
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: 6utmynHhbAi/PG/vuq5eaiUXhYAJclvHgNmzzEVfRTk=
Subject key identifier: 66:5D:BF:29:B8:1E:38:CA:10:76:F0:55:6C:67:71:10:75:57:57:01
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 25AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 255B
Signing time: Tue 22 Sep 2026 15:42:22 +0000
Manifest this update: Tue 22 Sep 2026 15:42:22 +0000
Manifest next update: Tue 29 Sep 2026 15:42:22 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: 0zxWqZ3NJQVYXBFYb4izsWioaCpdHfOukdn+NxSxb0c=)
2: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=)
3: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=)
4: 1A13A1D0ABFD11F1A01A66F56A11F970.roa (hash: /mdRJmdwf41+PjME0KrvJ9ifiBelFKWQGM/p14mQGFc=)
5: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=)
6: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=)
7: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=)
8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=)
9: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9646 (0x25ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Sep 22 15:42:22 2026 GMT
Not After : Sep 29 15:42:22 2026 GMT
Subject: CN=6ab2a1de-a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:60:cf:ac:69:6b:82:cc:ac:eb:e0:21:74:
97:35:4d:1f:49:da:19:a3:c4:bf:4d:9b:3e:0f:62:
31:bb:ae:78:de:c1:9b:76:24:ad:8b:91:33:fd:24:
81:72:34:6c:3b:09:18:a6:7e:43:30:3f:1f:52:d4:
42:0e:66:74:ef:e1:62:6b:07:4e:53:40:16:42:5e:
5b:2e:fe:91:28:ea:b0:7c:e2:1a:4c:64:b3:d8:77:
f6:bf:a7:00:90:42:3f:e3:cc:f9:7b:63:61:1f:e4:
87:0b:da:12:e5:d5:0a:84:bc:ad:15:35:a4:7a:98:
46:e7:8b:07:6c:1e:a6:5e:55:33:b7:70:7c:9f:6f:
80:25:47:b2:b9:78:48:3c:3b:88:e8:81:4f:65:3a:
7f:c8:f3:51:70:9d:dd:db:98:7e:8a:dd:fe:18:e6:
e1:38:35:ea:46:fb:fa:e2:77:30:42:b1:b0:04:69:
ff:cb:77:e2:9e:c7:3a:a3:9e:cd:4b:cb:0e:b2:f3:
dd:a6:89:d3:ac:bb:b4:a0:6b:65:fa:e1:24:85:bf:
0b:90:4c:9c:50:47:f9:37:c7:77:44:39:a4:f2:99:
ff:e6:5e:f5:cc:d7:17:25:7b:d2:d0:3a:35:fc:08:
9b:58:d6:83:a9:13:0e:83:9f:ec:7b:2e:b7:5c:a7:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:BF:29:B8:1E:38:CA:10:76:F0:55:6C:67:71:10:75:57:57:01
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e2:6f:5d:54:3f:a3:c2:05:95:3b:1e:34:33:42:21:33:34:
96:41:c6:a3:3b:38:cd:54:06:7a:0d:e2:6a:29:93:cf:30:d2:
75:8f:b8:12:70:f5:4d:3d:24:c3:a6:68:e1:5e:ef:2d:4b:1f:
73:db:92:27:47:73:f5:77:57:2d:f6:9f:09:04:5f:8e:f8:0c:
02:93:a7:21:fe:85:bd:d3:9f:2e:0a:89:88:7c:c5:57:0c:1d:
fc:50:12:be:b5:e6:f8:1f:4f:1d:9d:46:0b:e9:0c:37:32:7d:
ed:12:92:4c:d3:a3:46:50:8d:8d:cb:3f:c0:ea:91:bb:3f:84:
f1:e4:e6:8e:b8:9a:6f:3c:58:a8:a1:4e:ba:e0:d4:52:71:f4:
84:92:c0:11:c6:72:5a:af:63:a4:22:b6:4c:8a:94:07:fe:03:
98:3f:5a:b0:67:12:06:eb:70:9d:3b:49:86:c1:13:ab:64:7d:
dd:94:35:d3:82:71:97:c3:94:e1:88:fd:6b:bc:91:be:ae:4e:
35:c8:d6:99:94:f6:7a:bf:b4:24:7b:58:ce:bb:10:3f:db:4c:
88:3d:13:7c:35:c9:1a:ff:52:ba:f1:f5:7b:e4:61:e4:a9:f0:
89:c7:2b:b7:6a:53:ab:3a:74:4b:55:08:e2:29:95:7e:c5:2d:
26:0f:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:18:23 2026 by rpki-client