
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: FfzZnnDDJTNdGit9QI/fNUe4z2Ph8feKIY+zBUBeJ68=
Subject key identifier: 59:2C:D1:D2:61:60:04:18:12:0C:38:F4:A2:F3:43:DC:4A:91:67:F3
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 08E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 08D1
Signing time: Tue 22 Sep 2026 20:17:05 +0000
Manifest this update: Tue 22 Sep 2026 20:17:05 +0000
Manifest next update: Tue 29 Sep 2026 20:17:05 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: eT3tXHmUQ4RsDCtTyaWs38uV9ZzOKhCvvXzREcLWKEQ=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: Sep 22 20:17:05 2026 GMT
Not After : Sep 29 20:17:05 2026 GMT
Subject: CN=6ab2e241-6bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:9f:55:b8:75:2d:14:ee:65:0f:f1:60:14:
c7:76:80:bd:72:98:84:06:20:18:1c:08:0c:bc:52:
b1:4a:2b:7d:aa:84:fc:b7:3b:fa:2a:9a:95:f0:e1:
1f:8e:7a:18:73:76:2c:7c:82:2c:fb:f0:e5:3f:f7:
df:b2:36:d7:8a:6c:5a:f1:18:e9:21:ca:71:bc:72:
13:22:e7:1d:77:c3:f6:1a:2e:f0:4c:2d:2b:7e:04:
64:eb:34:f3:26:4e:2a:df:97:fe:ae:40:52:53:0b:
1d:d2:13:04:61:37:46:d3:82:56:72:28:82:82:da:
8e:a1:5f:dd:50:ad:7e:84:f7:30:2b:b6:3a:2a:15:
ea:4b:8e:0e:98:07:d6:87:aa:a6:0e:5d:8a:4f:d1:
4f:1d:06:87:3f:db:7a:7c:9d:92:8b:a7:32:3f:b7:
87:38:90:fd:70:39:75:30:3c:e3:78:21:85:48:05:
84:d7:ef:ce:ec:d7:5d:7a:6e:5e:aa:4c:c7:f6:e9:
f5:1d:0c:a7:27:63:3a:99:77:44:26:e3:ea:7b:71:
e5:8b:4c:0f:a1:a5:91:78:05:f2:1c:76:f6:89:35:
4c:62:1d:69:e0:c7:6b:d0:81:af:a6:40:3f:b3:26:
11:e4:2d:93:4a:2b:b8:e6:34:cb:5a:3d:41:53:cf:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:D1:D2:61:60:04:18:12:0C:38:F4:A2:F3:43:DC:4A:91:67:F3
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:3a:8b:8f:15:41:e2:8f:d2:6a:a4:49:70:41:f4:2c:03:
72:5d:14:51:f9:81:da:b8:c4:1a:0c:81:ed:43:36:75:39:cf:
2d:a3:81:d9:66:ec:61:0a:3c:f2:89:c1:9f:36:f0:f5:64:d6:
fc:6c:c5:bd:6e:1b:b0:57:57:aa:a2:4f:21:13:44:e4:dd:34:
8e:98:d4:5d:7b:95:a6:ea:8d:40:d9:fb:81:30:fd:6c:67:26:
02:cf:57:6f:02:b3:87:61:6e:83:d7:9a:dc:8e:a0:0f:b1:87:
02:67:0a:c0:04:c9:1b:cd:28:02:22:88:9f:d6:c7:e7:c5:19:
f4:f8:f7:5f:0a:82:26:28:53:ab:97:0e:1b:3a:54:57:99:6c:
47:d7:64:ed:01:e0:b8:39:54:c9:c6:33:e1:20:2a:41:61:e6:
6a:3e:5f:51:7a:45:3f:89:05:43:01:9b:9d:6a:5a:17:e4:cf:
3f:c8:21:8d:dc:bf:81:a9:d1:3a:58:4d:d4:4a:83:9d:6a:b8:
e6:cf:bf:a7:89:31:d3:db:c8:d8:3a:52:41:ca:33:3f:d8:08:
a9:09:c4:57:31:af:9f:c7:7a:25:12:0f:d6:20:5c:3a:c8:e3:
10:a3:dd:b4:a8:23:77:0f:33:0d:b1:7e:40:1d:18:e7:2d:07:
a4:43:f1:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy
NUE1NjUxNTYwHhcNMjYwOTIyMjAxNzA1WhcNMjYwOTI5MjAxNzA1WjAYMRYwFAYD
VQQDEw02YWIyZTI0MS02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaGfVbh1LRTuZQ/xYBTHdoC9cpiEBiAYHAgMvFKxSit9qoT8tzv6KpqV8OEf
jnoYc3YsfIIs+/DlP/ffsjbXimxa8RjpIcpxvHITIucdd8P2Gi7wTC0rfgRk6zTz
Jk4q35f+rkBSUwsd0hMEYTdG04JWciiCgtqOoV/dUK1+hPcwK7Y6KhXqS44OmAfW
h6qmDl2KT9FPHQaHP9t6fJ2Si6cyP7eHOJD9cDl1MDzjeCGFSAWE1+/O7Nddem5e
qkzH9un1HQynJ2M6mXdEJuPqe3Hli0wPoaWReAXyHHb2iTVMYh1p4Mdr0IGvpkA/
syYR5C2TSiu45jTLWj1BU89XtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFks0dJh
YAQYEgw49KLzQ9xKkWfzMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz
RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH
NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAekM6i48VQeKP0mqkSXBB9CwDcl0UUfmB2rjEGgyB7UM2dTnPLaOB2WbsYQo8
8onBnzbw9WTW/GzFvW4bsFdXqqJPIRNE5N00jpjUXXuVpuqNQNn7gTD9bGcmAs9X
bwKzh2Fug9ea3I6gD7GHAmcKwATJG80oAiKIn9bH58UZ9Pj3XwqCJihTq5cOGzpU
V5lsR9dk7QHguDlUycYz4SAqQWHmaj5fUXpFP4kFQwGbnWpaF+TPP8ghjdy/ganR
OlhN1EqDnWq45s+/p4kx09vI2DpSQcozP9gIqQnEVzGvn8d6JRIP1iBcOsjjEKPd
tKgjdw8zDbF+QB0Y5y0HpEPxNQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:16:15 2026 by rpki-client