
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier: sUcnLRMMlJULZT78IfnJlbFiJvvSt6wAD9XZoXg7I3g=
Subject key identifier: 02:11:58:07:40:EF:5A:10:C2:43:12:C2:71:45:CD:77:96:F9:80:6B
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number: 0258
Signing time: Wed 23 Sep 2026 02:12:55 +0000
Manifest this update: Wed 23 Sep 2026 02:12:55 +0000
Manifest next update: Wed 30 Sep 2026 02:12:55 +0000
Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: wGFDYPSbeSbJYzNVGgFOiYGqmSqjZhWLnGJ/VXJKong=)
2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: bc09Q0qDl4JRKTKdrE27msOGAJTz68IMapWBCLEOpeY=)
3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: tr7WXU9f6CtqcovZLq0HIZHw7MPhtACp8RCBWvYQ4w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Sep 23 02:12:55 2026 GMT
Not After : Sep 30 02:12:55 2026 GMT
Subject: CN=6ab335a7-758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:f5:e6:74:4a:00:a4:29:31:fa:85:11:48:
05:20:7d:5c:2a:05:87:9c:fe:70:11:0d:37:b0:90:
6b:a0:34:12:b3:f5:a0:7c:ea:4d:64:51:f5:bf:c9:
f2:1a:e6:17:ca:e8:3c:24:30:2e:f6:91:60:bf:45:
66:93:de:86:66:e0:e7:c2:e2:b9:50:88:07:8c:51:
d0:d7:0d:b7:14:7b:11:8f:c7:50:2c:0e:a4:d3:13:
76:26:37:49:0c:61:f4:81:c4:10:e0:42:38:a3:da:
bb:13:45:d8:ab:fa:e6:dd:03:9d:bc:96:ad:d1:69:
8c:85:b6:0d:90:12:3c:79:b3:33:90:a4:59:9f:dc:
23:b0:93:42:69:39:3d:1a:6a:d0:a5:a3:43:b1:81:
45:7c:b0:ed:4b:d1:bf:ca:1b:50:03:04:dd:d4:d3:
a3:81:bc:7c:15:02:9e:22:d4:8a:8a:40:f0:4f:64:
19:85:45:d9:43:67:a7:0e:c6:76:de:73:e6:1f:29:
8a:47:6b:eb:dd:4c:d1:40:58:08:61:0d:96:41:e7:
76:a0:38:38:25:3e:d4:9b:20:77:9e:00:c5:96:bb:
5d:76:9f:df:b7:06:f6:58:85:a0:24:fe:46:0e:7f:
08:3d:c5:85:13:af:d9:79:0e:bd:5e:30:07:d8:b4:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:58:07:40:EF:5A:10:C2:43:12:C2:71:45:CD:77:96:F9:80:6B
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:2e:46:89:80:bc:92:2b:84:f7:72:3b:f9:69:ba:c8:0c:
60:9b:d4:5f:e8:fc:dd:bf:e8:6d:4f:9a:f3:27:8b:ea:1a:6d:
01:c9:bb:58:d0:75:24:6c:13:95:4f:39:b1:a3:72:99:11:6f:
b0:da:a4:4b:50:5d:7e:89:8b:f1:2c:85:bf:4c:37:75:49:4a:
12:96:ff:b3:6c:1d:2d:10:e1:f1:fe:9b:10:7c:d7:4a:f1:a1:
60:aa:6c:b4:c3:5a:91:76:44:f3:da:83:cd:84:8f:3c:1f:8d:
49:6f:b2:3e:83:b7:0c:d9:1d:3d:77:4c:2e:33:31:7b:70:82:
dc:19:0f:be:fb:59:52:8a:b3:59:1f:3b:e0:7c:27:8d:7f:41:
79:81:72:21:10:cc:3e:da:a5:6c:5a:76:2e:d2:28:fb:a6:c8:
7e:49:10:d4:68:d6:e6:dc:67:e8:a9:97:9e:dd:66:45:fc:5b:
54:c9:08:64:37:0f:94:69:99:21:37:af:cf:09:5a:2f:04:14:
11:fb:46:e7:81:53:ae:56:fb:5c:60:b4:c0:d9:be:2a:03:e2:
b8:8c:d3:73:ce:b4:8d:90:e2:31:2a:53:1d:3b:8d:f9:b6:46:
d8:ca:b4:8a:d7:f0:96:69:44:e9:b5:66:e2:2d:8f:27:b6:03:
d5:3c:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:27 2026 by rpki-client