
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: tCZePyOYlAFmahGwutRIInAwScBSvyoEJVaQnK3nG+s=
Subject key identifier: 8B:96:06:0B:16:8E:53:8F:C0:D7:D3:CE:E0:A6:1A:BB:43:43:6F:0A
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 0260
Signing time: Wed 23 Sep 2026 02:23:17 +0000
Manifest this update: Wed 23 Sep 2026 02:23:17 +0000
Manifest next update: Wed 30 Sep 2026 02:23:17 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: DNZ28Vo0R/3B8tmJPHgTaz9pTzp9DQVAeu9NmGRXnGA=)
2: 33A6923A5FF211F1A6FEF4E07C47A888.roa (hash: fEjt+6tuQF9PeQS8T6j6inMv06NeHodZot88n+pL2WI=)
3: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4frxygrIFh7Y+rXGxz8LtjS0GjPhlQB8SSCF8zDQdkw=)
4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: f4VcaiBvVbV4voltwiUU/yymYJQXCHVhkFgjZ9diLy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Sep 23 02:23:17 2026 GMT
Not After : Sep 30 02:23:17 2026 GMT
Subject: CN=6ab33815-53e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e0:80:91:3c:2e:8d:5e:12:01:52:0f:42:26:
01:65:ac:0a:e7:87:f2:03:e3:17:00:95:28:71:6a:
7c:f3:8b:d1:91:b4:87:21:6f:1b:cd:66:29:f8:70:
6c:e4:72:77:a0:62:62:6e:f4:ec:fe:f0:88:4c:13:
ad:5a:4a:84:f4:fd:f5:c8:3a:a6:7c:9c:53:d4:8b:
e4:af:5b:50:04:cf:7b:9f:c9:61:95:4a:57:43:3e:
87:40:8e:08:54:9d:ab:3e:99:59:34:87:83:59:f2:
71:02:78:60:e7:23:e4:01:7f:c9:bf:68:f9:9c:ce:
a3:f2:85:9f:ac:47:55:a4:fe:e8:58:c3:78:5b:d2:
af:4b:33:7c:e1:ad:68:3f:af:71:c0:07:f1:62:ed:
7b:84:a6:93:6f:bb:99:48:be:23:d9:c9:2e:1a:67:
fd:ca:97:cd:04:27:15:7a:1b:06:cb:c2:03:7b:48:
3c:c8:3e:7c:33:8c:65:4f:c5:ab:be:5e:a3:ef:30:
a9:94:e5:18:81:68:4a:b5:51:26:e2:93:7e:8b:85:
b8:0f:b7:45:f5:36:35:83:38:fb:8d:a2:2d:ff:aa:
25:ff:cf:e4:96:74:26:cc:04:40:96:c7:83:19:15:
37:50:3a:38:a5:6a:78:5b:e1:39:66:f6:94:fe:44:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:06:0B:16:8E:53:8F:C0:D7:D3:CE:E0:A6:1A:BB:43:43:6F:0A
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:ce:c5:92:30:a5:8b:61:54:20:30:be:56:93:d4:d4:e5:
38:0c:a0:e5:ff:9a:e1:a1:ac:27:a6:6b:7f:1f:ba:07:b0:89:
b0:17:77:02:db:fa:71:0d:e5:76:dd:a6:ce:ac:ed:13:e7:5e:
ec:b4:93:18:1b:9b:15:2b:a2:79:66:87:82:67:8c:20:43:f6:
56:b3:8d:a5:d4:75:e0:b4:19:fd:64:29:0d:55:4e:92:91:1f:
fa:6c:35:a4:e9:05:af:69:8b:0c:a1:81:a8:89:79:62:2a:40:
b4:ad:39:0a:fb:87:41:44:42:36:ca:8d:27:96:00:fa:ae:93:
0a:45:84:ab:97:57:e6:a6:f3:79:8b:69:14:9c:b8:4a:59:37:
2b:fa:0e:90:74:58:b6:f1:0d:63:f4:a0:ad:79:1e:85:56:2d:
80:9e:ed:10:d5:ee:da:12:11:51:68:28:aa:dd:8e:a6:2d:3d:
4c:d0:c4:72:d6:53:79:a1:a2:8a:11:74:be:37:18:77:8b:e1:
31:5b:a2:4d:4e:48:d0:9b:e6:0f:e7:38:82:ea:86:fa:c1:4d:
cb:a0:a8:15:09:ae:d8:9f:77:e1:4b:94:e6:28:4e:f5:85:d6:
79:5a:c7:fd:be:77:2b:ee:03:65:5e:f1:f7:16:3e:78:42:41:
2e:da:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:35:51 2026 by rpki-client