
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier: S61sEq7d606QNBJlyvBcYHhBJWbb12AAz2xgjlOCxQw=
Subject key identifier: CC:8C:A7:CB:44:C9:87:76:E3:A0:B1:21:70:0B:8A:0F:55:78:41:24
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number: 01AC
Signing time: Mon 21 Sep 2026 04:04:44 +0000
Manifest this update: Mon 21 Sep 2026 04:04:44 +0000
Manifest next update: Mon 28 Sep 2026 04:04:44 +0000
Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: q2xrJhyAgvJIafPA+rkQvGS49x1r5O5zX+DtiscNW3A=)
2: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: H04/8UCM0HIwt/kQIuV1r0Bul5P9qNZh2AavqYuBxdQ=)
3: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: rA7V1naVvYRqsHEWb7MBLZbTli7oyFi0ZmHVez4sKpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Sep 21 04:04:44 2026 GMT
Not After : Sep 28 04:04:44 2026 GMT
Subject: CN=6ab0acdc-5b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:0b:cb:a2:6d:84:94:3e:94:9d:f4:9c:bc:
86:a7:65:a1:fd:48:f1:ed:4e:b3:b9:87:a9:3f:f5:
5e:9a:1c:4b:88:ab:22:8e:91:96:03:92:86:a2:9c:
ca:dd:c8:3b:e8:e5:aa:41:c7:07:50:5e:54:7c:a4:
51:dd:89:ea:9f:2d:7b:a0:a6:f0:f9:1c:22:2d:7f:
ce:27:cf:fb:48:58:10:c7:9f:a7:02:e9:94:54:53:
00:b9:f0:eb:5e:5d:3c:fc:06:77:44:58:8c:cb:d7:
1c:9d:6f:9d:b9:d8:e1:57:cb:11:92:f7:8c:07:59:
66:61:65:35:6f:3e:04:81:9a:6e:f2:0e:84:ba:70:
f0:8e:3e:35:f6:2e:f7:e9:7f:ed:26:9e:4a:a9:ef:
da:c0:eb:2f:4c:ad:58:ef:e7:3a:a0:85:87:2b:a9:
9c:13:29:67:a7:d6:22:3c:6f:f0:fe:21:33:d8:7a:
d2:19:f3:a9:ba:f1:97:36:fe:ac:7f:21:df:6a:6e:
82:94:ce:dc:de:96:c1:f7:20:3f:62:54:e1:c7:d8:
93:28:be:55:58:62:45:bd:9d:56:f2:5c:ba:84:6b:
77:d7:c4:1a:d0:a8:01:fc:ae:52:f6:e9:08:df:c6:
88:49:76:50:e8:0c:b0:12:28:f1:eb:87:89:c9:4c:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:A7:CB:44:C9:87:76:E3:A0:B1:21:70:0B:8A:0F:55:78:41:24
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:46:1e:bc:38:1c:a5:4a:29:13:9e:b5:c0:16:c0:23:dc:8c:
bf:78:82:60:db:56:f1:9f:65:16:c2:79:95:4b:91:fb:93:c6:
58:62:1e:d8:98:fa:43:28:6d:91:c3:9f:cb:40:7b:5e:aa:99:
a0:22:8f:53:6d:77:71:a2:1b:2d:fb:a7:c6:40:55:c5:70:4c:
06:d9:02:0a:8e:ae:f6:81:6f:c2:bb:c2:e5:cb:35:07:e7:fe:
fe:84:4c:eb:54:b7:80:0f:c2:97:1c:fb:ec:ce:fa:c8:dd:8c:
0c:48:63:81:8a:f8:e6:bc:d2:ea:db:5a:03:6f:32:bc:42:d3:
d9:76:a4:22:7c:ee:66:3c:bf:e1:28:84:9f:a1:9d:f2:63:8b:
3b:ba:54:89:9a:85:84:f8:cd:e2:23:f5:85:26:5f:2f:10:61:
36:e8:07:e3:14:58:cd:66:d1:dd:46:7c:5a:e4:0b:e6:b5:48:
1d:ec:3a:b8:26:f0:45:a3:8e:76:29:76:4b:66:a9:2d:14:9d:
2e:79:95:ee:e9:a8:38:7d:5d:ec:2e:75:b6:4b:9b:17:8f:00:
10:ae:aa:94:2d:c6:1f:e1:30:ff:e8:69:52:c3:86:04:6a:03:
08:5c:f3:51:ac:7f:b4:20:33:9d:1c:8f:aa:0a:c5:eb:a5:d4:
8e:e4:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:13:01 2026 by rpki-client