
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: BykPP56SjNMqKLG3cJclhQzBEv9quGloAh9toWkP/oI=
Subject key identifier: 86:89:0A:A9:A5:02:3E:53:2C:45:9F:FA:9D:C0:9D:02:A9:DB:94:50
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 0A8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 0A81
Signing time: Mon 28 Sep 2026 19:44:29 +0000
Manifest this update: Mon 28 Sep 2026 19:44:28 +0000
Manifest next update: Mon 05 Oct 2026 19:44:28 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: kDXSlK6S6++DacH7Dz5Q4qWkTnNOlW2IoKu4gZNzdkY=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: Sep 28 19:44:28 2026 GMT
Not After : Oct 5 19:44:28 2026 GMT
Subject: CN=6abac39d-f7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:4e:8f:28:e9:96:26:b4:d5:a5:b9:46:5b:
d4:8d:c8:70:5f:c5:c8:1b:a6:4d:95:f0:58:6c:59:
67:fd:28:04:e7:98:99:f5:b0:a4:6c:a7:d0:17:67:
45:bd:99:09:ea:86:fc:5e:7a:46:1d:ec:98:dc:80:
8f:aa:34:55:3d:05:ef:e1:a6:1d:89:ee:40:99:a9:
f8:f3:8e:3f:5c:d9:c9:15:7c:cc:2e:c5:e8:92:60:
4b:d1:1c:b3:7e:2a:10:62:de:1d:bd:3c:b6:6d:a0:
49:0d:31:87:0e:b7:9d:47:e7:a7:dc:6b:df:20:b9:
d0:eb:20:74:0f:da:f9:a4:d2:66:7b:44:32:ca:af:
0c:d6:5d:8d:09:e3:89:ee:50:f1:3b:4a:9d:ee:ac:
b4:fb:94:67:ac:34:09:07:2c:f4:1b:ca:b3:78:1b:
01:f0:90:42:f8:67:da:a4:4f:1a:01:59:b3:81:b5:
e7:f1:0f:f3:a8:32:cf:3b:47:d4:92:fe:f5:d1:51:
d7:84:09:1a:3e:bf:dd:84:8a:4e:f1:b2:5f:21:ba:
e9:99:18:4e:26:2b:69:87:28:e3:6c:72:00:da:80:
bc:ca:a3:96:57:f8:8f:26:50:9b:13:99:b1:7a:7d:
d3:dc:91:2e:ce:66:ff:3a:f3:e2:76:82:61:79:9b:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:0A:A9:A5:02:3E:53:2C:45:9F:FA:9D:C0:9D:02:A9:DB:94:50
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:1c:4a:23:ee:e7:42:c4:c7:9b:16:33:d0:0b:02:04:42:
3c:a0:c8:83:ba:a2:48:3f:0e:4f:05:df:1f:6b:fe:b9:76:c8:
82:f3:f5:7d:3b:56:e9:31:9d:2b:cd:6e:d6:05:9a:36:82:7e:
cb:99:ae:79:67:16:c8:8e:02:3f:e4:66:1e:8f:4c:e6:e5:ea:
cc:26:66:22:0c:e7:04:16:c2:aa:e1:de:35:78:63:eb:03:dc:
3e:32:c9:c2:95:1b:d7:01:0e:85:65:2f:7d:f9:17:a3:49:c0:
ae:59:b7:27:7e:87:a8:8e:18:bd:6d:5f:47:a5:71:72:c8:2f:
5c:40:af:a7:22:90:06:ae:6a:3e:d6:a1:9d:e7:12:29:27:35:
2c:10:e6:a3:b7:5f:11:c0:9a:e5:bf:2a:21:76:ed:37:80:2d:
15:19:55:46:28:0c:5b:34:11:18:dc:74:fc:09:17:56:b3:a3:
47:9f:c7:cc:8f:1d:2b:b0:b4:de:d0:77:fa:8b:48:12:94:8f:
26:c3:eb:32:58:f1:db:7b:a5:87:88:f1:fc:81:8c:87:e6:7b:
e2:5e:78:7e:9f:a8:d6:ac:92:4e:d2:bc:aa:51:9a:a2:a9:c9:
38:82:d7:de:f0:b4:e5:0c:a6:54:35:94:44:10:12:a6:7e:54:
34:2a:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:53 2026 by rpki-client