
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier: rk2fc8wAVyQgWCZKRfxpVeCNUG+Fih5VpBFsfJrOYGI=
Subject key identifier: CD:63:30:08:B8:F7:77:6E:1B:13:B2:21:DB:3C:03:FB:5C:18:F5:12
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 05A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number: 057A
Signing time: Sun 20 Sep 2026 23:10:50 +0000
Manifest this update: Sun 20 Sep 2026 23:10:49 +0000
Manifest next update: Sun 27 Sep 2026 23:10:49 +0000
Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: RyXdFBHpiuRwaF16SSpOVKyVNh/nCt/57HhCbE1oGV8=)
2: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: VCY6VieVb7TG2U03HIBFTaPiwgKuFeeeP7S9R6dlJ6E=)
3: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: XS0xAK4nnF7Dq2UBrvrKqZgDFOkN/XmKJyB81kCEows=)
4: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 6vDTx1Sxq8tUZv93hoBcq2yOxm15beDyF9zkAam3IFw=)
5: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: veDCLElENt6wbI9mRj7E75/CdxbPil5hBlzZcPWTVIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Sep 20 23:10:49 2026 GMT
Not After : Sep 27 23:10:49 2026 GMT
Subject: CN=6ab067fa-0405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:97:45:15:e9:f9:00:37:4b:ac:6c:03:d0:
08:4f:1b:75:8f:ce:29:91:04:21:de:09:db:4c:6f:
bf:bb:aa:2f:67:57:b3:78:c4:48:88:f4:8e:e0:13:
9d:7d:be:28:bc:50:71:eb:1a:fc:c6:6d:4f:4b:cd:
d4:cd:e6:1e:12:75:65:df:3d:b2:21:22:6a:4c:a7:
1e:fa:97:5b:19:6b:a2:33:58:b9:2d:c7:76:a1:71:
4f:27:a9:a3:f2:70:68:8a:e2:99:33:3d:a6:55:20:
4d:f9:60:e0:66:75:18:ec:0a:50:e6:93:e4:fc:d8:
89:ee:bc:2b:9a:61:2f:a9:82:fe:4d:fa:0a:34:82:
c8:c2:2d:77:1f:58:83:b5:a9:b4:e9:f3:80:0a:a8:
c9:28:5f:18:9e:89:5e:6c:fb:d7:3a:9f:07:1e:57:
ba:06:01:e7:6d:f8:e9:9b:40:9d:b9:b7:c3:b2:29:
f6:e6:c8:00:f1:38:db:3d:8b:a2:1f:f7:40:ec:c6:
e1:74:9b:35:10:ee:1a:d1:50:de:f6:2c:d0:4d:6d:
5f:6e:7a:e5:31:c3:68:30:a4:e6:d0:6a:3d:af:bf:
fc:a6:fa:e6:9d:b2:72:cb:74:4e:e5:bd:0d:48:8e:
e9:81:06:f9:77:d4:75:0c:16:15:3c:9d:63:b9:70:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:30:08:B8:F7:77:6E:1B:13:B2:21:DB:3C:03:FB:5C:18:F5:12
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:fe:b3:b4:44:67:3f:b2:0d:05:3e:36:32:54:97:31:07:
a5:d7:7c:a7:78:da:ef:50:0a:c2:a1:ec:42:dd:75:42:9a:11:
94:f8:fc:b2:02:a0:92:97:f8:78:92:54:02:88:48:9d:7d:73:
49:d3:28:da:a1:5d:2c:7a:c6:e0:65:e3:d0:0f:ea:a0:8b:8b:
16:12:fa:04:57:b9:1d:3c:03:30:1f:3f:c7:87:85:65:db:ef:
c4:ac:d7:ec:49:46:7d:0e:fc:8b:ea:f5:d8:3d:20:39:e3:20:
37:f4:91:2a:b2:be:77:be:80:c0:6b:48:8d:d1:6f:ec:c1:7b:
1c:d2:20:5b:b6:84:7f:ec:99:17:71:e8:d3:99:77:83:2a:27:
fa:4f:92:67:38:fa:43:71:5a:f4:f7:ed:cf:35:83:cf:e5:1b:
67:42:09:5b:5d:29:74:71:35:8a:52:0d:10:8e:c1:22:9e:e5:
24:cc:84:37:a6:89:19:aa:1e:e7:9c:4d:56:61:27:0c:c7:06:
91:e8:85:46:e2:fb:76:90:43:91:90:8b:7c:13:d8:d1:d1:52:
53:55:ba:f0:41:90:ba:79:39:b1:d8:61:7d:0e:75:8c:87:3c:
c9:23:98:d6:e9:1b:13:0e:72:6f:8b:1f:7f:50:ad:dd:58:9d:
a5:ac:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:15:47 2026 by rpki-client