
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File: RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier: 56+rW28RYafZUvkiwkUTbKWcKrewevjrv5AT8Ijx/ms=
Subject key identifier: 1E:5D:2C:B6:B1:EA:A0:A0:F5:10:FC:F4:28:19:EF:D3:A5:FF:31:DF
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number: 99
Signing time: Fri 25 Sep 2026 07:28:58 +0000
Manifest this update: Fri 25 Sep 2026 07:28:57 +0000
Manifest next update: Fri 02 Oct 2026 07:28:57 +0000
Files and hashes: 1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: mxDN4nINR5JOtzl0cu2lw+u0Yxv9IU2xjilk4ro6psw=)
2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Validity
Not Before: Sep 25 07:28:57 2026 GMT
Not After : Oct 2 07:28:57 2026 GMT
Subject: CN=6ab622ba-be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:15:11:4b:93:6b:2c:cb:9c:f3:12:3c:96:
f9:0e:9f:b5:2b:01:b6:e4:58:09:65:75:e8:3a:91:
fc:17:12:69:8b:c2:de:95:bc:c3:53:68:36:5c:5e:
ca:c3:7d:6c:44:29:1b:88:82:3c:c2:1a:37:01:6a:
e7:90:70:cf:01:f2:93:d4:18:e4:b4:d9:26:f5:ab:
89:a1:60:6d:34:77:ed:ad:24:19:09:b2:6f:45:7e:
4a:bb:45:7b:d5:87:24:61:95:b8:9d:18:8b:3d:35:
0b:50:ef:7c:5d:26:89:13:ec:14:0b:11:6c:5b:71:
8a:0a:cd:42:ce:c3:50:42:9e:95:00:e4:61:78:b6:
0a:00:6d:81:cc:fd:9c:aa:48:4e:eb:ca:7d:8d:65:
68:00:4a:b5:23:9c:c2:4c:24:5c:01:cf:b2:61:96:
dc:ce:97:a5:2b:9f:3e:04:02:36:56:f9:2a:82:45:
81:58:d2:91:7e:e8:8d:ca:22:cf:b0:c1:97:f6:92:
2a:00:b2:0f:f0:74:5f:d9:c2:fa:6c:68:b0:28:3d:
e0:a1:ea:0b:1c:0b:47:ad:43:f1:dc:7a:7f:05:70:
d1:c6:ed:be:0d:91:2f:1a:5f:1a:d9:ec:04:01:15:
f1:98:af:a6:ac:37:33:d3:29:89:ee:53:d6:41:6c:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5D:2C:B6:B1:EA:A0:A0:F5:10:FC:F4:28:19:EF:D3:A5:FF:31:DF
X509v3 Authority Key Identifier:
keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:88:24:c5:e4:77:9a:b6:bb:b0:2d:e1:88:31:0d:8b:ef:
4f:68:1d:c0:02:35:cb:ac:9d:cf:33:0e:d8:a3:dc:af:4e:97:
9f:43:4a:f5:76:7d:08:55:df:32:47:33:1a:4f:07:49:0c:cd:
cd:47:1e:e9:f1:d3:4b:10:1b:3a:2c:ac:77:ed:5f:be:5a:6c:
83:fa:c0:2b:94:c0:4c:f4:59:58:7c:86:7d:f5:17:45:a8:0e:
65:3f:aa:05:b1:48:2d:11:a0:9b:e1:6f:33:54:c2:2d:de:07:
d6:46:f1:37:a5:66:16:e2:e7:fe:ea:6a:12:51:c1:c1:67:2b:
2d:38:85:fa:4b:2e:51:8a:28:45:0c:7e:f2:5d:5d:cc:9e:77:
0f:bd:d9:6d:08:a7:4a:39:4b:98:7d:12:56:ce:88:31:93:90:
f7:8c:06:53:a6:3f:a3:2c:a3:87:c9:84:2f:e0:9d:15:3d:f9:
b9:6a:58:bc:b8:9d:38:f3:72:be:1d:74:f9:b9:36:5a:a6:be:
33:15:8e:74:9e:32:09:3e:a3:20:c9:a2:cc:3a:80:ee:55:f9:
5a:fd:29:23:cb:4b:da:41:ac:63:a8:d0:71:ee:d7:f5:3c:6b:
e9:04:dc:4e:26:85:70:b5:02:d8:f2:c4:80:2a:f8:87:93:e8:
4f:de:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:28:12 2026 by rpki-client