
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier: ZokJ6UNtgXGO1/F2PNDUEQcxuHeQVaFte6Ya5U95BVU=
Subject key identifier: 98:3B:E1:26:F9:C0:1A:71:4D:D3:88:09:75:F3:BE:4B:3C:69:02:83
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial: 14B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number: 148B
Signing time: Sun 20 Sep 2026 16:50:03 +0000
Manifest this update: Sun 20 Sep 2026 16:50:03 +0000
Manifest next update: Sun 27 Sep 2026 16:50:03 +0000
Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: PdvUVZ4aykoo9Xubw4O4nPC3G8ZG9uhRbmo0axmWoyk=)
2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: WqLIwuJ/7DrpYR3z9TNqi+cQRJQneuJiijOPEO2pCoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5296 (0x14b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Validity
Not Before: Sep 20 16:50:03 2026 GMT
Not After : Sep 27 16:50:03 2026 GMT
Subject: CN=6ab00ebb-b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:ef:10:b8:16:9e:ab:f8:14:4d:bc:2b:8f:
45:cf:35:43:be:0f:6d:50:bd:a5:10:7a:59:32:54:
d6:de:f1:4f:e9:26:7e:58:d9:10:e6:b4:30:ae:b3:
30:8c:26:d9:4d:55:28:46:a9:58:d7:bc:93:46:5a:
84:80:8f:88:4b:e0:1a:03:65:8e:8f:98:4a:08:70:
ef:db:2e:64:35:df:c1:c1:c6:c5:70:48:88:d5:17:
2e:f0:57:69:00:d9:c0:2f:f8:07:3f:b7:89:b6:92:
ab:f3:c5:fd:84:6e:31:1e:32:3e:c1:5e:f8:4e:4d:
03:1b:54:2b:8f:ab:e3:4c:76:b5:b4:a6:1e:09:cc:
48:4b:81:39:c8:0f:6a:6e:1f:4c:c4:65:fe:95:99:
c2:40:48:0d:b7:4f:8d:f4:11:9e:72:87:09:c1:ee:
42:e7:43:d2:42:c1:51:89:f9:16:49:7f:fb:17:d0:
91:55:1c:61:0a:2a:ea:51:ee:63:71:0e:96:06:8d:
fe:ba:c7:17:ae:f3:f1:2b:4f:35:7b:54:c7:ab:48:
ac:48:18:d9:e4:2f:e2:a4:f6:ef:8a:17:6d:d1:0a:
c1:3a:60:31:26:fd:52:93:15:a0:11:45:d7:79:00:
6a:e3:a5:02:d9:43:de:ad:2b:90:4f:c2:16:45:a5:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:E1:26:F9:C0:1A:71:4D:D3:88:09:75:F3:BE:4B:3C:69:02:83
X509v3 Authority Key Identifier:
keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ea:df:80:6b:8c:29:5f:0b:7e:6e:e7:39:60:7e:bc:ee:25:
bf:8e:82:ed:3e:32:4c:86:98:a2:f9:f5:60:f6:e3:54:de:49:
7f:00:ae:c4:ad:32:d9:2d:7a:33:1d:15:a4:37:9a:b2:ac:f4:
4c:94:88:88:b8:8a:0d:86:ca:e7:3c:b9:b1:d5:d9:9f:e4:cf:
4e:79:d3:71:84:28:77:ef:7e:d0:ac:c5:98:5a:4b:4c:eb:c2:
1d:8c:6b:49:e1:29:cb:38:da:4e:20:2d:5b:e0:c3:aa:0d:cd:
09:21:fa:97:dc:1e:ae:4f:b3:70:36:94:42:29:cf:88:53:ba:
03:45:51:f4:2d:66:ff:b5:4e:df:e9:09:98:f5:56:b1:a5:fe:
a3:d6:e5:b5:8a:e1:87:54:7b:04:c9:0a:65:43:d4:e6:90:49:
f7:26:14:4f:dd:05:95:db:ce:57:ac:5c:fd:e0:ec:db:c3:b0:
04:42:29:9e:af:53:8c:be:44:0a:2b:ed:b1:e4:76:c7:e0:df:
57:fa:7a:1e:4c:dd:0f:90:ac:b3:cc:05:72:a2:74:33:13:e5:
49:b0:4f:73:d6:60:d9:56:69:33:0c:b7:f6:64:ce:0d:48:03:
dd:0c:20:62:b2:f4:58:a6:0b:9a:79:6e:4b:dd:63:7b:7e:ce:
cc:28:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:38:35 2026 by rpki-client