
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier: tRnAAoy0XHSsRfGGTVarZtBl4pL+YwB2EGbsFLFqpcg=
Subject key identifier: 5A:B6:27:6B:0C:6E:E7:4B:C5:ED:3F:6C:CC:12:C6:6D:B6:E7:7C:BE
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number: 029B
Signing time: Fri 25 Sep 2026 01:45:15 +0000
Manifest this update: Fri 25 Sep 2026 01:45:14 +0000
Manifest next update: Fri 02 Oct 2026 01:45:14 +0000
Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: 8jSqmS3dpHnPUlfu4F8ZPwMeQypH2EB87X544b+eGds=)
2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: LIdhf9ay4v6pNkqEXLVs+I0RR4BOPrXO+QQVxcMgeeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Sep 25 01:45:14 2026 GMT
Not After : Oct 2 01:45:14 2026 GMT
Subject: CN=6ab5d22b-7606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:bf:eb:5d:89:99:dc:53:2a:77:2f:28:16:
d1:7c:10:25:cd:a9:2b:9a:54:c0:6b:2e:db:7b:29:
9d:5c:9d:06:98:44:ac:f2:5b:6c:0e:e9:2c:2b:e7:
82:c7:c3:0e:bf:27:22:92:d1:44:13:77:80:a5:c6:
1c:60:28:e2:61:15:03:fa:ba:ca:62:c0:d9:72:06:
52:77:24:67:68:5d:fb:a9:25:cf:0d:64:c8:9a:39:
9b:ef:bd:f2:a8:0d:36:41:8c:3d:c1:d0:9b:ec:84:
40:b5:b3:31:f9:38:46:ad:06:e2:39:8b:ea:1c:01:
be:5d:b0:b1:67:80:06:d8:d1:0e:02:7c:8c:a1:f7:
e1:a8:c4:05:ce:7c:a5:6a:b9:04:63:62:f3:00:97:
be:47:28:60:cf:4f:1d:42:dc:b4:5f:51:49:a0:71:
7b:59:e3:ad:58:f6:e9:7f:6a:9a:49:65:97:51:20:
d3:d2:2f:cd:6f:44:00:21:4a:97:f4:03:0e:65:25:
f8:2c:27:d4:f5:87:0b:7a:cb:7b:5f:fd:8e:fe:fc:
5b:02:55:74:c5:b3:98:e4:0e:25:8f:d2:0d:5f:91:
28:42:44:e2:7e:5b:61:53:e8:ba:31:5b:ae:e2:22:
05:6c:c7:cc:d0:b9:ff:13:39:f9:00:6b:34:10:bd:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B6:27:6B:0C:6E:E7:4B:C5:ED:3F:6C:CC:12:C6:6D:B6:E7:7C:BE
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:15:6c:ef:7f:f0:f1:a9:03:d2:3f:b8:e2:a5:e0:e1:73:
b6:e3:a0:96:b2:fb:2e:27:64:ae:89:23:5d:37:39:19:f8:2c:
d8:f4:3e:27:6f:d2:36:77:dc:ee:82:f2:9c:ec:a8:50:bd:46:
fa:93:6d:25:38:4c:71:36:76:c3:51:24:81:b5:cf:e3:54:fc:
f7:b7:d6:da:50:30:fe:66:d2:bc:b1:f7:95:52:73:87:05:1b:
80:d8:59:1b:98:00:b6:71:61:35:22:17:f3:d3:cb:14:63:ba:
6c:18:92:15:77:28:ba:ce:67:4b:a9:1f:ae:38:82:92:de:7a:
45:80:14:1a:ef:70:34:04:20:7c:84:60:fd:ba:2d:fc:fa:ac:
87:35:dc:e0:7e:3e:c6:fc:60:74:5d:35:22:6c:f0:f3:9c:8b:
22:0f:dd:92:81:f1:ff:ee:c5:3a:9f:9c:c9:72:1b:f6:80:63:
bf:f7:64:25:56:20:85:7a:c0:bf:65:6c:72:f3:3a:21:79:d5:
c2:78:b7:54:e5:63:01:24:e7:19:df:79:85:d0:ce:05:ff:34:
77:0b:42:b5:e0:97:ee:61:1c:96:16:da:68:4a:47:56:23:27:
cb:47:f0:51:64:fa:de:01:21:29:76:2e:0a:b2:a3:03:a2:a0:
d9:e7:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:04 2026 by rpki-client