
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: 60gCVX8nwqUtkvAUqacLL/DvvtX+ZV8OQ9hDo/E0a2I=
Subject key identifier: 87:DC:A3:F4:01:56:86:A0:1C:CB:6D:F5:FE:F6:5E:E4:A4:F3:4E:9F
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 0701
Signing time: Tue 22 Sep 2026 21:52:06 +0000
Manifest this update: Tue 22 Sep 2026 21:52:05 +0000
Manifest next update: Tue 29 Sep 2026 21:52:05 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: 3oBo04F8Hc3gnaeLPTA6dNkUJbvpqyUDdfLZ12jM3HM=)
2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: HEumvxRhLmm4XHqnIYgge5GXrN6qJb1ZanXvvpMCGxE=)
3: 0771A364485311F1A9744CF89D833773.roa (hash: nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Sep 22 21:52:05 2026 GMT
Not After : Sep 29 21:52:05 2026 GMT
Subject: CN=6ab2f886-3726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:5c:c9:82:01:b7:52:be:6c:03:d7:45:c1:
d8:6f:6a:85:12:10:31:06:cc:9e:60:e8:7d:04:c6:
82:ed:d2:19:c8:84:d9:63:0d:73:e7:b2:87:74:58:
6c:77:08:ce:ad:fd:dd:20:f6:9d:d4:e1:44:bb:db:
4d:7b:ee:03:2a:f4:96:08:73:be:28:1e:02:6c:e8:
b5:30:78:70:60:51:37:f3:f8:b1:94:1a:22:7f:46:
7b:8f:91:78:e9:51:39:14:4f:bc:02:de:31:3a:2b:
03:55:7a:0c:90:3e:7c:55:37:dc:8f:9b:c9:f6:a8:
9d:14:33:8d:01:7d:4a:71:89:79:58:db:14:50:6d:
c3:ec:5f:64:82:12:53:88:57:b2:a8:2b:32:5e:10:
e9:b2:a4:b3:04:49:08:dd:b2:7a:2c:54:71:2e:e9:
90:f3:17:a3:fa:0c:13:20:81:9a:d9:ac:a2:f6:90:
c1:8c:f1:92:a4:14:f6:87:55:ec:44:e9:f3:61:04:
12:46:b8:32:f9:72:6f:6a:8c:b2:36:44:fc:c8:a1:
f4:b8:0c:41:f4:27:e6:ef:87:5f:9f:02:f3:a1:e0:
c5:4d:4d:63:98:23:ec:ba:b3:ab:72:8c:9b:95:ef:
3a:21:43:b9:49:d5:25:54:32:80:b0:29:39:6f:0c:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DC:A3:F4:01:56:86:A0:1C:CB:6D:F5:FE:F6:5E:E4:A4:F3:4E:9F
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:3d:67:fc:f7:1f:6f:b9:bf:ed:cb:1f:4b:f3:13:a1:41:
92:0e:ab:bc:d9:f6:a6:9c:f8:10:36:3a:74:b7:8b:fc:28:9a:
b0:8a:68:dd:65:c0:52:d6:3f:65:1e:59:47:c1:af:59:6e:61:
d1:1c:4b:7d:48:08:90:ba:5a:ed:25:58:e6:93:5f:03:89:44:
9e:43:72:15:b2:25:03:2b:27:36:aa:4d:40:b9:fb:c7:a5:96:
1b:36:b8:cc:f3:78:61:02:29:fa:bd:94:a7:e7:a3:ce:29:22:
19:be:a3:e0:4b:00:0a:15:65:58:e0:39:5c:1a:0c:ba:77:d3:
56:01:13:b7:82:83:45:ab:12:01:ff:35:ee:98:ef:c4:9e:7f:
46:bf:13:bb:ab:0b:b8:74:1d:b8:d9:76:58:1f:3a:ab:ef:06:
91:2c:f2:e2:af:56:3b:27:bd:84:8b:a7:82:c7:c5:48:5c:41:
81:1e:e0:07:a9:96:9d:4e:61:5f:a4:69:6f:e9:17:8c:e0:28:
71:da:16:0e:8b:1b:34:9e:e5:9a:c6:b1:6d:5d:d3:51:6e:be:
48:d6:bf:b4:8c:09:3f:97:bc:d0:09:1c:cb:45:90:a4:1c:c5:
12:8d:ef:ec:df:66:fe:e4:d5:63:e0:85:29:e0:f4:7e:db:55:
b7:6e:c1:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1
MzIwNzM2NDgwHhcNMjYwOTIyMjE1MjA1WhcNMjYwOTI5MjE1MjA1WjAYMRYwFAYD
VQQDEw02YWIyZjg4Ni0zNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqdcyYIBt1K+bAPXRcHYb2qFEhAxBsyeYOh9BMaC7dIZyITZYw1z57KHdFhs
dwjOrf3dIPad1OFEu9tNe+4DKvSWCHO+KB4CbOi1MHhwYFE38/ixlBoif0Z7j5F4
6VE5FE+8At4xOisDVXoMkD58VTfcj5vJ9qidFDONAX1KcYl5WNsUUG3D7F9kghJT
iFeyqCsyXhDpsqSzBEkI3bJ6LFRxLumQ8xej+gwTIIGa2ayi9pDBjPGSpBT2h1Xs
ROnzYQQSRrgy+XJvaoyyNkT8yKH0uAxB9Cfm74dfnwLzoeDFTU1jmCPsurOrcoyb
le86IUO5SdUlVDKAsCk5bww1VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfco/QB
VoagHMtt9f72XuSk806fMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2
ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj
TWxRZW1PVjFveHhUSUhOa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkS09Z/z3H2+5v+3LH0vzE6FBkg6rvNn2ppz4EDY6dLeL/CiasIpo3WXAUtY/
ZR5ZR8GvWW5h0RxLfUgIkLpa7SVY5pNfA4lEnkNyFbIlAysnNqpNQLn7x6WWGza4
zPN4YQIp+r2Up+ejzikiGb6j4EsAChVlWOA5XBoMunfTVgETt4KDRasSAf817pjv
xJ5/Rr8Tu6sLuHQduNl2WB86q+8GkSzy4q9WOye9hIungsfFSFxBgR7gB6mWnU5h
X6Rpb+kXjOAocdoWDosbNJ7lmsaxbV3TUW6+SNa/tIwJP5e80Akcy0WQpBzFEo3v
7N9m/uTVY+CFKeD0fttVt27BOA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:03:51 2026 by rpki-client