
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: /xMPta1xwKhC9iA8dQaaK+agrc55oJBcmkc7OnTuIrI=
Subject key identifier: E6:59:05:55:2D:33:1F:2D:4C:96:2B:F9:A9:AB:42:B5:9B:FA:1D:77
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 0229
Signing time: Sun 27 Sep 2026 03:06:27 +0000
Manifest this update: Sun 27 Sep 2026 03:06:26 +0000
Manifest next update: Sun 04 Oct 2026 03:06:26 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: Scnvr7tQZC2qPvaNhaaAKUSgevjeLFX9/4HB5QBL17s=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uvnuFfPHDz8klL7miM6941+tnPJCsl1Yqm1R/ZCMe6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: Sep 27 03:06:26 2026 GMT
Not After : Oct 4 03:06:26 2026 GMT
Subject: CN=6ab88833-d764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:71:cf:ca:55:90:b3:0d:3d:de:16:4d:42:
5b:aa:d5:fa:40:f7:6a:04:ed:b9:ef:e1:63:50:05:
00:e6:0a:86:47:35:30:cb:1b:60:2d:8c:2e:89:09:
09:26:cf:60:e4:07:4a:69:8c:b8:c9:6b:ba:3d:7a:
e3:82:66:6d:a2:e1:53:af:33:4b:51:6c:e5:1b:83:
51:fa:b8:78:c4:0b:be:6f:80:83:79:38:01:77:33:
7a:d2:05:90:3c:15:30:85:15:fb:c7:72:4f:e1:41:
da:03:cf:64:45:70:4f:be:6c:13:bc:10:58:55:40:
22:23:99:41:e4:a9:f9:c1:d8:95:f9:af:7c:33:48:
3d:e8:ef:5f:1e:91:b8:51:af:e5:51:5f:cf:8b:89:
27:71:5c:a3:9b:c7:63:46:98:9c:de:f1:e0:83:fe:
a9:dc:54:26:a5:5b:25:ce:7e:b2:e6:5f:7d:83:98:
29:57:e4:7a:1c:e6:e7:ed:a2:a6:7f:fd:67:43:dd:
36:df:e3:ff:8a:a7:16:dd:67:77:43:4c:f1:45:56:
04:44:f8:06:46:a9:cf:0d:77:c2:fc:cc:04:5f:66:
86:9b:d8:0a:10:99:54:0c:2c:ee:3c:e2:cd:4c:3e:
2e:92:ea:95:b7:7c:62:fb:43:8f:17:d8:e4:5f:50:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:05:55:2D:33:1F:2D:4C:96:2B:F9:A9:AB:42:B5:9B:FA:1D:77
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:23:66:7d:60:70:3b:46:90:9f:6d:9b:a8:bf:a0:48:29:1f:
f6:4b:c4:36:c6:1c:5f:c8:e4:5f:10:ce:e9:6e:ef:78:8e:2b:
f4:36:32:f6:4f:25:be:0c:36:bc:af:cc:ad:c0:ae:c8:81:6a:
7a:cf:a3:44:d0:9a:23:9d:ea:2c:06:bd:2b:fd:45:6f:58:7d:
de:bb:0d:33:9e:8d:74:1e:93:0c:e8:4f:66:0c:77:24:b1:81:
99:a1:d8:a4:b6:8c:e9:90:40:e2:36:7a:06:fe:21:8c:f1:45:
00:8c:34:ff:f1:ac:1a:20:30:a3:29:c5:01:10:67:ae:d8:dd:
23:28:e0:ea:ab:a2:48:5b:a4:f4:3f:c2:01:12:79:be:f7:80:
ba:84:44:bb:6f:90:6a:74:b5:e5:eb:2b:e9:c1:4a:b2:3d:45:
f3:5e:ad:26:ed:d7:46:41:45:21:55:d7:6e:4e:af:f5:46:f9:
60:1c:31:a5:62:a1:2b:c6:26:90:da:93:19:14:71:0a:36:34:
5a:aa:54:0f:c0:d7:db:86:59:75:a3:f5:f8:55:38:4a:f1:68:
5e:07:0a:a1:4a:3b:c2:7c:16:eb:7f:ee:c4:4c:71:bf:4f:5a:
96:bf:74:b5:a2:fa:bb:9c:49:bf:3c:8b:da:21:ee:f4:de:0b:
59:51:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:33:20 2026 by rpki-client