
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier: Y+QzEsq4t0H25d9wzJxmxLE9ECGb7X6/7I5Gn81L/rc=
Subject key identifier: A2:E3:B7:09:24:95:D8:2D:7C:4C:AD:EF:FB:52:B7:33:63:83:33:96
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number: 027F
Signing time: Mon 21 Sep 2026 01:55:53 +0000
Manifest this update: Mon 21 Sep 2026 01:55:53 +0000
Manifest next update: Mon 28 Sep 2026 01:55:53 +0000
Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: wnDWeeYrd3+1DxHFLeCBn5znU588q8WrOdbxUbIEW3o=)
2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: ozB4qSn60KTh14UkkZIERrYPZDHp9uoJD36BdQCwa/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Sep 21 01:55:53 2026 GMT
Not After : Sep 28 01:55:53 2026 GMT
Subject: CN=6ab08ea9-bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:59:f2:62:32:e3:d5:fb:52:45:82:2f:5b:
1d:54:0a:9b:bd:07:9b:61:39:52:b6:ef:80:4a:90:
61:31:76:d9:77:68:d1:39:34:41:1b:5f:ba:14:3f:
da:b4:f9:ae:46:4d:43:64:c8:27:2a:26:7a:16:d8:
e4:fc:c4:ff:c4:8b:d7:16:97:00:09:f3:60:1d:5f:
84:be:b1:80:0d:37:ab:1d:34:f1:f7:35:93:f0:53:
a0:08:af:f4:e3:6a:54:18:0a:05:75:00:c8:c3:7b:
8a:a4:c9:5b:54:5f:96:77:37:4c:df:00:23:fe:b3:
88:e0:ed:ee:4c:14:2b:4d:67:a5:b6:6e:60:46:94:
f9:c4:8e:b9:cb:9c:a6:9d:d7:e4:79:16:1a:77:4a:
a6:76:18:dd:36:43:e4:50:6b:48:a9:6c:ae:1e:37:
1d:0d:c8:80:3f:80:6a:6e:04:1e:52:9a:dc:e9:3b:
8c:5d:18:43:2b:c7:45:73:b0:98:da:d8:c2:6c:87:
3d:37:74:5b:6b:3b:43:46:0e:bb:07:79:91:d6:4f:
c6:ac:77:20:f0:d4:eb:c2:6c:9e:f6:3a:0b:e3:4f:
41:c2:b4:f2:51:c1:68:11:e7:4f:6b:ee:9d:88:ed:
2f:f7:50:06:4d:17:40:6d:a3:4c:ad:bc:d2:de:fa:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:B7:09:24:95:D8:2D:7C:4C:AD:EF:FB:52:B7:33:63:83:33:96
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:4b:50:11:7f:54:12:81:c1:2d:b0:b7:5d:c3:37:55:36:
4a:90:f9:31:e3:68:9c:dd:f3:d7:b5:71:02:32:fa:58:c4:8f:
24:f2:f3:fa:9c:63:80:88:f7:61:4f:46:d1:96:f5:da:02:e0:
5a:23:e7:44:c5:18:15:f7:6a:a6:fd:07:c1:03:07:ab:ab:c1:
15:9a:84:fb:8b:e4:32:b0:d2:be:6e:a1:bf:0e:ab:da:68:a1:
5c:96:08:5c:6d:bb:27:d5:1f:5f:ee:9d:2f:29:a7:c9:b3:30:
b8:02:25:b2:fd:ef:90:c0:72:4f:39:11:d9:bd:4a:27:4f:60:
fa:40:91:1f:0e:69:5e:4a:5e:3d:3a:4b:2c:6a:02:7f:59:ce:
c5:f0:9b:5e:7a:b6:29:05:3c:1c:71:75:ae:4d:28:34:ec:aa:
34:6d:87:c1:a6:d2:84:a0:0d:f3:c8:71:1b:fd:b9:11:da:f4:
bf:81:8f:c3:47:42:d1:aa:cd:bb:03:08:51:d7:e9:4d:fd:47:
f6:78:95:71:64:7a:79:fd:cb:59:ff:2a:a2:61:ec:73:9a:4c:
6e:c9:cb:86:e1:60:11:71:c1:3f:d7:fb:2f:65:85:ee:dc:2d:
a1:42:f3:59:f3:fb:a8:98:4d:a8:08:5c:29:04:19:a1:12:39:
30:63:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:10:07 2026 by rpki-client