
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier: ZMIS/oj4HepzSXBX7gX2vvd3BNzGnL1P/dfrhoYcEM0=
Subject key identifier: 28:D3:2C:0A:3D:BA:63:0C:99:39:0B:01:55:C2:5E:AB:17:97:05:24
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial: 0A4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number: 0A3F
Signing time: Tue 06 Oct 2026 19:48:39 +0000
Manifest this update: Tue 06 Oct 2026 19:48:38 +0000
Manifest next update: Tue 13 Oct 2026 19:48:38 +0000
Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: HmqNBe/QttAsOSVaKi8g/ahsKsFQ5rdb7lWCdRGUECE=)
2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Validity
Not Before: Oct 6 19:48:38 2026 GMT
Not After : Oct 13 19:48:38 2026 GMT
Subject: CN=6ac55097-113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:e4:87:da:ab:1a:9c:61:d2:db:90:c8:2c:
05:38:95:64:1f:ef:79:aa:c9:ad:0a:94:03:6e:64:
70:40:9c:b9:ff:6b:11:d2:0d:58:7e:1c:9e:7f:b5:
69:b3:fa:d1:1f:ef:f0:29:ff:8d:ba:9a:f0:aa:cb:
2f:1d:29:77:2a:fd:43:ec:97:7c:b5:24:ac:f6:26:
04:4d:4e:01:ad:76:95:20:fb:db:09:14:99:98:15:
91:f9:c2:24:f3:70:bd:3d:8a:35:6e:f3:28:11:a5:
e8:23:91:7e:61:9f:09:cf:5a:1b:45:39:58:bf:6a:
c2:c4:45:7a:af:d6:74:03:d6:97:cd:97:d2:eb:99:
99:41:f2:2b:61:bf:08:67:16:12:4a:e5:43:5b:e2:
9d:fb:c3:20:ec:ab:26:f6:c0:4c:04:05:ac:24:06:
b5:8e:7f:69:fb:03:85:5a:71:b9:41:10:93:ec:b0:
92:06:66:e3:28:df:17:c5:4c:9e:ff:0c:99:8d:69:
33:e3:e5:84:a4:fa:ff:59:aa:33:42:27:8c:1f:ff:
9e:67:ac:b4:69:88:81:2f:4a:63:6d:4f:12:c1:46:
ee:fe:82:e8:00:63:e6:e4:39:77:5a:b3:36:c3:f5:
3b:4d:8e:28:c7:41:07:2e:e8:f1:56:2d:4e:53:04:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:2C:0A:3D:BA:63:0C:99:39:0B:01:55:C2:5E:AB:17:97:05:24
X509v3 Authority Key Identifier:
keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:2a:d3:ef:ee:ad:4a:2a:1c:dc:8d:ab:49:7c:be:e1:9e:
a2:a3:9e:4b:45:48:38:88:fd:76:16:f9:ae:a1:ba:4d:96:2c:
ac:5d:6b:cd:6e:2b:b6:1a:a3:7b:d8:c6:79:20:14:b7:f6:c5:
7d:56:0a:68:ca:91:55:b7:a5:d1:7c:84:6e:0d:4b:2d:e1:3e:
aa:92:a7:03:5c:59:97:35:de:dc:30:68:dc:77:4a:a8:d6:d3:
c3:fd:2b:c6:85:53:98:42:5c:71:82:03:ea:e4:51:6c:b4:98:
b2:66:f3:da:04:49:a9:7b:57:dc:78:7f:5d:ec:3a:de:8e:e7:
51:71:0a:23:18:bc:1c:63:4e:9f:34:49:41:36:18:c9:62:71:
ab:14:d3:f3:ec:1e:ad:b8:fd:e1:f7:66:a1:9a:9a:5e:3f:98:
8b:55:f7:43:2b:e5:fb:19:5b:4b:32:00:37:e9:9f:e7:18:b4:
e8:19:97:41:62:a3:f0:62:71:cc:84:ca:d9:da:84:ce:20:b8:
e6:04:66:c0:2d:c0:f0:57:46:c0:34:7c:2a:97:bb:4d:c4:f8:
0a:7f:d1:99:1e:58:ef:6c:3a:5b:fc:ed:65:40:eb:21:16:91:
3e:e9:97:a3:fd:10:43:9e:e3:92:b7:f7:d6:31:dc:b8:9c:98:
fa:9c:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:40:17 2026 by rpki-client