
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json)
Hash identifier: UDxm6BmOIPKDKI4+39gQG0Bo8DG3d6yVsOeuV6g6pkA=
Subject key identifier: 69:68:EF:61:0B:F9:D6:14:37:62:36:8C:A2:3D:AE:96:E9:23:29:FE
Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
Manifest number: 02E7
Signing time: Wed 23 Sep 2026 00:48:09 +0000
Manifest this update: Wed 23 Sep 2026 00:48:08 +0000
Manifest next update: Wed 30 Sep 2026 00:48:08 +0000
Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: ZTSWOsplpDeErlCEhrG2vpJp5Aulel9P8t898v1zfBI=)
2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 07Vvv9BLMYQgb5Np9HOURXIhU/+tIYEclR6BOQmk2Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Validity
Not Before: Sep 23 00:48:08 2026 GMT
Not After : Sep 30 00:48:08 2026 GMT
Subject: CN=6ab321c9-05ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:43:a5:83:b4:5b:2e:2a:a8:61:aa:c9:25:
82:bd:0f:ed:02:1b:2b:b2:72:d8:92:eb:97:40:92:
ac:97:c7:46:95:40:ee:58:4e:45:64:a2:b1:0b:8c:
68:00:07:ba:27:dd:ab:17:52:fa:ae:f6:12:16:bb:
9e:f9:4a:61:d3:e8:03:60:97:05:bf:24:eb:26:8f:
b7:5c:db:76:e9:98:57:15:87:32:57:22:42:2b:62:
50:0f:d3:5b:9d:38:c5:37:94:48:4c:4d:70:11:cc:
d4:00:56:78:73:35:42:2b:f3:fa:1b:56:70:14:10:
d9:49:46:50:f9:fa:16:05:b9:df:da:e1:29:1e:0c:
a9:85:9e:a1:f5:9e:50:61:58:37:89:df:22:af:bf:
1b:33:c5:4d:1b:91:55:e8:7c:dd:28:2d:6e:f4:99:
2d:a6:d3:38:a9:80:cd:b6:bd:b7:31:06:34:b9:06:
19:ab:3e:fb:42:85:a6:a9:30:81:56:20:b4:87:ae:
51:2a:32:98:f3:b3:0e:e3:c3:a3:c4:4a:43:77:bd:
2b:66:4e:d2:d1:0f:58:e4:4c:a3:ab:d8:bc:bd:0b:
47:35:89:8a:f5:99:35:8e:05:9c:a3:5e:ef:51:0d:
54:5e:7e:a1:de:4a:d9:54:f3:ae:7f:44:5c:e6:63:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:68:EF:61:0B:F9:D6:14:37:62:36:8C:A2:3D:AE:96:E9:23:29:FE
X509v3 Authority Key Identifier:
keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:3c:f3:92:4a:ff:81:e0:28:e6:8e:ab:9b:5c:16:17:1a:
47:1d:cb:02:34:ce:54:3c:c2:ba:74:6e:19:6c:2c:7f:29:23:
08:6a:e7:9e:ac:78:96:e0:b6:38:69:69:cc:81:02:6e:28:d1:
a6:aa:3d:fe:0b:aa:af:a5:36:ba:cb:3f:a1:66:d5:2d:fb:66:
22:6a:b5:d3:a2:0a:fa:de:94:f0:01:84:11:a4:cd:a4:0f:39:
df:7c:98:61:a3:7e:da:87:5d:02:c9:43:4a:43:b1:94:64:c2:
bb:f4:9b:3b:95:fd:e7:71:80:8b:a2:8a:40:34:0f:4d:6f:dd:
70:57:70:d8:97:bd:18:0c:13:85:bc:db:82:5b:c5:f2:29:30:
48:5c:3a:19:8c:c0:3a:5f:00:ee:40:60:87:82:d3:45:dd:bb:
76:92:47:af:ff:c6:7f:41:a2:e1:2d:4d:6d:4d:7d:14:90:a6:
60:56:25:32:66:52:cc:d7:6a:fd:a8:e3:6d:ee:e3:6a:a7:d2:
ba:25:be:41:00:fb:d6:5a:18:7d:03:02:de:a6:d3:3e:ce:d3:
33:0b:19:03:16:da:21:a4:71:6f:a5:38:e8:05:c2:b6:e2:ce:
38:67:a0:54:36:fd:c7:cc:0f:91:d5:6d:b8:b0:cd:36:93:18:
82:4b:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:46 2026 by rpki-client