
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier: gpC7hAf2edRycqfilgq3hSUpg+U05TAOVnJj/LaEZTQ=
Subject key identifier: 59:72:2B:20:26:CB:0F:54:79:D7:7E:F5:D0:1D:65:BC:AA:42:FF:50
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number: 0250
Signing time: Mon 05 Oct 2026 02:39:18 +0000
Manifest this update: Mon 05 Oct 2026 02:39:18 +0000
Manifest next update: Mon 12 Oct 2026 02:39:18 +0000
Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: vvjCkaWaKZAItk0eFc7ovG76jxzmekdX1VFdLnVH86I=)
2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: BxtL83tYOEgwdvm5ewAz5h17E04Qc/+7wTXEc1+Sc2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Validity
Not Before: Oct 5 02:39:18 2026 GMT
Not After : Oct 12 02:39:18 2026 GMT
Subject: CN=6ac30dd6-a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:0b:77:6b:27:bf:66:e3:a4:e2:4a:9b:cb:
d1:a8:0c:7b:60:10:f5:07:dd:51:52:fa:fa:bd:03:
08:91:3c:c8:fc:9e:8b:5c:a5:da:c1:81:65:e1:45:
0d:b6:18:6c:7c:d0:64:1e:d6:c1:b4:a1:32:ec:10:
67:69:5e:a7:43:c6:ac:e2:68:29:6e:4e:d8:70:4f:
2e:db:f2:4b:80:35:77:c2:b3:56:b4:ff:c0:2b:1f:
4a:55:4d:17:e4:4a:f2:31:02:37:e9:b7:67:17:c1:
a9:c4:62:f4:f0:43:6d:05:ea:85:a5:f2:d8:06:27:
4e:17:88:bb:77:98:f5:fa:f5:5f:e8:51:9a:26:57:
e9:fd:cb:e7:9e:bb:41:93:86:d9:16:d3:e7:dd:9a:
a4:51:c4:17:45:03:53:35:f2:4b:db:8d:97:1a:a4:
4c:dc:92:a0:3c:ed:66:c9:8d:ab:0a:94:22:40:63:
98:1b:23:a1:f1:12:7f:9d:bc:47:93:c6:79:81:27:
98:92:dc:e8:85:e1:30:6e:2e:a7:90:2e:34:75:22:
b6:12:03:fa:db:84:74:56:45:a5:04:56:b6:b5:d5:
ca:88:9b:16:04:18:19:d3:cb:a0:b9:ab:47:0a:54:
07:65:18:76:13:cb:a6:37:a2:b6:67:9d:a1:6c:92:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:2B:20:26:CB:0F:54:79:D7:7E:F5:D0:1D:65:BC:AA:42:FF:50
X509v3 Authority Key Identifier:
keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:06:71:6f:f8:36:00:a5:ee:70:c2:4f:18:34:c5:a0:2d:8d:
26:a5:e9:a2:ac:d6:c0:73:37:01:56:29:d7:e0:09:4c:d5:da:
79:3b:3b:82:c7:58:cc:2b:20:24:83:67:32:e2:b1:90:e2:85:
5b:c6:9f:08:99:f5:9e:5d:eb:2b:1a:d8:e0:6a:7a:bc:46:c2:
cd:58:54:07:41:88:42:02:06:3a:98:60:80:cc:a8:3d:09:14:
72:03:86:1e:31:5a:92:91:36:df:04:43:0e:4a:b5:1a:d5:ae:
dc:db:75:8c:86:14:90:02:dc:5c:bb:43:95:4c:4f:d5:83:c5:
2f:c6:6a:9e:b7:9d:51:96:c3:91:a3:68:6e:38:a9:44:57:c5:
a6:4c:9f:b7:29:f1:ab:ea:07:0c:09:3f:d4:74:2d:97:72:36:
9c:9e:7d:0a:f4:0e:21:5d:5e:49:b3:bf:c0:e7:91:ed:e5:e4:
5a:6c:98:24:c3:f2:de:35:25:f7:f8:57:0c:98:70:f4:65:e8:
86:dd:aa:aa:f0:73:65:5f:3d:ea:f8:5e:ac:9c:df:86:a1:30:
02:a1:5d:8a:d0:7d:c2:37:9f:67:a5:d2:b7:c8:52:19:3d:d7:
31:58:2b:40:29:64:ac:4b:44:13:6e:b6:e7:ed:59:cd:a4:e5:
f0:d6:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:54:45 2026 by rpki-client