
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: N7w8siBAb5E/3e0I+X8oljFCer7UOYXhfwoUJrB2vyY=
Subject key identifier: F9:EA:F5:9A:36:D7:04:4A:13:0D:9B:B0:5A:AD:E6:A7:B9:AB:C5:1B
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: AF
Signing time: Wed 23 Sep 2026 06:53:15 +0000
Manifest this update: Wed 23 Sep 2026 06:53:14 +0000
Manifest next update: Wed 30 Sep 2026 06:53:14 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: 97gw9lQEbySawr6eJj9ghFZH9KsooZnL2Rko1kFBUXk=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: JKJHFFpKhMqZKta0zHh97l6PnllD0+iW/lc7gyj9EKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Sep 23 06:53:14 2026 GMT
Not After : Sep 30 06:53:14 2026 GMT
Subject: CN=6ab3775b-27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:50:02:48:18:fe:5e:16:b6:75:bc:8d:db:
ab:6b:c3:24:67:ff:e5:10:3a:c2:63:80:6a:9f:46:
8d:59:c7:e1:35:c2:35:66:d1:29:8e:4b:02:14:22:
d8:a9:ec:79:6d:a7:a1:db:a8:cc:28:37:e7:2b:05:
91:0a:7c:a6:67:9d:2d:c3:79:38:71:c7:05:b8:ff:
a8:6d:7d:c5:74:7b:65:c8:da:eb:dc:4b:51:54:c3:
26:fd:0d:bb:c0:b1:32:a9:53:68:ee:d5:e3:fe:b8:
a4:05:bd:2d:84:d5:7c:cf:e3:c9:73:9e:0c:13:e2:
ab:d7:e0:c5:da:40:33:0f:63:69:f9:39:d0:3e:c9:
81:81:c8:23:cc:a1:0e:b6:4d:34:b1:81:6b:2f:ec:
20:f0:78:a2:e6:44:57:ce:15:41:5d:01:e4:9e:f8:
3f:3b:81:40:66:00:30:0e:5d:38:7f:8e:13:f1:54:
e2:85:58:dd:2f:ac:f9:f3:32:a8:48:77:7e:70:27:
81:68:ca:26:a6:17:6d:6f:68:2b:aa:03:3e:b5:71:
fa:81:6b:4c:a0:fa:33:6b:53:e5:0d:7b:c1:b4:b5:
6d:98:a8:9e:c1:35:0e:3c:3d:f0:d0:1c:07:25:ac:
d7:fa:24:3a:cc:1d:cf:3f:f3:59:0f:65:6d:35:c7:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:F5:9A:36:D7:04:4A:13:0D:9B:B0:5A:AD:E6:A7:B9:AB:C5:1B
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:c3:0a:ff:d8:81:55:e4:ed:60:d8:73:0a:a0:38:9c:48:
f3:15:7d:e0:14:b9:05:48:cf:b2:7c:4b:1c:03:d5:e3:d6:7d:
87:e4:23:3c:20:14:e8:7b:c5:5f:a3:f1:3e:35:34:7c:30:34:
f6:0b:d5:f1:74:32:99:88:af:cf:a5:51:19:82:19:12:07:0d:
7b:80:45:ca:07:b2:da:14:a9:a7:e1:54:56:fe:31:49:0d:1b:
19:5b:aa:d2:c6:10:66:6a:2e:69:b0:49:86:07:ad:dc:dc:4c:
5a:ab:a3:74:3b:9b:94:0f:f3:9c:28:aa:b0:1f:4f:15:e3:60:
02:39:58:76:f5:21:76:49:d9:48:c3:36:0b:79:be:81:4d:96:
d8:5e:16:42:55:02:07:f1:12:89:f8:a5:65:ba:f0:12:07:37:
69:56:c0:e5:fc:36:7b:89:b2:40:93:c1:29:ec:cc:b0:a3:e3:
49:49:51:4d:95:08:25:d3:03:d3:57:2c:91:1a:a3:32:57:0b:
d5:2f:91:84:97:d7:26:7f:a9:c5:ef:af:07:f9:34:65:3e:3f:
59:e1:91:7b:e5:c4:d6:07:07:07:84:2f:e6:49:61:6a:e4:3c:
f3:24:69:f9:f4:51:45:86:bc:12:2d:f2:33:80:40:07:b5:00:
5c:68:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:11 2026 by rpki-client