
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: 7NODxhCJ4rmGPC/04qJtfUS8nNISaQpHm3ImxaqyUug=
Subject key identifier: 00:35:46:AD:F6:53:BE:1D:49:9F:CE:05:20:3B:22:DC:29:E1:85:62
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0270
Signing time: Tue 13 Oct 2026 02:31:17 +0000
Manifest this update: Tue 13 Oct 2026 02:31:17 +0000
Manifest next update: Tue 20 Oct 2026 02:31:17 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: Yyq6gRWH/BqMEfuHv2iwe6vh8MbpSTumWcIfYfLCCtw=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Oct 13 02:31:17 2026 GMT
Not After : Oct 20 02:31:17 2026 GMT
Subject: CN=6acd97f5-19f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:24:da:3d:d1:35:0e:fa:ea:da:14:5f:bd:
2e:cd:c0:c6:fe:ab:28:14:0f:d3:6a:e6:d7:30:3e:
c2:72:f9:3e:d2:02:18:b1:9a:58:1a:e2:b2:3c:cd:
a0:fa:fc:37:61:65:17:78:bb:0f:34:f2:a0:ab:6a:
a7:b8:e4:d9:79:c7:2b:32:4f:0e:f6:9a:e8:36:37:
40:26:1f:87:99:f8:56:4d:39:27:4f:24:45:9b:ea:
94:2d:74:d7:df:20:0e:ab:30:6b:95:e1:32:f5:46:
11:2d:78:c0:35:cb:c0:02:ee:07:21:4b:8a:91:7d:
e9:0d:f9:e1:1c:19:8c:87:e9:e5:44:8d:5a:e2:cd:
8d:2c:96:3d:38:73:be:5e:77:fd:c5:9e:b6:5d:67:
b3:d5:16:a4:10:4e:ad:52:4d:2a:ed:9b:d7:f1:3b:
85:e5:20:d9:c1:da:b8:af:3b:08:eb:20:b4:88:99:
b8:62:07:68:13:76:2f:f8:67:c7:d5:46:b5:f2:9a:
83:d8:fe:54:a3:f8:b0:5c:90:36:30:30:b3:50:5f:
b5:2e:6f:5d:92:bc:d6:9a:db:82:0a:d3:51:9a:0e:
2a:27:71:63:39:4e:fc:f4:e0:be:fc:8b:c5:eb:0b:
0f:77:85:0c:51:f7:81:5a:a9:ff:ea:91:2e:9a:a8:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:46:AD:F6:53:BE:1D:49:9F:CE:05:20:3B:22:DC:29:E1:85:62
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:3c:4a:e4:d3:f5:02:f6:90:c0:dd:3b:c8:91:9f:2e:b9:
59:dc:28:14:05:09:0b:4d:55:81:a2:78:d1:c9:3e:c2:49:0f:
da:4b:ce:cc:6b:e8:6a:cc:39:bb:16:ec:dd:44:8f:6c:d5:27:
d3:f5:5f:59:64:cb:37:d7:9d:1a:3c:31:bf:74:8e:83:59:2f:
5e:98:63:bf:d0:ae:b9:9d:13:18:38:84:7c:3c:05:f8:5d:a0:
f3:2f:b8:06:c3:a3:7c:53:3c:ef:90:f9:ca:3c:9f:95:61:1e:
ce:4e:d9:17:d3:e0:d3:e0:2a:eb:df:0e:c2:56:26:9b:7e:f4:
87:2a:f9:34:77:4b:b4:8d:a7:23:1b:be:85:44:59:be:95:78:
2a:98:8e:51:6b:f9:e2:ff:7f:1b:04:43:b9:e1:2c:eb:10:2a:
98:86:57:c2:1a:5e:89:c0:3c:18:eb:88:49:ed:39:22:3d:42:
af:5b:f6:30:d6:1a:e7:7c:c2:a6:8d:3d:1d:cd:ae:fe:8a:06:
dc:c5:c3:cb:ab:5a:9c:9f:ca:56:12:4f:23:53:41:a9:59:0f:
6c:a3:93:e8:ef:94:10:94:6f:05:7b:26:c3:fe:7a:04:85:ec:
97:16:1b:6d:07:23:c5:f2:2a:46:0f:d0:39:f7:9f:8d:f8:27:
e6:39:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:14:36 2026 by rpki-client