
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier: y0w1M6DEeqNzKnuEMCCZgu71ofWdJxTfwPCy3vUz9Ts=
Subject key identifier: 3B:A9:52:E0:37:F4:02:F9:C7:D0:BE:9D:D5:35:A7:03:20:B7:B1:6D
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number: 034E
Signing time: Sat 03 Oct 2026 01:17:04 +0000
Manifest this update: Sat 03 Oct 2026 01:17:03 +0000
Manifest next update: Sat 10 Oct 2026 01:17:03 +0000
Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: o19xrzNfFldhmF7foDkZQXf0MzFlpuLXki5KZJa4Njo=)
2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Validity
Not Before: Oct 3 01:17:03 2026 GMT
Not After : Oct 10 01:17:03 2026 GMT
Subject: CN=6ac0578f-7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:29:f8:70:c9:0c:e1:66:db:a5:90:84:e2:
38:b8:43:9b:d4:5b:de:22:f5:32:ae:20:41:41:d7:
59:b9:65:78:b5:5a:5a:e4:16:45:d0:c0:92:fc:a3:
57:fe:70:8a:e5:18:1d:fe:e7:12:6c:ca:bd:2c:35:
36:08:3f:02:c0:57:52:18:44:fb:4e:d8:df:77:ec:
16:a2:8c:f9:4c:54:65:37:5b:05:db:83:10:02:38:
a0:61:a3:31:fc:db:09:19:08:c0:a8:50:17:ce:a4:
49:85:c8:93:91:b5:34:f8:50:3e:c5:c7:94:05:cf:
70:db:d7:35:60:10:c6:be:09:ca:2b:0e:a8:17:62:
61:42:46:49:7f:27:68:bb:81:fb:d1:75:39:0d:e8:
b9:2e:af:e3:4e:0e:3a:28:c1:bc:f7:21:56:f2:69:
26:f4:35:7d:ec:3b:1a:45:71:67:11:f1:f8:d8:6b:
a3:52:83:da:0f:83:fc:0e:85:c4:5e:46:87:f8:3e:
9c:a9:05:6f:d1:fe:2d:83:05:e8:b9:4c:11:26:f0:
49:d8:28:f6:c7:72:4f:0d:19:10:8f:69:55:b5:cc:
5d:4c:f3:61:06:28:e7:b2:cb:3c:9c:f0:56:42:ec:
ea:e1:93:3f:ef:bd:4c:a9:ba:b4:be:7b:b2:6f:3b:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:52:E0:37:F4:02:F9:C7:D0:BE:9D:D5:35:A7:03:20:B7:B1:6D
X509v3 Authority Key Identifier:
keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:61:93:26:1f:1b:69:cb:e9:60:2e:48:1e:c1:37:ab:d3:
6c:93:b8:55:a6:ac:52:a2:38:5c:f0:b4:48:18:fb:6e:93:31:
1a:4d:07:10:59:d6:41:30:a1:7d:d7:69:1c:f6:b4:04:0b:93:
6b:b0:80:a7:cf:3f:7a:cc:05:f1:0b:5e:06:6b:53:9c:4d:c9:
a8:86:78:4e:ee:55:5c:79:ba:74:f9:43:3b:d3:9a:6a:8a:1e:
79:38:bc:9e:f0:50:f0:cb:0f:a8:e4:88:d3:3d:1b:f0:72:c6:
3d:65:63:1f:f9:8f:ac:04:db:c1:37:e9:ff:9f:01:53:c8:38:
50:cf:40:24:bb:e6:8f:1c:69:03:8c:29:f6:88:1b:e6:31:0f:
88:82:ff:98:0f:66:05:dc:14:83:1d:04:27:6c:b1:3b:f4:4e:
59:54:e3:20:35:1e:6e:7f:4b:0d:18:56:1f:ee:f4:9b:10:41:
13:00:fb:60:3f:20:04:b0:b9:2b:62:2e:7d:29:99:58:25:d4:
04:09:f0:20:e7:be:b0:08:ac:a4:98:ed:c0:ee:09:19:91:9f:
d0:bd:d3:39:bd:e5:3e:04:74:56:d0:cf:7a:8f:81:a4:48:33:
00:42:1d:bc:bf:ce:73:0d:ab:2f:eb:bc:3f:70:22:82:e0:75:
c3:62:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:28:54 2026 by rpki-client