
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: QxNC3OchzRjwRULXcl7YnWdLvsvuAee0nLHc/xvj6kM=
Subject key identifier: C7:92:EA:AC:4C:AF:62:56:8E:00:27:A0:23:CA:DA:AA:63:6E:94:7B
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08B1
Signing time: Sun 20 Sep 2026 20:28:11 +0000
Manifest this update: Sun 20 Sep 2026 20:28:10 +0000
Manifest next update: Sun 27 Sep 2026 20:28:10 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: z5LLhC+lY09MaqBzKvqPQK1VdqLKcyKXOp4nUEu1iHs=)
2: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
3: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
5: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
6: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Sep 20 20:28:10 2026 GMT
Not After : Sep 27 20:28:10 2026 GMT
Subject: CN=6ab041db-a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:57:1f:78:e7:10:04:36:3b:02:b2:ef:8d:
bc:0f:32:e8:e2:a5:0f:75:b9:49:f7:b2:ba:2e:71:
84:81:37:b6:15:16:06:b1:50:88:a0:26:ae:b4:e4:
b2:99:fa:b6:c5:89:4e:0e:d9:18:42:8a:2b:bb:e4:
6a:86:8d:d8:7f:48:fc:ce:b4:3f:a0:d6:34:5a:75:
22:dc:a3:89:47:86:a0:c5:3d:15:48:f1:bd:47:fb:
4a:65:5e:bc:df:b5:a6:20:22:df:20:b1:2d:ea:6b:
2d:43:c4:98:d2:74:7e:e4:c0:66:ae:a2:ed:9d:15:
c9:d5:d0:e6:d2:d8:23:de:73:45:2e:90:3f:e7:4f:
2a:73:78:0b:5f:cc:d3:53:64:77:eb:a2:4f:51:37:
e5:d1:d1:20:b5:82:65:73:4f:dd:38:04:b3:91:a5:
44:64:a9:66:f8:a7:2f:6c:53:64:0e:91:c7:cf:cc:
68:f7:e2:0d:48:f4:de:fe:92:1f:08:2a:a3:f0:dd:
be:b2:26:a2:8a:c7:82:55:79:07:27:42:09:c2:7b:
46:65:a6:50:fa:1e:77:f3:d4:05:cc:4b:cf:10:5a:
67:b1:8e:48:f1:92:96:f9:ca:a6:f9:c1:69:dc:61:
cc:65:26:9b:a7:08:94:fa:af:20:61:f5:85:89:3b:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:EA:AC:4C:AF:62:56:8E:00:27:A0:23:CA:DA:AA:63:6E:94:7B
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5a:65:48:73:d5:ff:02:a8:ad:1f:74:57:82:34:34:8b:28:
be:26:74:0c:b2:a1:56:6b:8c:4b:e1:95:63:16:48:30:9a:17:
34:aa:2a:13:9d:ce:f2:5b:5d:71:7e:59:5e:1c:6f:48:b0:ce:
18:9e:fe:c2:0b:d7:37:ba:05:e9:33:7a:6e:d9:70:6e:cc:dc:
8b:4c:54:7e:c4:02:85:c8:f7:96:cd:99:07:dc:02:db:02:b4:
dc:ae:1e:26:f2:11:f6:c4:cf:e8:03:16:b4:f5:ec:cd:a1:34:
12:c0:87:b1:71:ab:38:1f:1b:3c:e8:c7:4d:5b:6d:96:8a:4a:
88:a1:9a:54:62:bd:e4:b1:bd:62:18:d4:8a:a4:c0:56:3a:9e:
a3:75:a1:a9:14:fd:ca:d9:63:60:8b:fc:3e:df:72:e4:82:f5:
be:1a:70:33:d3:b7:e2:3d:b2:d5:72:31:89:e7:ba:4c:0a:61:
38:50:13:2b:d2:a1:57:98:ef:b9:e3:43:4c:7e:9d:d9:bc:c5:
5e:ca:cd:6e:6e:dd:75:58:eb:20:3c:7f:c1:6f:27:fe:f0:a3:
27:5d:de:a7:f9:b9:a6:fc:b6:7e:7e:0b:ea:9d:50:6a:13:45:
2c:3a:d6:20:46:f2:d0:66:bc:3d:a5:91:32:b2:1a:4b:ce:cf:
71:cd:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:02:25 2026 by rpki-client