
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier: P3//Qf+AqiPcf86KDy+5Kk3W0eXqJYipn0HjLr4SaN0=
Subject key identifier: 17:3D:84:D6:1F:3A:30:0A:CE:9D:0F:29:78:3E:F2:45:A2:A1:76:A2
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number: 0615
Signing time: Tue 22 Sep 2026 22:34:37 +0000
Manifest this update: Tue 22 Sep 2026 22:34:36 +0000
Manifest next update: Tue 29 Sep 2026 22:34:36 +0000
Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: N/mxCC467btFy5YZ9Oytjtn7ODVRfYDh/a7lHoVtlw4=)
2: 933818FEAA5211F1818066A45B11F970.roa (hash: j2wMajzc8ldGDlXfJaOqXpoNKnbKY5MPta10zYBoEMs=)
3: CC3EDFDEAA5211F1BB7371B85B11F970.roa (hash: Ms0xxfw0xPuWdFx2As656pXikuhQssH+FnkLgBCuV6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Validity
Not Before: Sep 22 22:34:36 2026 GMT
Not After : Sep 29 22:34:36 2026 GMT
Subject: CN=6ab3027d-dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:1c:83:f8:c9:58:8b:ef:a5:76:31:e8:dd:
bd:23:0d:06:10:ce:41:64:22:16:7d:96:04:07:5f:
99:9e:11:c6:8c:21:60:8e:00:d9:92:ca:68:ec:1d:
5f:67:80:4d:7f:fa:80:c8:f1:e8:b6:fd:8f:f2:56:
78:de:da:96:89:5c:48:5e:6c:8a:6e:19:f8:13:d2:
5b:59:05:b3:d5:fb:84:10:06:c0:ae:b9:10:e6:cf:
a7:45:23:80:5c:4c:cc:21:d4:19:50:ae:7b:e1:44:
f3:2f:5f:32:04:bb:9a:31:b4:49:7f:6d:e9:df:3c:
69:cd:94:d0:7d:1c:0d:2c:4e:9c:97:95:1e:63:b1:
e4:1f:4b:b4:94:92:50:8a:ee:cd:41:7a:1a:36:60:
59:20:3a:5a:f0:f6:21:12:d6:44:b0:10:43:72:80:
b8:89:97:8e:62:50:3b:19:b4:6d:d8:2f:38:38:6e:
2a:f7:c6:c1:43:80:2a:18:6a:07:a5:56:73:9e:91:
97:5b:2b:a3:7a:de:66:cc:c3:e5:7e:d8:4a:38:47:
8a:77:24:99:7c:c1:fa:35:96:fc:78:12:54:f5:4d:
13:4b:6b:a3:19:42:06:32:98:67:97:fe:ca:9c:97:
df:48:23:f0:7a:2b:54:b1:6f:d7:c3:d5:99:b9:c4:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:84:D6:1F:3A:30:0A:CE:9D:0F:29:78:3E:F2:45:A2:A1:76:A2
X509v3 Authority Key Identifier:
keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:81:bf:9a:51:27:05:bc:38:e2:43:d9:40:ed:89:67:dd:31:
ce:f6:45:21:83:33:54:be:7f:8b:a0:16:5a:00:5c:0c:5b:9e:
29:1e:4f:00:dd:f4:05:f6:8d:1c:c1:4e:46:41:b4:08:c6:0e:
39:e8:d2:04:2a:2d:03:e9:94:bb:c1:af:c3:a8:42:8c:7e:5a:
ee:3d:e1:64:e0:0b:ff:91:0b:19:07:e2:e8:35:a1:a7:72:3f:
71:7b:48:e8:86:e2:b2:67:21:ca:51:5c:62:a4:5f:d7:5a:97:
92:c1:2d:a0:5d:94:e7:35:a1:c0:b0:59:13:c7:87:3b:69:0f:
8b:9f:5b:d3:43:9e:5e:91:cf:98:cb:81:8e:e3:ff:77:4c:2e:
fd:f5:91:68:36:02:83:b4:47:66:c1:fa:a5:2a:77:6f:3b:25:
10:5a:d8:ae:62:49:41:42:f9:2d:49:33:e7:e9:8e:ad:75:81:
34:e2:de:7a:d0:c5:e1:7b:72:53:0c:16:d3:31:1c:41:0b:49:
76:63:74:b8:0c:23:5d:4f:6e:97:4b:20:bd:43:2b:26:86:7c:
15:f1:9d:d8:b9:34:70:10:25:40:00:5b:44:33:8e:3c:63:ea:
c6:c1:d9:4c:25:dc:0a:3f:33:bc:d2:60:32:73:c8:17:8c:8a:
8c:ff:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:24:21 2026 by rpki-client