
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier: mx4nZSzkh0n8+zu1TID56txMzkfKlkeZ5cS2Qways8I=
Subject key identifier: 74:FB:20:BF:45:9E:32:5A:CC:C0:8C:2D:B4:4F:58:5F:CE:D2:BC:D8
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number: 0494
Signing time: Sun 20 Sep 2026 23:47:56 +0000
Manifest this update: Sun 20 Sep 2026 23:47:55 +0000
Manifest next update: Sun 27 Sep 2026 23:47:55 +0000
Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: En1k8IMdM7G89sgfEzOKjJ2caH3ew3WZ+8VC41CnwC0=)
2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: u6yx2TVGgoUMskQa1Rs/+SjZrQbYdcLPC2mmciXAt68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Sep 20 23:47:55 2026 GMT
Not After : Sep 27 23:47:55 2026 GMT
Subject: CN=6ab070ac-ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:dd:76:29:cb:52:ea:4d:eb:0e:fd:12:8f:
c9:e6:1b:d3:19:ab:dd:19:b1:de:5e:c6:d8:b1:9c:
da:4e:db:15:d2:9b:2d:31:b4:05:04:d1:0c:bd:94:
29:b4:0b:ff:25:54:02:10:a3:be:86:bd:0b:2f:8d:
1e:47:c8:a1:15:54:15:59:df:be:3c:d5:aa:72:f7:
3e:0c:64:e4:ab:86:38:cc:a2:c1:20:06:ad:d8:fc:
14:13:0f:81:d4:3f:3f:b7:e0:e8:77:f1:43:78:fa:
97:f8:12:55:90:b7:7a:d4:c1:36:cf:76:8a:7b:b9:
85:b9:ac:f2:52:10:89:91:a4:2f:37:90:0c:ae:11:
eb:8b:0a:1c:6b:53:80:4d:1c:f0:a8:80:7e:ff:8b:
30:c8:97:2b:d1:8e:79:b4:c3:7b:0f:9f:c7:c4:29:
27:3b:b8:36:ec:64:0d:f1:2d:c8:20:59:a9:84:2c:
5f:ef:bf:f9:7c:41:62:45:4a:1b:79:9b:89:ca:16:
d1:e0:6d:d5:56:9a:b0:01:ae:97:46:16:d5:0e:34:
e4:0e:5d:3e:57:ad:48:42:77:21:54:15:de:4d:26:
2e:0e:f1:90:9a:87:e4:71:e3:7b:c1:ef:ec:4b:d3:
07:d6:79:58:58:17:4e:5f:68:5f:55:0a:d3:06:4b:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:20:BF:45:9E:32:5A:CC:C0:8C:2D:B4:4F:58:5F:CE:D2:BC:D8
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:9e:70:a4:81:91:60:ef:c7:28:40:52:25:bc:c9:a2:e6:
6a:b2:24:98:08:a9:5a:65:b1:89:91:66:2d:56:8e:a7:bf:36:
40:1a:cd:97:a0:0a:fc:4c:3e:d8:d4:92:5f:42:eb:3f:1d:04:
1c:dc:be:2c:f3:c4:23:04:69:09:47:e3:f3:18:46:63:64:7e:
45:e4:e3:db:df:0b:50:25:c8:0a:bc:a9:db:6a:ce:f2:19:8d:
ba:44:78:2f:f1:79:9b:c5:7e:81:15:b2:0a:01:06:28:76:81:
45:90:13:88:f2:e4:89:29:d6:97:58:18:47:4f:e6:87:31:fe:
a0:62:97:6e:88:e3:b3:8b:d9:b3:88:70:69:e6:1c:b5:db:0e:
5a:dd:33:1a:06:bb:3d:40:a2:5c:9c:65:84:a7:56:c2:02:c9:
00:c2:96:9f:a3:ad:cc:b8:a9:fb:26:03:df:aa:4b:ee:3c:bd:
06:a0:49:17:0a:43:4b:eb:d6:e0:ff:0e:cf:a6:ae:4c:55:0e:
e0:a5:af:61:bd:ad:67:e2:db:7e:77:d2:82:3b:6d:a3:81:f4:
59:4c:42:ae:33:77:be:e5:8b:b7:23:e4:10:d8:a2:1b:61:23:
61:69:b1:e7:70:c0:3e:a1:ac:77:24:34:d5:34:44:bb:4e:26:
f6:50:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:30:27 2026 by rpki-client