
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: uwW+rQb02xzZi5pP7Jogu7t8D/RKYdb/zhtDhOtJN98=
Subject key identifier: C3:0A:9A:99:14:EF:EC:21:7B:9C:A9:02:8C:87:91:D6:07:92:26:C6
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 051C
Signing time: Fri 18 Sep 2026 23:41:02 +0000
Manifest this update: Fri 18 Sep 2026 23:41:02 +0000
Manifest next update: Fri 25 Sep 2026 23:41:02 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: qC4AIzkBsj4zkYvNOZbRDjO+5dxefDki2gKQ/GDFHIE=)
2: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
3: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
4: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
5: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
6: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
7: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
8: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
9: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
10: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Sep 18 23:41:02 2026 GMT
Not After : Sep 25 23:41:02 2026 GMT
Subject: CN=6aadcc0e-dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:5d:c2:41:35:9a:a0:a6:d2:d4:8a:26:fa:
f9:a7:93:51:18:01:dd:69:cb:ac:68:94:7f:98:fd:
0a:e3:8b:54:93:f2:12:29:30:99:49:7f:3f:c5:cc:
7a:3e:ae:dd:e2:75:ea:5e:df:0e:54:26:dd:da:9a:
23:2e:fe:61:80:5b:36:f9:2e:1b:ad:75:f1:99:d9:
d6:33:5c:e8:d8:9c:ef:f4:78:e5:5c:9c:e8:37:62:
7f:ab:89:3a:10:0e:ce:0e:3b:99:ce:87:22:f8:7e:
b9:22:76:a0:e5:28:c4:dd:8e:3b:8c:41:08:db:48:
94:6f:38:68:bb:43:dc:35:9f:7e:e2:86:91:f7:b9:
50:b3:c4:d1:05:8b:70:9b:61:93:53:01:76:b8:33:
db:7a:bf:0e:b4:4a:e9:5e:f4:4f:e5:9c:c9:d4:36:
56:b0:0f:e7:24:33:67:4c:bc:5c:fc:6f:03:a8:7e:
4a:ef:8f:d1:a1:19:d6:fe:fe:12:48:92:10:fe:9e:
95:e6:5b:e4:28:82:68:ef:cd:af:30:78:67:8a:5d:
4c:26:1d:e4:99:af:48:88:29:e6:ae:73:7c:6b:be:
b0:89:74:39:71:ff:0c:f3:37:9a:7c:3d:ae:c8:c6:
2a:43:55:4c:db:75:e1:e9:da:48:1e:c4:76:e1:1a:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:9A:99:14:EF:EC:21:7B:9C:A9:02:8C:87:91:D6:07:92:26:C6
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:52:f6:e8:1b:a8:bc:d2:3f:20:7b:3c:e6:e9:17:d2:03:64:
16:95:36:e4:92:53:a7:90:95:df:11:95:9e:0e:a7:bb:38:9f:
df:dc:40:70:0a:4f:a0:f7:99:94:4f:a4:05:9f:e8:aa:c0:97:
e9:a3:d3:db:48:15:39:20:11:7a:d8:b6:80:02:a7:91:e9:42:
9c:80:fd:e2:e3:46:18:df:33:a2:96:25:ad:5d:0d:b8:0a:03:
2a:6f:d6:04:c9:27:34:3f:e3:90:39:27:9c:13:ba:7b:76:2e:
77:56:d9:d5:97:77:2e:d0:95:a8:42:90:c9:07:a7:94:a2:fb:
13:04:d7:f5:f8:b9:b9:49:2c:80:5d:97:5f:25:eb:f8:53:60:
59:59:b6:db:3d:09:fc:7d:70:cb:4c:53:4e:9b:e4:d0:fa:eb:
49:e2:6b:08:13:68:ac:3f:ad:5b:dd:9e:cc:6a:c5:3e:45:63:
11:6f:bd:bf:cb:bb:ee:68:6f:5f:35:62:a3:e5:62:e4:6c:64:
98:5e:60:5f:a1:3e:ea:60:ab:72:d1:9a:d1:37:aa:a4:97:12:
f8:59:a3:13:31:1a:d8:65:b1:67:dd:c3:d8:49:3a:c8:a6:98:
0a:94:cb:77:ab:52:2d:b4:4a:d1:2c:cd:f9:9c:9a:87:85:ac:
27:ff:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:20:06 2026 by rpki-client