
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: inNWaWz+GcOMqlYNf7IvxDdc2oumgQxkNwoxZyhrGV0=
Subject key identifier: E0:0C:C0:F0:49:44:2E:7B:68:95:12:54:FB:EF:58:D6:00:B1:06:E0
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BE9
Signing time: Mon 12 Oct 2026 15:33:10 +0000
Manifest this update: Mon 12 Oct 2026 15:33:09 +0000
Manifest next update: Mon 19 Oct 2026 15:33:09 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: qZRy0PKgemu1ZnDkMttE9MOpoDlPVLtriqr1ZFhivOU=)
2: 2AAD212086FE11F194514C90ABEE528E.roa (hash: tivlJKGhJxgLi1zb3ltgWf3k3IyzTvjyKYGs0QVafw8=)
3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: 1H2+wtcM86N1L4Ps340Z5wtcq+aopEedP2UqK5GBn1w=)
4: BB799DA8844011F09054B049C4F9AE02.roa (hash: EiezE1fLAY+PU0Tsr1vkVTWP69qX87KKOYiHmO4wZNA=)
5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: LzHIWmd9tBB24YqhKSbWuh7SJvHgKGbK3A44NMSxIPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11331 (0x2c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Oct 12 15:33:09 2026 GMT
Not After : Oct 19 15:33:09 2026 GMT
Subject: CN=6accfdb6-bfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:8a:22:10:66:75:8a:1b:5c:0f:dc:12:c8:
d0:24:9b:3c:64:3d:08:4a:bc:ab:11:32:03:8c:52:
2a:70:9a:f7:8d:d4:14:56:0a:b3:3a:27:6b:1b:39:
09:a0:aa:38:da:dd:88:7c:b5:d4:1b:3e:c9:5d:25:
b7:7f:3d:9d:1e:4b:7a:d0:b9:1e:50:2d:59:39:58:
c4:05:52:4b:bd:7d:d8:97:d9:1d:c2:c1:9a:e4:c1:
22:be:d4:97:f3:fa:3c:52:69:b8:05:16:42:a1:06:
15:07:21:32:82:42:55:9b:cd:c1:23:6c:f7:cc:1e:
71:2c:a9:d1:a9:70:24:8b:de:95:a4:3b:0d:60:a7:
4b:5e:ec:b2:39:80:52:df:2d:5e:0e:02:2e:c7:d8:
87:da:a2:41:1d:89:59:b1:42:88:a3:58:da:7e:96:
34:1b:ba:4b:08:e7:ab:cb:f0:b6:cb:45:75:7e:5f:
a4:cb:45:7e:c1:07:46:cd:e2:89:61:0c:6b:85:5e:
23:4f:61:83:08:af:f5:f9:4e:6f:ac:9a:a3:0a:ac:
f3:69:ed:12:fb:62:d0:bf:d8:0c:c7:e5:9d:83:5e:
7e:e8:44:9b:8f:82:91:2e:57:6c:fb:d7:2e:e1:87:
47:68:49:94:4d:73:30:ee:d8:09:34:09:67:a8:62:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:C0:F0:49:44:2E:7B:68:95:12:54:FB:EF:58:D6:00:B1:06:E0
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:f7:48:5f:dd:8a:05:26:40:03:a4:b2:9c:07:10:f6:2f:
81:3e:c5:d1:c3:97:7d:ea:98:c0:9e:fa:69:7c:d5:39:ba:52:
c2:9d:9f:5d:19:d3:37:19:f4:08:ef:dc:cd:fd:ba:48:a5:29:
3d:56:97:9b:e2:6a:32:82:a0:57:a1:ec:40:7d:73:be:cb:05:
cf:b2:43:47:55:d9:9c:75:97:3f:44:03:36:df:c5:f5:fd:4d:
fc:71:9e:93:10:ec:96:b0:14:17:3c:e8:fc:f9:ce:39:7e:e4:
0b:3c:2c:db:77:c6:05:9a:71:10:4c:fb:f1:9d:fd:90:3a:b8:
b5:d2:00:b0:c1:bc:7c:d0:36:56:24:33:c5:d2:9e:c6:ea:97:
9e:37:8b:04:92:6e:29:e2:41:a2:59:a7:75:ad:e1:52:be:ee:
ca:a4:18:08:2c:34:a9:7e:f2:fc:1a:2e:f0:dd:82:93:02:81:
bd:4b:62:b5:1e:8e:ea:f9:84:33:1c:32:5f:72:e4:aa:c4:66:
2d:e0:1c:96:ab:33:26:65:06:cb:44:99:2a:15:7c:dd:41:d3:
df:36:4d:11:fa:44:ce:6c:a2:6b:e4:b9:e2:cb:03:b6:d9:80:
4f:6f:fc:93:cd:ca:66:aa:52:e6:a6:3d:1b:00:a6:85:b5:02:
a1:f2:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:39:36 2026 by rpki-client