
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier: QFJYOV0g49Ny9TxQXvpKhGkjt8VOiWHgo9YhA1DVq8I=
Subject key identifier: D7:7B:D3:DD:63:68:BF:27:71:E0:17:87:B1:7E:E2:59:8D:9F:20:30
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 25AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number: 258A
Signing time: Thu 24 Sep 2026 15:43:01 +0000
Manifest this update: Thu 24 Sep 2026 15:43:00 +0000
Manifest next update: Thu 01 Oct 2026 15:43:00 +0000
Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: 6zVF2Y/DVVuMvkWc5tNYC+mcyyj6alPhTm9ccJXKKIg=)
2: E507094286EE11F19E006003A7EE528E.roa (hash: nsWM9yKzF5tc+ZfDYi+OoEdvVrdphbJD92x8fp+aXT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9645 (0x25ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Validity
Not Before: Sep 24 15:43:00 2026 GMT
Not After : Oct 1 15:43:00 2026 GMT
Subject: CN=6ab54505-361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:be:68:d8:65:01:70:3d:cc:46:e1:5b:8e:
46:aa:b7:34:23:84:0a:e4:69:89:c6:ab:55:dc:d5:
e4:aa:9a:13:eb:1a:27:96:04:6a:7d:b1:a6:3e:00:
1f:9f:0e:06:a2:31:b0:8a:87:56:a2:69:c1:2c:71:
e3:ba:d5:c5:11:d9:c0:70:27:82:61:f3:93:7f:31:
f2:cb:ef:b6:08:83:ed:ed:66:17:bc:e6:f8:0f:d8:
60:c8:85:40:35:e6:3d:e0:d0:3a:d9:67:d1:61:b2:
bc:48:00:90:eb:6a:bf:9f:fb:94:19:d0:43:88:5a:
89:ae:33:ee:41:0c:52:46:75:a9:03:e5:fa:1b:9f:
0d:4f:d4:ff:de:22:5a:52:d6:8e:73:c9:f7:0b:8a:
20:5f:cc:6e:77:07:ad:70:e6:8c:6b:45:ed:f4:62:
38:45:d8:f1:16:a9:45:da:c4:8b:90:6d:3f:c1:ff:
bf:b8:64:1d:18:fe:7e:5d:21:19:cb:be:3d:15:f6:
a2:c0:a8:fa:2a:96:a9:52:be:c7:b9:d0:36:57:57:
84:c4:e7:2f:8d:86:3e:2e:04:06:dd:27:1d:05:28:
be:9d:54:7f:3d:9b:0d:56:89:f2:8a:aa:3a:1d:8d:
73:2b:9b:82:45:aa:60:fd:86:04:16:4d:76:81:a5:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:D3:DD:63:68:BF:27:71:E0:17:87:B1:7E:E2:59:8D:9F:20:30
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:62:9c:a4:ec:cd:4d:1c:c2:c4:78:f5:09:e9:57:a4:7e:
50:19:7c:db:0d:0a:3b:9b:a7:4f:e0:a4:94:4f:78:02:8d:2c:
43:d2:0a:6e:44:1b:ae:28:6e:ea:b4:a0:7f:e1:e7:a0:65:f7:
f7:a3:d2:9a:27:d7:6e:8d:7a:23:cd:d9:e6:ad:29:58:96:66:
4c:61:a3:85:37:b8:4d:e5:f9:1f:0e:ea:30:77:d6:49:ba:98:
0c:7a:26:a1:bc:9a:8f:96:f9:22:bc:ef:6f:31:c7:8a:5b:4a:
28:8e:c5:1e:95:6e:6d:a8:4a:19:59:31:da:f6:31:ac:7f:e8:
59:f2:6b:6e:d0:a2:f7:fb:42:49:31:b6:56:eb:c1:8a:53:26:
82:30:1f:99:c2:02:c3:0e:0f:54:f0:49:3f:9f:f6:cb:0f:dd:
c5:ca:10:2c:4e:b9:64:49:36:aa:10:2b:93:fa:62:ce:34:f9:
49:be:4c:e3:e4:0a:14:85:dc:2d:3d:68:39:e8:94:6f:3c:d6:
35:4d:d3:ae:ac:3b:d3:e5:b5:b9:f5:b2:1c:0c:58:ce:9d:d1:
85:d9:bc:5b:eb:ab:d5:35:00:ec:93:9c:83:18:b9:a8:5b:44:
62:d4:fa:51:43:e4:20:75:6a:b8:d2:b9:16:c4:f3:87:b6:10:
be:68:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:16 2026 by rpki-client