
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier: ruffG3/Qic0YO9ObZterwFsRAVmxxAFDohL1abCWHYU=
Subject key identifier: C0:B9:D0:2E:7D:2E:2F:AE:F3:54:34:F9:BC:EB:9B:4C:D8:5D:56:67
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number: 0887
Signing time: Sat 26 Sep 2026 20:57:50 +0000
Manifest this update: Sat 26 Sep 2026 20:57:49 +0000
Manifest next update: Sat 03 Oct 2026 20:57:49 +0000
Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: 0yMgyUwSDORMQyaks4hiUkllVzPsWLnDoeSVU6Ta/HY=)
2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
4: AoJXKTW6a976-lGfSTZSSLqRfVU.asa (hash: NinME7QbecrEtC4yA+6TI6aYRUOFyI2rxCV52kQzJ9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Sep 26 20:57:49 2026 GMT
Not After : Oct 3 20:57:49 2026 GMT
Subject: CN=6ab831ce-25b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:eb:5f:c8:67:21:4e:99:09:fa:f2:d3:aa:
92:b9:01:3f:c5:98:3e:54:b1:e2:77:1e:21:7a:41:
77:a6:f0:bb:d6:b0:08:25:63:03:c4:a9:50:3e:5a:
ad:72:bf:de:69:3e:5f:54:13:8c:1b:c6:45:49:39:
c9:ee:32:e3:60:9a:9a:c5:13:73:a2:34:a0:22:48:
de:96:30:e3:1c:93:ca:20:b2:35:71:38:71:cb:c5:
fc:d5:45:40:f5:62:3a:ec:54:14:f3:66:f7:9c:59:
e6:87:ca:61:d0:8b:0e:92:4f:5c:f0:10:e6:3d:ac:
99:65:b8:39:45:e9:bf:77:f5:18:50:22:2c:fb:64:
01:54:b5:87:bc:df:3e:21:8d:b8:8d:26:06:be:30:
b5:31:56:9a:f8:46:a3:0d:00:c7:ca:94:fa:0e:b8:
cc:89:1b:6f:c4:5e:78:cf:e0:ff:f9:5c:68:8d:ee:
6f:c9:1c:29:32:40:51:65:28:d0:73:13:fd:41:32:
81:2f:92:e5:a6:4c:fe:8c:c6:63:e3:dd:03:f1:7a:
cf:ed:b2:8b:f7:b4:fd:dc:40:96:a9:43:3b:b7:61:
10:f1:10:8f:14:11:11:5b:4e:95:94:b9:90:81:b5:
14:59:51:59:68:41:8c:2f:29:4c:9a:7c:2e:70:ef:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B9:D0:2E:7D:2E:2F:AE:F3:54:34:F9:BC:EB:9B:4C:D8:5D:56:67
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:bb:24:c9:e6:ed:7b:6e:7a:2a:b5:9a:75:8a:26:08:c0:74:
5a:b6:ad:e4:0d:0a:21:d5:c7:fd:b7:22:42:df:2f:52:2c:79:
50:c6:91:80:fc:68:c7:3a:da:db:b3:e9:b7:8b:04:01:67:53:
db:f9:2b:66:cd:30:b4:b9:80:67:f1:59:26:8f:73:d7:9f:e1:
0b:4d:85:78:52:bb:00:55:7a:0a:1b:89:52:98:a5:2f:f9:74:
49:29:ca:4a:43:81:54:35:ff:18:74:a6:73:f3:fa:3f:de:4a:
e7:ea:a8:91:9f:09:f4:de:6d:f5:f8:f4:b7:91:4e:ed:e8:5f:
0c:20:4e:c7:79:ae:f9:99:42:3b:e5:80:9b:d5:12:17:d4:ef:
4c:40:b5:7a:c4:e2:9b:0c:c0:e7:fb:41:29:5e:ca:6e:7e:bc:
07:87:cb:b7:f0:b7:91:0b:51:b6:a4:3b:08:33:e4:34:10:17:
5d:87:0f:57:ee:a1:37:d4:9f:de:df:c5:d8:65:cd:72:fc:94:
75:dd:b5:d3:16:96:2a:16:bc:df:a6:f4:ec:33:7b:bb:b4:46:
13:f9:56:28:4e:82:2c:bd:43:5b:ba:f4:ad:2c:e1:ab:16:e5:
51:c5:ff:f9:ad:0e:f3:b5:36:56:1b:d5:3f:5d:f7:71:b9:52:
48:ae:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:36:46 2026 by rpki-client