
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier: rbjDxC8w8eZElwoPW6iegcQOYpBbokt2jxGEsWlRPko=
Subject key identifier: B8:84:B9:B7:C6:44:91:FB:30:0D:24:1F:6D:8A:3E:B7:6F:77:76:2E
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number: 02C4
Signing time: Mon 21 Sep 2026 01:22:20 +0000
Manifest this update: Mon 21 Sep 2026 01:22:19 +0000
Manifest next update: Mon 28 Sep 2026 01:22:19 +0000
Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: KxwgRrQxFQiQXzqqXe7pIuasPgAt/PtdYv7Fm0gthh4=)
2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: ZZZ9fBv/ymPhUilT+b7u+jHJy78yDtecTBcF5lQprHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Validity
Not Before: Sep 21 01:22:19 2026 GMT
Not After : Sep 28 01:22:19 2026 GMT
Subject: CN=6ab086cc-73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:d6:0b:42:13:13:10:aa:24:cf:55:56:af:
ae:f6:dd:65:87:14:11:7b:64:5d:39:55:4a:f6:41:
8e:51:a0:d3:e3:2c:27:22:01:04:e2:de:da:6f:f5:
16:73:d7:28:8b:2a:ba:87:35:f7:fb:b2:3b:7b:f5:
27:c2:0d:c0:67:29:2a:cc:0c:58:dc:50:6e:b9:b5:
61:ea:72:43:ee:4c:c1:19:4d:93:69:83:e5:84:c8:
e3:2e:3d:b1:cc:57:8c:28:d0:7e:13:a5:11:ef:d9:
2b:36:75:05:e7:a0:05:1a:5f:9d:6a:40:ad:0f:0d:
48:66:94:4a:97:ed:73:40:54:35:d8:2a:eb:2c:bb:
d7:68:33:c1:03:db:2a:e0:af:21:76:f6:e9:9f:b6:
73:94:05:45:1a:2e:39:f0:25:31:97:d0:82:ec:31:
8e:37:1a:db:00:93:04:8a:3b:bb:1a:90:29:1c:87:
67:02:52:b2:43:c6:1d:32:37:51:04:54:d8:0e:98:
f7:94:8b:04:bf:21:54:44:3c:7a:54:ad:d4:16:18:
04:91:14:df:25:e2:fc:39:b8:e4:68:cd:52:dd:dc:
db:8d:5e:13:6c:a5:5b:10:ba:69:55:35:e5:e9:b8:
4a:1f:c5:d6:6d:60:bc:79:57:e8:b6:d6:08:57:49:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:B9:B7:C6:44:91:FB:30:0D:24:1F:6D:8A:3E:B7:6F:77:76:2E
X509v3 Authority Key Identifier:
keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9d:9f:f8:2e:f3:8f:fe:62:e8:c8:9d:53:3f:06:6f:bf:56:
e2:b3:06:ac:92:ee:41:7a:4e:08:9f:5a:9c:0d:44:74:31:75:
75:b1:d2:8f:84:d9:d5:61:ca:2e:e0:27:0f:1b:ea:c1:42:21:
85:e4:e8:bb:08:c1:0e:b8:cc:69:49:2b:e8:35:83:62:39:b5:
fa:6c:d5:ce:00:8f:cb:be:6f:c4:5f:34:b1:29:d2:e8:e7:ac:
80:fc:90:0e:9c:6a:71:33:bc:e0:60:de:3b:85:f9:20:c3:00:
c6:2f:b0:54:39:dd:e8:9c:10:18:90:08:67:6c:ab:95:20:7c:
70:35:4f:11:b1:9e:ba:f2:09:c9:c9:25:0e:ec:bb:72:8a:13:
48:af:db:c6:67:e0:2a:97:3b:05:bd:69:1d:24:cc:7d:61:41:
91:95:b6:49:06:51:9a:45:28:08:d8:1b:f0:0a:96:fb:21:e7:
98:34:2f:60:d9:ad:85:d9:e3:50:05:90:ba:90:b0:22:fe:72:
a8:c7:bc:98:62:0d:92:47:23:53:6a:88:32:48:7d:d0:70:b3:
6d:4a:b5:27:fe:e8:31:01:53:e7:dd:b2:ee:de:d2:c8:85:cf:
97:ff:9a:8b:1f:fd:80:64:c1:25:b4:9f:19:7f:cb:c2:d9:d9:
8b:41:1e:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1
MkZEQTU4RUUwHhcNMjYwOTIxMDEyMjE5WhcNMjYwOTI4MDEyMjE5WjAYMRYwFAYD
VQQDEw02YWIwODZjYy03M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAluTWC0ITExCqJM9VVq+u9t1lhxQRe2RdOVVK9kGOUaDT4ywnIgEE4t7ab/UW
c9coiyq6hzX3+7I7e/Unwg3AZykqzAxY3FBuubVh6nJD7kzBGU2TaYPlhMjjLj2x
zFeMKNB+E6UR79krNnUF56AFGl+dakCtDw1IZpRKl+1zQFQ12CrrLLvXaDPBA9sq
4K8hdvbpn7ZzlAVFGi458CUxl9CC7DGONxrbAJMEiju7GpApHIdnAlKyQ8YdMjdR
BFTYDpj3lIsEvyFURDx6VK3UFhgEkRTfJeL8ObjkaM1S3dzbjV4TbKVbELppVTXl
6bhKH8XWbWC8eVfottYIV0lpCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiEubfG
RJH7MA0kH22KPrdvd3YuMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz
N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn
UnNFOG9OZjEwaU5TX2FXTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjp2f+C7zj/5i6MidUz8Gb79W4rMGrJLuQXpOCJ9anA1EdDF1dbHSj4TZ1WHK
LuAnDxvqwUIhheTouwjBDrjMaUkr6DWDYjm1+mzVzgCPy75vxF80sSnS6OesgPyQ
DpxqcTO84GDeO4X5IMMAxi+wVDnd6JwQGJAIZ2yrlSB8cDVPEbGeuvIJycklDuy7
cooTSK/bxmfgKpc7Bb1pHSTMfWFBkZW2SQZRmkUoCNgb8AqW+yHnmDQvYNmthdnj
UAWQupCwIv5yqMe8mGINkkcjU2qIMkh90HCzbUq1J/7oMQFT592y7t7SyIXPl/+a
ix/9gGTBJbSfGX/LwtnZi0EeBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:02:49 2026 by rpki-client