
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: /fyBg+NhXcvj+mCRznMFuvvO4Sh3+DyLcZQLqKvL0BM=
Subject key identifier: 47:E8:D7:EC:18:54:47:8B:7B:13:F0:A0:EC:62:1E:0A:75:23:CB:E2
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: 0103
Signing time: Mon 21 Sep 2026 06:12:02 +0000
Manifest this update: Mon 21 Sep 2026 06:12:01 +0000
Manifest next update: Mon 28 Sep 2026 06:12:01 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: MXq8+1o0VPi4ijp2rPKRg9eGG5+8gPZnEC42w5BiP8c=)
2: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: dQ05E6d0ZKkbsdzwglFucEgCK8PC9KMabloxf5330uY=)
3: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: jjrrlGj2vws5FjbyiAObAcIkHb9zzPLpvEiKO7QygM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Sep 21 06:12:01 2026 GMT
Not After : Sep 28 06:12:01 2026 GMT
Subject: CN=6ab0cab2-ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:2e:9b:d1:be:f6:19:08:bb:49:89:f3:37:
64:e8:95:81:d8:51:59:cf:14:9f:8c:bb:37:ec:37:
1e:4e:c7:d2:31:aa:bd:24:ec:fb:67:63:7d:65:d9:
30:e5:03:d1:c6:cf:84:a0:14:df:24:f3:9d:9e:fc:
ac:2c:9f:54:f7:89:f0:76:92:5b:91:00:3f:c1:3d:
08:d6:4a:70:8f:bf:50:55:8a:86:e8:69:f2:a5:bb:
a0:76:b3:ad:a6:5c:3b:a3:8e:ea:75:9c:2d:ae:2b:
c9:30:1d:22:d4:a5:e3:39:12:3a:29:72:2a:ea:87:
92:b1:01:7b:0a:4d:36:db:06:4d:3e:f3:36:6f:bb:
da:08:4d:a1:ea:bf:b5:58:87:c1:92:6a:bd:25:b2:
c8:39:27:e6:e7:c7:b9:ee:ac:90:51:d3:09:fa:73:
ab:3c:28:72:bb:cf:45:7f:79:d0:97:43:e3:4a:83:
13:bb:c2:63:7e:08:c6:0a:08:bc:90:43:c3:cc:43:
9a:f7:23:6b:28:b8:f3:f1:7d:f9:fc:06:44:48:be:
1f:71:18:07:2a:37:be:c4:9d:7f:04:ab:77:19:bf:
60:35:ce:e0:d5:0d:bf:46:eb:fd:68:21:33:c6:06:
f3:b9:a3:9a:8a:fb:e6:67:5c:bd:2a:7f:8b:4e:bf:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:D7:EC:18:54:47:8B:7B:13:F0:A0:EC:62:1E:0A:75:23:CB:E2
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:61:ca:d3:61:a3:dc:55:00:ef:23:b3:d3:fa:db:8a:ef:
b9:68:69:ab:a6:d8:2f:ba:a6:0d:10:75:66:13:e5:f4:cc:61:
d2:8a:91:75:25:f0:68:5e:b2:f1:b2:fc:55:8e:9a:59:51:86:
00:d6:48:8c:cb:6e:ba:60:58:b7:91:2b:b7:e0:95:0e:da:10:
dd:f5:1d:92:9f:10:f4:77:b5:c0:44:46:37:51:9a:58:b5:a9:
7c:e2:59:69:c6:84:28:5b:90:98:fb:ae:18:ac:05:15:c1:b0:
3a:a7:6d:1e:3e:45:1f:15:03:eb:42:47:5d:50:a7:6c:1d:d9:
2b:ca:d9:b8:5e:ed:ae:31:ac:9a:f3:02:ed:cb:7d:7b:40:3e:
4d:49:06:2d:41:44:fc:59:08:51:41:7f:81:34:0d:15:7f:10:
fe:10:19:be:9d:e2:e3:af:80:ee:16:81:3a:28:bb:7b:f3:33:
b3:33:f6:2e:be:0f:61:d6:dd:52:e0:6d:51:ff:96:1d:25:e6:
60:f3:6c:68:6d:e7:bc:12:47:b1:2e:09:08:09:d6:41:b6:bc:
2c:ae:fe:30:a5:a9:d0:5f:21:4b:0e:8a:a9:b7:25:6b:ba:94:
96:85:dc:78:fe:61:48:b8:e4:11:44:8c:60:6d:3c:ba:cf:ab:
0c:c5:c8:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCQjAxMTAvBgNVBAUTKDQ1QjE4RTIwOUVDRkREQTVDRUQ3OENGOUQ5ODEwRDYx
MUU2RDQxMjQwHhcNMjYwOTIxMDYxMjAxWhcNMjYwOTI4MDYxMjAxWjAYMRYwFAYD
VQQDEw02YWIwY2FiMi1lZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVIum9G+9hkIu0mJ8zdk6JWB2FFZzxSfjLs37DceTsfSMaq9JOz7Z2N9Zdkw
5QPRxs+EoBTfJPOdnvysLJ9U94nwdpJbkQA/wT0I1kpwj79QVYqG6GnypbugdrOt
plw7o47qdZwtrivJMB0i1KXjORI6KXIq6oeSsQF7Ck022wZNPvM2b7vaCE2h6r+1
WIfBkmq9JbLIOSfm58e57qyQUdMJ+nOrPChyu89Ff3nQl0PjSoMTu8JjfgjGCgi8
kEPDzEOa9yNrKLjz8X35/AZESL4fcRgHKje+xJ1/BKt3Gb9gNc7g1Q2/Ruv9aCEz
xgbzuaOaivvmZ1y9Kn+LTr9ixwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfo1+wY
VEeLexPwoOxiHgp1I8viMB8GA1UdIwQYMBaAFEWxjiCez92lzteM+dmBDWEebUEk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JCMC85RkZEQUI3NjMy
M0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNhWE8xNHo1MllFTllSNXRR
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0JCMC85RkZEQUI3NjMyM0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNh
WE8xNHo1MllFTllSNXRRU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGihhytNho9xVAO8js9P624rvuWhpq6bYL7qmDRB1ZhPl9Mxh0oqRdSXwaF6y
8bL8VY6aWVGGANZIjMtuumBYt5Ert+CVDtoQ3fUdkp8Q9He1wERGN1GaWLWpfOJZ
acaEKFuQmPuuGKwFFcGwOqdtHj5FHxUD60JHXVCnbB3ZK8rZuF7trjGsmvMC7ct9
e0A+TUkGLUFE/FkIUUF/gTQNFX8Q/hAZvp3i46+A7haBOii7e/MzszP2Lr4PYdbd
UuBtUf+WHSXmYPNsaG3nvBJHsS4JCAnWQba8LK7+MKWp0F8hSw6Kqbcla7qUloXc
eP5hSLjkEUSMYG08us+rDMXI+g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:26:00 2026 by rpki-client