D6:78:9D:92:7F:A5:08:99:18:18:A3
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:69:5d:41:1e:3b:1f:f3:22:a7:7b:bb:df:73:08:1d:7c:
3b:83:20:72:bf:3e:4b:a2:8f:49:f6:5f:c2:b6:ca:f5:78:3f:
16:73:e0:3b:b7:2a:65:7e:49:0d:fc:b7:c8:8f:6d:53:03:74:
8b:79:0d:a6:5d:05:45:63:14:f9:1f:0c:08:b1:d9:06:63:bd:
46:e5:62:cd:e4:34:b5:24:cf:19:6b:53:3d:38:f5:0f:2b:22:
bc:7a:01:f2:b9:b5:f6:11:d6:cb:6a:2a:69:a2:2b:cc:d5:bf:
de:2b:6a:b5:54:97:77:a2:d2:0b:dd:26:d4:f4:82:c1:00:80:
95:e4:eb:30:8a:53:18:76:35:fd:26:5c:ef:a9:bd:60:6f:6c:
8c:15:35:f8:4e:04:6c:75:3a:c8:36:fa:e0:0e:a4:fd:c1:30:
70:a8:a8:9d:8b:58:a5:f6:5e:2d:0d:31:c5:1d:69:d9:a1:d5:
56:eb:f7:b6:9e:a0:e8:19:71:2b:5d:c8:51:c8:fe:86:bf:7c:
91:6d:aa:0f:26:d9:02:0a:49:8a:bb:75:d4:e5:61:62:cc:c0:
65:5b:d6:bf:ef:9b:f9:27:3e:6c:76:9e:13:3c:c4:0a:eb:9d:
5e:ed:60:57:56:a8:02:3a:bd:18:f9:86:76:a0:4c:d3:ca:c9:
9b:fd:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:34:08 2026 by rpki-client