
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: HhZdMMeronqzzsxJLUY0UsFfWBxIcFd7OFrKUCGYyxk=
Subject key identifier: 22:1B:27:4C:FC:2A:A6:45:0E:53:AB:0F:3D:66:49:3B:21:FE:E4:85
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1E08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1DB8
Signing time: Mon 12 Oct 2026 16:08:54 +0000
Manifest this update: Mon 12 Oct 2026 16:08:53 +0000
Manifest next update: Mon 19 Oct 2026 16:08:53 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 5c5T8pnWQdqW9EiBfcDCpXpDdTKxo6v47CA3b8pCzkI=)
2: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
3: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7688 (0x1e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Oct 12 16:08:53 2026 GMT
Not After : Oct 19 16:08:53 2026 GMT
Subject: CN=6acd0616-a766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:50:31:da:7f:7c:dd:a5:1b:4d:e5:d1:a8:
d8:90:cb:4e:83:14:ad:d5:1a:96:06:af:0e:f6:51:
9c:52:57:a9:b9:39:dd:f8:6e:cb:d8:b3:49:74:ed:
df:94:56:40:b8:c2:da:26:d4:31:1a:96:76:e4:5a:
8d:12:1b:cb:d0:79:2d:a2:82:ae:1f:b4:25:28:d2:
28:20:31:59:c8:d5:15:91:7d:a2:eb:82:02:5b:aa:
5d:35:83:e8:91:61:33:95:8e:58:33:22:98:5f:8e:
4f:a9:e0:34:71:55:c6:32:96:c4:6f:67:9d:10:11:
dd:bd:49:40:2b:ae:c3:9e:98:85:e1:2e:88:0d:0f:
34:e0:79:15:61:3f:2e:9e:29:ff:45:ff:41:3d:e1:
ed:c5:2e:55:31:a8:35:c4:9d:95:7d:48:a4:6a:00:
e5:2c:7c:61:7c:93:75:6c:9e:75:40:a1:fc:a8:fc:
20:0e:b3:6c:57:aa:58:59:ce:ed:8a:dd:08:d7:66:
c1:64:d0:16:12:1d:9a:08:82:74:5e:b6:4d:59:a4:
7e:e6:8a:b1:56:87:3f:36:50:1b:47:43:08:66:fc:
93:a8:99:48:aa:ee:1b:9c:11:04:fe:97:73:81:f0:
fa:15:be:ab:85:8d:ef:c7:57:b5:f8:a7:15:6b:01:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:27:4C:FC:2A:A6:45:0E:53:AB:0F:3D:66:49:3B:21:FE:E4:85
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:fc:e2:9e:d7:c6:c6:e5:46:31:03:2b:58:f9:bd:e4:0d:6e:
6c:a8:f8:b6:bd:1a:c4:15:79:dd:62:f0:68:83:a4:88:a8:c5:
a9:5f:ac:bd:a8:91:99:ca:2e:80:11:1f:1a:03:71:a2:31:ee:
40:b9:4c:ea:f1:07:a6:87:90:86:6d:a0:7f:54:f2:7f:1a:32:
f8:28:c0:e0:73:dd:3e:09:cd:10:52:ac:6d:f7:30:98:7c:6e:
ca:2d:2a:e7:51:d0:30:12:d2:77:80:50:12:94:84:df:14:b5:
33:b9:44:06:e3:29:77:66:43:8b:1b:68:bb:5d:87:e0:65:17:
ad:34:33:fd:bb:f7:5b:55:e9:b2:30:56:0a:11:af:52:c9:e4:
e1:99:3f:75:df:b0:74:a8:3a:64:24:3d:71:ac:47:83:bf:c3:
7b:d1:5f:a8:78:10:cb:32:9e:70:d4:19:cb:ad:5d:d6:b8:ce:
c6:74:b6:b3:36:4f:f3:51:1d:73:fd:f4:b0:3d:16:69:5d:27:
23:7a:64:65:e9:be:e1:86:d8:cd:f6:8c:83:24:5c:cf:cb:26:
09:3b:ac:92:af:5c:61:49:41:80:6d:ed:d2:a4:d6:d3:10:c9:
02:3b:10:bb:23:a2:ab:fd:b8:ce:34:e3:22:29:6f:be:ba:5e:
25:da:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:38:10 2026 by rpki-client