
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: iJ+tL7raKMbnoeFmdWAwovA0mkxte4trbBxxpnEeTqo=
Subject key identifier: 53:23:90:00:7A:D1:34:49:05:BD:59:6A:85:5E:B5:B2:7D:ED:64:AA
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 19D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 19C1
Signing time: Fri 02 Oct 2026 16:31:00 +0000
Manifest this update: Fri 02 Oct 2026 16:31:00 +0000
Manifest next update: Fri 09 Oct 2026 16:31:00 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: OgUSJutG8nh/u72wsVdOwszkNwK6+sOB2AuuX/MDO3E=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: yEvt1EWswbQO/Y1nNlXzDVEHUkJrE0Bdp2ONLKPwkEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6614 (0x19d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Oct 2 16:31:00 2026 GMT
Not After : Oct 9 16:31:00 2026 GMT
Subject: CN=6abfdc44-070a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:3c:59:63:a0:65:87:e0:1b:8f:df:70:43:
fb:19:8e:38:1f:e5:3e:ae:4a:a2:2b:80:a4:a0:52:
9b:dd:57:9c:32:6b:74:de:cd:0b:0b:f4:81:54:a7:
f1:20:15:22:d1:45:8b:c7:11:5f:5e:c7:01:52:53:
78:dc:ce:a0:dd:53:b7:14:3a:22:5a:0a:a6:56:75:
5b:59:50:d9:44:c9:78:d1:6b:8b:0d:6e:19:74:cc:
dd:bd:35:53:9a:3f:2f:ce:b1:d8:8b:f4:a8:aa:26:
ce:fa:a1:c7:1f:d5:86:da:33:c4:c2:32:83:f2:32:
50:43:31:c4:30:d7:9c:7c:f7:58:ab:ce:07:fc:1f:
02:97:24:32:2f:94:de:3b:f0:b5:b5:fa:88:b0:70:
65:72:8e:99:f9:f7:7f:7a:e7:f5:ba:86:9b:44:f0:
82:5d:bb:38:f6:1f:ef:8f:ea:78:04:0e:19:e0:ce:
b9:9b:7b:06:6e:c8:ff:0c:12:a6:60:80:fd:92:ce:
50:64:79:fd:b7:69:d4:79:cf:73:f7:f7:a3:a8:c1:
d8:f6:17:ed:8a:76:a1:44:1c:a1:40:db:8d:8f:8d:
ee:4f:21:82:bc:0a:89:c1:aa:c9:89:6e:91:0d:2e:
90:1f:4f:3b:4b:77:22:33:ba:ea:75:2b:a1:09:ce:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:90:00:7A:D1:34:49:05:BD:59:6A:85:5E:B5:B2:7D:ED:64:AA
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bb:87:d2:2c:43:b0:f3:cf:fc:18:3b:10:74:f4:6b:c1:e5:
31:8e:a6:1d:b6:a6:d6:1b:a9:15:0b:e5:a8:ea:42:f5:f7:ac:
bc:26:41:84:22:73:29:78:9a:52:27:9a:86:3b:eb:6b:18:35:
3d:ea:cc:ad:75:6a:7d:35:1c:a1:ec:6a:5c:4e:a5:12:c6:9e:
23:0b:12:0f:ab:1c:0d:f7:8b:64:be:17:0b:3a:b7:7b:5e:0f:
46:1b:4d:f1:a5:3c:50:19:d2:ce:a6:3a:b9:6f:5c:46:0a:23:
ac:ce:40:ac:40:5b:d1:46:84:16:b9:5a:5d:53:be:00:c5:1a:
9b:75:8b:06:45:ce:58:9f:e4:e3:2f:f2:ef:39:b6:05:d9:eb:
35:0e:a0:86:0b:0f:b3:e2:cd:d8:14:7a:f0:87:72:09:b0:1a:
a9:d1:29:bc:3f:b6:97:92:4f:a5:83:32:6f:3f:e8:2a:e4:2a:
ca:8f:b9:d1:72:e4:96:dd:b7:b3:65:21:08:f5:a1:8d:48:83:
1e:7a:cf:77:4d:18:9c:cb:eb:70:d1:f9:ce:4e:e7:36:4c:d0:
ea:55:ef:89:cc:34:b3:46:98:77:5a:d4:f1:fa:98:84:f6:8d:
9a:3e:de:d0:59:14:67:6a:de:95:db:09:d3:a7:13:34:a0:6a:
17:b2:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:38:43 2026 by rpki-client