
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
File: V0mF4m2MdxawntUDGbTOZJYd5w0.mft (raw, json)
Hash identifier: kDvwwNSAr/FWuNXtamn+jw0oAyut2ibbB9bxCH47jOs=
Subject key identifier: 31:7C:44:D1:22:93:4B:AF:BC:29:4F:D5:B8:D9:3C:61:AB:58:61:A1
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
Manifest number: 024E
Signing time: Mon 21 Sep 2026 02:23:07 +0000
Manifest this update: Mon 21 Sep 2026 02:23:07 +0000
Manifest next update: Mon 28 Sep 2026 02:23:07 +0000
Files and hashes: 1: V0mF4m2MdxawntUDGbTOZJYd5w0.crl (hash: UQPDFlIuWWhMo5RrmoI3PyB0N/yuGFNa2To13KemuSU=)
2: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (hash: mldR1c5S1yIfEmhTTVAPWz7vwYz+ft3qmT964ffqtmQ=)
3: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (hash: 6eIJZK0oiLd0UznYNIj37wg5WuQq/dk6pLPO3ugwOzA=)
4: 67CDF190321211EEA6FE6D43C4F9AE02.roa (hash: IPJpEJ2b1P619Sycsmd/PwlrksD/ztfD2mrryV7B1ps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Validity
Not Before: Sep 21 02:23:07 2026 GMT
Not After : Sep 28 02:23:07 2026 GMT
Subject: CN=6ab0950b-c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:99:fb:6c:6b:56:85:7c:59:f7:f6:57:95:
54:8a:eb:6d:ee:7e:15:b6:e6:ae:39:9a:91:91:4e:
7e:8f:0d:b5:a2:86:96:44:01:54:39:bd:c8:9e:de:
25:63:36:67:a6:3c:8b:84:76:c9:d8:5e:4c:63:a5:
07:41:5b:de:6e:8c:e1:26:3c:a0:bd:dd:48:f3:94:
79:39:aa:2b:ab:9e:7d:5d:4d:42:57:b9:d6:b4:86:
8f:7b:9d:bc:3c:92:34:a8:52:50:35:4f:04:fe:49:
53:ee:1f:e4:93:8d:cc:f5:39:fe:9b:86:2e:e2:f8:
b3:e8:16:22:eb:9a:12:9f:71:05:6c:81:57:62:fa:
7e:b3:1a:d1:eb:99:d6:c0:b1:3e:01:2a:b7:bf:c8:
6d:bf:f5:cb:cb:9e:c1:0f:bc:ea:ed:55:a4:e3:88:
a4:50:78:72:6c:00:2b:a9:83:ce:2d:9c:2c:3f:97:
8b:80:67:48:50:cb:47:a4:b0:fe:af:20:c5:35:ee:
ae:1b:bc:d3:bf:70:ce:04:01:ee:a9:1e:90:b5:4e:
9a:4a:31:d0:0b:ad:75:4b:2c:20:7b:69:4f:31:ff:
02:70:90:91:2b:36:b2:96:11:60:39:98:92:3f:75:
77:45:05:ed:c5:66:68:fd:e8:ce:35:e7:3b:49:a9:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:44:D1:22:93:4B:AF:BC:29:4F:D5:B8:D9:3C:61:AB:58:61:A1
X509v3 Authority Key Identifier:
keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8d:f8:e1:61:79:e7:60:69:f7:05:74:12:43:3b:62:f0:0f:
17:70:2e:da:c5:ff:77:bc:7c:84:44:e0:05:80:08:ae:4d:bb:
4b:a1:38:1e:5c:39:a1:3a:63:9a:61:e6:3b:a2:f8:1a:53:fe:
b6:c8:fb:4c:64:d3:a0:4b:6f:12:1f:8a:96:1b:34:46:1d:8a:
7a:77:a7:f1:c4:40:cc:82:66:6c:9f:c5:00:a2:8f:14:ef:5b:
74:e4:56:bc:f4:be:ba:19:11:be:b4:2c:27:d7:04:3b:5f:26:
51:bc:93:ee:cb:fe:f1:e9:cd:26:48:2a:12:06:d9:d3:c4:d9:
99:cc:b0:70:dc:d6:9a:52:43:08:df:ac:f9:db:df:94:e1:9b:
38:d5:8e:fa:84:19:7a:5a:e4:2e:c0:f4:7e:1b:20:f8:d6:4c:
33:04:9c:8f:09:0a:ce:e6:88:6c:b0:b4:fc:44:2b:5c:49:aa:
60:28:d9:a6:b7:0f:1e:0e:5f:56:83:92:1a:f1:dd:07:99:1c:
40:73:b3:a1:8c:4d:6b:d8:f0:97:94:90:36:cc:aa:55:c4:40:
23:61:9a:13:e9:70:54:2d:11:e8:d9:d6:8c:44:03:14:07:51:
ed:89:08:ce:b9:b1:b6:f6:e5:9c:9e:02:18:22:91:43:d8:80:
b6:4d:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:46:50 2026 by rpki-client