
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json)
Hash identifier: 8skxZ6NkZQudOi2s3J8VOenuUDg1DVBWQF48bf9fZeA=
Subject key identifier: 81:A2:27:46:9D:BE:ED:AC:F1:AC:04:48:A5:E4:E6:99:59:8F:D4:93
Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Certificate serial: 2727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
Manifest number: 2687
Signing time: Sun 04 Oct 2026 15:42:57 +0000
Manifest this update: Sun 04 Oct 2026 15:42:57 +0000
Manifest next update: Sun 11 Oct 2026 15:42:57 +0000
Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: QmaMS0pD2oWGmnRYEowdYxHdn2usS8VkRXxI5VWN5Ys=)
2: 116C82261B9E11F1BD5D432E033D8C67.roa (hash: 7WrvXgo1QyQdsuH98rmULq0FzYzVfwR0RV0PelNSZEY=)
3: zkBikKUl3lPsbC4a0-eUJ1qbg9M.asa (hash: vXNxplU4nHUvqKIQrYZCV0NYsNxJaY3R+DekKUZs3ew=)
4: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: s5t3nBsHxduiqzrsbiUZU1vBJBYLm9M4BNp5Uh+xDCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10023 (0x2727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Validity
Not Before: Oct 4 15:42:57 2026 GMT
Not After : Oct 11 15:42:57 2026 GMT
Subject: CN=6ac27401-08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:9b:1d:37:06:f4:3d:7c:a6:5c:f4:26:77:
43:e1:80:a7:88:45:7e:a3:34:91:91:f0:a0:e4:d3:
44:3f:d5:50:0e:ae:ef:f3:83:02:ad:d3:38:4f:63:
4a:9b:bc:26:3f:d8:0f:2d:76:4c:cf:98:a9:fd:88:
bc:06:58:01:d6:22:74:b0:6f:cf:17:2e:4a:5f:a2:
fc:be:93:70:60:79:b7:7e:15:3d:4c:1e:35:6a:53:
6b:93:82:b9:6b:23:d4:ed:d1:ad:f5:3a:a3:5c:a8:
c8:81:ee:6c:6c:8d:1f:4e:b3:52:e4:ad:87:e1:1c:
f3:3f:71:cd:2d:e8:73:cf:3a:e4:30:49:8c:7f:e1:
6f:96:68:a3:74:22:9b:6b:cb:f6:35:36:0e:e7:a1:
1a:75:8e:fb:71:c5:61:43:fb:51:4d:7e:08:ae:6e:
02:78:38:6c:de:af:be:39:bf:ce:82:ce:1c:22:cb:
97:9a:98:9a:65:f7:9e:0e:dd:ad:21:4e:a7:2b:12:
03:0b:82:e7:53:26:a1:63:9a:df:92:ea:61:bd:1e:
bd:2c:a6:31:b9:0f:ec:9b:e2:be:72:d8:cf:9c:fd:
3a:89:56:24:32:cc:d3:5e:76:09:0f:86:2c:0f:73:
1d:0e:f5:87:8f:ab:ab:e2:3c:12:de:8c:12:57:f7:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:27:46:9D:BE:ED:AC:F1:AC:04:48:A5:E4:E6:99:59:8F:D4:93
X509v3 Authority Key Identifier:
keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:48:4a:67:48:97:07:9e:be:dd:0c:e0:39:3c:bf:75:38:
e6:ea:24:62:60:ce:ce:47:20:69:8e:9f:52:7c:e4:67:6a:08:
1f:10:70:65:b5:fa:f7:34:30:2f:53:e5:9a:85:1b:f1:16:4c:
58:d4:5e:95:db:bb:b3:18:f2:e4:63:8f:6b:3e:43:73:08:84:
f2:8e:e6:dd:21:18:6d:8f:1f:e9:66:a1:ab:71:5a:32:71:75:
66:15:a2:01:56:8b:71:0e:59:9f:23:d1:36:49:bb:d4:8a:e1:
8a:cf:12:ea:36:aa:d8:62:3e:18:98:be:b7:86:6e:f3:f7:38:
bc:4c:71:cf:9c:c3:80:32:2b:57:e5:0d:7b:5d:59:86:9d:f8:
9e:d0:e2:f0:c3:62:ff:3b:5b:9a:db:ba:96:5d:aa:c2:55:61:
23:ba:d6:90:40:cf:53:2f:12:97:fb:ef:30:b0:57:35:96:24:
98:11:7f:c7:60:f3:6d:66:6c:56:e1:42:c7:97:bb:19:d0:9b:
b9:15:30:fb:48:75:7c:78:54:d5:7b:81:3b:3e:63:28:d8:db:
27:be:fc:97:ef:82:ea:f9:d1:59:90:56:0d:d8:7a:99:5b:41:
41:da:3b:a5:52:29:b8:2e:ad:c2:f0:4e:01:6c:4c:2e:7b:8d:
7c:a5:60:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:18:07 2026 by rpki-client