
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier: C3PLAYE+wRMimTkMWufV8J6iSfHJng4FSlzStT+WWeg=
Subject key identifier: 07:23:05:D8:FC:2E:C5:DD:AC:AA:E7:86:EF:CF:54:57:84:F4:58:C8
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0EB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number: 0E6B
Signing time: Sat 26 Sep 2026 17:51:44 +0000
Manifest this update: Sat 26 Sep 2026 17:51:43 +0000
Manifest next update: Sat 03 Oct 2026 17:51:43 +0000
Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: IUmoS9bUiTZE5KR9lFx9gZrLBebnrKPd5CKRBo8wgPs=)
2: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: njqCophIvGbWqZOEZO7iH5P4olbdrXCLsypP82DCs2Q=)
3: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: OMljntVkgQs+vfOk+Rb1tcPgapnLq21/6pFdv7k+86s=)
4: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: MqeW/D/8P52Csk263/GYlr8+c8ERIR8aUwn81bPGMe4=)
5: CDA4E0082E6511F19AB402C39E833773.roa (hash: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=)
6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: vICYDNS9kD2vGmiU8XjONZtvToD23t4bowNaFlpgJxM=)
7: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3761 (0xeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Sep 26 17:51:43 2026 GMT
Not After : Oct 3 17:51:43 2026 GMT
Subject: CN=6ab8062f-afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:eb:ac:0c:6b:a0:fa:75:d1:d3:82:55:89:
a1:c7:c6:e2:62:73:d9:33:a8:dd:d4:37:16:1c:cb:
b6:b8:90:43:e1:c2:32:9b:ac:f7:c0:0c:83:e3:f3:
23:0b:d2:27:8d:8a:cb:4e:12:a7:66:a1:04:a6:01:
b1:78:9d:61:f0:fb:a9:17:dd:78:e4:2c:c0:00:a9:
33:28:f2:ba:af:a4:23:cc:18:14:1d:cd:33:ed:a9:
e5:32:54:6f:32:80:13:79:69:5e:63:ce:7e:d4:92:
40:77:84:14:3b:93:3c:bf:80:68:11:ca:17:79:19:
62:c5:28:08:e6:fc:50:92:58:b2:3f:7a:dd:93:50:
b2:77:95:02:c6:77:23:7b:66:04:08:aa:22:c1:3a:
f9:4d:32:33:cb:51:c3:2d:09:eb:d0:a9:5f:f9:fa:
64:73:d8:0e:64:a7:6e:95:18:96:74:f2:a5:10:8f:
73:50:7e:4a:57:55:87:12:dc:5b:60:64:91:d8:55:
0e:07:12:47:0c:85:40:15:c2:6b:9a:71:3a:86:47:
49:4d:f5:0b:3d:c7:fd:d5:4b:27:a5:8f:d2:bf:fb:
0d:81:f0:8e:df:32:32:7c:3c:81:84:b8:8f:e3:11:
dc:9a:2c:c9:a1:f2:e4:8d:fb:4e:54:21:ac:89:88:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:05:D8:FC:2E:C5:DD:AC:AA:E7:86:EF:CF:54:57:84:F4:58:C8
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a0:99:5b:8b:20:3a:21:b0:5a:31:64:5f:76:fd:ab:25:79:
77:0a:13:89:59:37:4c:5b:0d:f5:5b:a7:d1:9e:cc:f5:91:b7:
03:e6:73:95:22:e3:91:f7:99:72:bd:97:d5:9b:0b:24:7c:a5:
33:52:91:d5:23:c0:6b:02:0a:42:57:08:45:ab:d7:34:31:2e:
c7:96:db:77:4e:4f:d3:5b:b4:6e:a5:c3:ff:f6:cd:5a:91:cd:
2c:a9:96:d7:08:59:0c:06:eb:66:f0:7a:c9:d1:6d:22:d1:a2:
c0:92:81:2f:7c:d6:bd:f2:80:5c:d1:c0:96:8f:c7:55:fc:51:
9e:9e:a4:44:c7:2e:f0:85:ac:77:77:37:70:84:be:55:80:89:
0b:79:06:c4:d0:aa:de:e3:37:12:92:24:a9:ab:4d:10:fe:20:
4b:8c:d6:0f:59:9f:16:69:36:f1:c9:82:9e:9b:58:b5:de:db:
fe:30:bf:dc:0c:19:38:b6:ad:5e:90:6f:79:13:17:de:a4:3c:
1c:d7:6b:bb:04:14:d7:26:7c:5c:b5:f0:00:96:8f:65:8e:86:
97:6b:21:37:33:b1:f4:92:95:67:30:5d:78:7b:48:1b:1c:98:
b8:1a:0a:cd:7a:2a:67:35:16:d9:03:ec:44:ff:65:d0:53:dc:
27:50:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:16:53 2026 by rpki-client