
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json)
Hash identifier: Lu7nDzY37RTe1Jkm82VTD5TSzCenmx2JgDK23BpUD8k=
Subject key identifier: C7:F7:43:45:4B:81:47:DB:BF:B2:6B:71:C5:63:14:C0:4F:99:64:CA
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
Manifest number: 01E8
Signing time: Wed 23 Sep 2026 03:18:36 +0000
Manifest this update: Wed 23 Sep 2026 03:18:35 +0000
Manifest next update: Wed 30 Sep 2026 03:18:35 +0000
Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: MaIU8g+XOgvD4++UEHW/TqDIg1iyAS8sEFIeAT1VEfk=)
2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: yu+q3f/RarO60hYfGM/lYcRRiKIl/UB8fwUek+JSESk=)
3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: 0gLq+Q5VHgGBq5LnAdqM46w0wsxGeP7cSrO1IFlXD80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: Sep 23 03:18:35 2026 GMT
Not After : Sep 30 03:18:35 2026 GMT
Subject: CN=6ab3450c-c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:01:1a:7a:7a:01:6b:de:66:81:cf:a0:6c:
95:cd:a4:81:3f:d5:c3:57:7f:b7:ea:51:43:82:bc:
df:ef:7f:01:07:2d:64:43:bb:6c:cf:23:21:ba:e9:
79:ed:ff:cf:3b:30:d8:22:66:0a:d2:f3:3e:5b:5b:
c9:da:db:f0:34:06:7a:4c:80:78:18:be:97:de:1e:
89:11:c0:9c:01:ed:3f:66:37:18:20:a7:09:dc:f1:
99:4e:f9:9d:9b:ac:7a:9e:19:89:58:0f:82:ea:25:
5d:ef:08:e0:ba:f5:b7:7c:b7:b1:bc:5a:1a:70:99:
8c:fa:e4:76:03:34:1f:3b:4a:1f:51:95:12:1f:9b:
2b:7b:81:8c:de:df:6c:10:b1:c8:ff:7d:75:84:63:
a8:c2:5c:69:ec:a1:c8:8f:4f:b2:a9:bd:c4:f6:07:
d4:ac:d9:9b:c8:c6:0c:c3:99:6b:47:93:36:db:41:
5c:a9:39:53:9a:e9:35:bc:60:38:72:f5:f8:e3:78:
6d:77:6e:31:24:b8:a4:1b:0a:80:f3:79:be:0d:19:
68:d1:00:c5:be:a5:cf:2a:e7:92:3b:dc:5d:73:36:
3c:1e:5a:57:4e:b9:78:9c:49:e4:dc:a8:ef:c8:d2:
93:66:cd:14:c7:13:bd:2f:38:1f:8c:f1:69:27:af:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:43:45:4B:81:47:DB:BF:B2:6B:71:C5:63:14:C0:4F:99:64:CA
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5d:7d:3c:86:a1:3a:7d:e3:f7:03:10:0f:a7:e6:17:27:d1:
2a:e6:c6:1d:a5:2f:b7:c5:2e:97:ca:6a:df:42:09:61:13:1a:
62:6d:21:22:79:63:ac:b0:2c:1d:d8:25:46:6c:98:b9:da:b0:
f3:9e:0d:68:b9:ce:c9:5a:8a:d8:02:ff:0f:c3:f0:51:10:70:
bf:fe:b1:ec:aa:b2:05:81:52:bc:a1:95:e5:1a:51:0d:2c:96:
58:65:e1:6f:e2:b4:71:6c:d5:58:9b:05:cf:03:24:8c:12:8a:
56:ae:20:ad:5a:21:db:a8:93:e0:62:80:5c:43:88:d4:22:86:
8e:ef:77:e2:5b:5c:18:e2:8c:fb:29:7e:2b:03:4d:f3:1f:5f:
cb:a7:1e:98:e0:c7:59:74:4f:fc:dc:ab:fb:64:94:ae:76:3f:
1e:60:28:67:74:ae:4d:55:2a:93:3d:a2:9b:48:82:82:6f:1c:
1f:60:de:cc:0e:ed:2f:76:60:56:42:b2:a3:a4:36:d2:4c:58:
d1:de:29:5f:be:ef:29:78:4e:22:91:cc:00:fe:d6:93:ee:08:
f7:7f:b9:2c:af:92:93:0f:c0:a6:f8:8d:17:22:93:a3:90:b0:
bd:06:5f:40:c8:e9:3b:2c:a4:fd:b1:22:d4:e2:be:26:b5:fc:
44:29:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:53:43 2026 by rpki-client