
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
File: C4zb4QaNRa7HNM5wBquUwKTEoME.mft (raw, json)
Hash identifier: CQFMdnZAwMSbsPx165HGj2Xb9aaEfrtFnCdpRLE+cJY=
Subject key identifier: 38:EF:8D:61:71:1F:F8:0F:6E:00:A1:55:91:49:B0:2E:93:5E:DA:B4
Authority key identifier: 0B:8C:DB:E1:06:8D:45:AE:C7:34:CE:70:06:AB:94:C0:A4:C4:A0:C1
Certificate issuer: /CN=A9178F3F/serialNumber=0B8CDBE1068D45AEC734CE7006AB94C0A4C4A0C1
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
Manifest number: 30
Signing time: Sun 11 Oct 2026 09:20:11 +0000
Manifest this update: Sun 11 Oct 2026 09:20:10 +0000
Manifest next update: Sun 18 Oct 2026 09:20:10 +0000
Files and hashes: 1: C4zb4QaNRa7HNM5wBquUwKTEoME.crl (hash: TeRt+X3/20rOkVlV6i4GqRlgyto9l3gR9DPSUIY0fRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.crl
rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178F3F, serialNumber=0B8CDBE1068D45AEC734CE7006AB94C0A4C4A0C1
Validity
Not Before: Oct 11 09:20:10 2026 GMT
Not After : Oct 18 09:20:10 2026 GMT
Subject: CN=6acb54cb-323c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:43:23:40:ff:5a:3e:17:e6:ab:9b:f2:6c:
51:6f:81:26:be:ec:cd:8b:bc:49:24:34:d7:ad:5b:
6b:0b:58:e9:ac:3d:39:fd:cd:1f:3c:b1:bd:19:3e:
5c:35:56:6d:14:e7:84:44:13:93:f9:13:c0:61:25:
94:d3:fb:d4:21:4d:66:fa:74:13:73:f3:bc:4c:d2:
b2:c0:6c:79:b7:31:37:63:d2:b0:3f:af:92:4d:be:
00:7c:16:f1:db:56:a9:db:f8:ec:a6:eb:40:ad:aa:
f8:bc:b0:8b:50:17:7d:21:fa:a6:86:19:15:23:8a:
00:e7:aa:40:22:24:03:a7:2d:35:6f:8c:dc:4a:5f:
ae:f6:8a:4f:d7:c6:3e:8a:91:43:fe:3f:48:0f:bd:
80:03:42:7d:63:72:f9:15:aa:73:22:96:ce:24:6b:
e4:bc:e3:ae:fc:24:62:79:83:6b:46:02:76:30:7f:
ce:cb:00:9d:5d:e9:88:2b:aa:2b:f8:45:2d:2d:88:
7b:96:dd:b4:b9:20:5f:7e:77:26:3f:37:6b:64:03:
e3:63:04:2a:a0:ac:51:2f:0d:71:d4:ca:97:4b:9d:
cb:d5:b5:66:03:9f:34:d0:04:cc:ab:e3:2f:61:d3:
ba:18:48:4a:8d:1f:9b:29:4c:b7:86:2e:51:a3:c7:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:8D:61:71:1F:F8:0F:6E:00:A1:55:91:49:B0:2E:93:5E:DA:B4
X509v3 Authority Key Identifier:
keyid:0B:8C:DB:E1:06:8D:45:AE:C7:34:CE:70:06:AB:94:C0:A4:C4:A0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:64:ab:83:a9:fc:e3:a2:7e:58:fe:d1:37:3d:22:e2:4e:b2:
20:81:30:1e:72:22:48:c4:92:f4:40:4f:4d:99:a7:2b:9e:12:
52:a9:3a:92:78:c9:7c:88:e5:ca:b8:38:73:c5:ef:bb:92:3e:
1e:25:70:60:11:7a:d8:c1:74:ce:24:1b:c8:7d:ec:d6:be:7f:
2c:6b:23:50:5a:5a:1b:50:f6:cd:c7:74:fb:f8:94:1d:64:96:
81:ba:e5:63:08:c1:03:42:4a:4f:d4:a6:9f:e3:a7:97:17:56:
57:2d:01:32:a1:c2:c9:a7:71:9e:7d:22:98:b4:8d:d3:7d:38:
84:be:e2:51:e2:a8:0a:45:d8:cb:c0:6e:d6:3c:bf:bb:95:c7:
ab:27:3d:38:1d:c3:d7:04:ff:9b:02:16:29:53:6c:52:4b:0a:
f9:e4:ba:35:ed:c6:0d:c4:a5:63:23:09:0a:5f:ea:56:a5:4c:
2b:b8:aa:04:9a:9b:82:c3:dd:b1:01:46:35:83:ae:c3:65:f6:
ee:bb:3d:e2:88:d2:4d:07:11:a7:53:76:d8:46:90:17:7d:dc:
bd:d8:32:a7:a6:5d:9e:ba:3a:60:55:9f:a8:13:20:7a:81:40:
32:2a:62:fb:87:10:0b:ea:8f:0a:32:95:c2:8f:3f:49:6e:b8:
79:90:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:19:20 2026 by rpki-client