
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier: WU27dwsVFU3nsSHFSeAyD+A/ZyXpEHi6pAY0gxmPZqQ=
Subject key identifier: 67:D4:95:BB:1A:E2:D9:35:EB:B5:2E:06:53:7C:E0:0F:6B:67:29:AA
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial: 06DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number: 06D2
Signing time: Thu 24 Sep 2026 22:11:32 +0000
Manifest this update: Thu 24 Sep 2026 22:11:32 +0000
Manifest next update: Thu 01 Oct 2026 22:11:32 +0000
Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: ABmGVBgxCk3PioC1peYToSslWa7VgDlvZzQGb9+lxdU=)
2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: DJIDF3gVsj0NLJmqdA6q7kn8knSL/aei6xR0vVpba4c=)
3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: ElSqHATQah1AYmHedSqCrSlQMzAoiWYC3nFcEAi0qso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Validity
Not Before: Sep 24 22:11:32 2026 GMT
Not After : Oct 1 22:11:32 2026 GMT
Subject: CN=6ab5a014-3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:39:d0:6c:4a:25:15:99:42:c9:e0:8a:a9:
67:21:cf:4e:c9:ee:46:5b:61:be:4a:53:71:40:b7:
e0:94:be:aa:5b:eb:08:b0:05:c6:46:37:41:c8:e8:
f7:af:47:8a:4f:12:df:33:1c:44:6c:8a:83:41:d4:
11:b6:52:d9:e2:30:55:f5:e6:14:ce:44:a9:82:65:
71:69:e2:75:e2:1f:b0:77:45:a2:31:fd:79:3f:7c:
21:a1:19:b6:7d:a2:71:79:11:a3:9c:2d:e2:c9:09:
ae:1f:9e:eb:3e:08:e5:30:5a:7c:c5:4b:1e:f9:df:
4f:e5:00:a3:c0:99:55:0c:c5:65:7e:fe:b3:fe:a4:
b6:1b:d4:0c:a0:ac:1c:6f:5d:02:4f:a9:1f:39:a7:
82:13:3a:cc:3a:af:68:22:d5:a9:6d:86:ff:67:c3:
cf:c4:66:bc:83:03:c5:08:57:00:e0:81:88:cd:de:
18:f0:c6:99:26:f2:89:4a:66:2e:3b:36:aa:a9:0e:
5e:6b:63:b2:df:ec:fb:b0:55:ce:4d:e2:28:04:97:
8d:45:45:dc:8b:1a:f9:ba:d7:1d:ce:47:93:b0:b5:
02:3f:96:1b:27:56:45:e5:07:80:a8:c3:de:ee:a9:
99:eb:54:27:0f:64:b2:6a:ef:79:32:f0:65:9e:12:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:95:BB:1A:E2:D9:35:EB:B5:2E:06:53:7C:E0:0F:6B:67:29:AA
X509v3 Authority Key Identifier:
keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:28:2b:d7:b1:60:0c:34:91:27:1e:36:ec:eb:c5:ef:f9:
a4:80:e8:9b:93:96:6d:86:26:6d:ec:ed:f7:19:2d:c3:4c:94:
c1:10:9f:33:8b:0d:ff:66:92:15:02:9e:3e:95:93:0f:11:e0:
e6:18:b8:ed:9a:d5:d8:fd:ae:0b:b5:c9:7d:a8:55:85:3f:b1:
be:7d:fa:78:aa:13:79:6c:3e:7c:ec:3a:d2:cb:85:74:2c:fc:
70:4a:74:98:3f:d5:3a:9e:ef:85:2f:a5:41:08:8a:e4:2f:85:
1a:2c:d9:fd:c5:05:ab:2a:06:a7:0e:7a:3e:2b:a8:f2:d7:00:
98:f1:30:1a:2b:35:46:39:f3:93:63:e3:22:ad:43:5c:69:7d:
97:b3:52:6c:fb:8d:c1:f4:38:1e:f1:59:4a:2b:56:4c:05:28:
10:e7:b2:f2:de:06:98:a2:83:17:91:79:1b:03:24:bd:b0:79:
35:be:26:1d:3a:95:ba:52:96:a4:6d:29:bd:24:32:b2:45:67:
ac:f8:aa:3d:22:7a:d2:9f:38:fd:89:c2:51:59:87:67:89:30:
0a:3c:12:da:35:02:2c:50:94:b3:2a:f5:5b:4b:bb:a1:e5:f5:
59:5d:99:28:35:d0:e2:2c:1d:d4:24:3b:05:cb:9e:a4:63:ee:
a1:84:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:19 2026 by rpki-client