
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
File: CIaR8feL2c7-2A021lDWd2emvbA.mft (raw, json)
Hash identifier: YN0BZubF5bmHTWPZvFflTmdWOUZa4ffAmhkwD6b/Imw=
Subject key identifier: 66:02:53:FC:EE:5B:95:7C:40:C6:FA:5A:98:D8:DA:CB:4D:55:00:26
Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
Manifest number: 0881
Signing time: Fri 18 Sep 2026 20:43:32 +0000
Manifest this update: Fri 18 Sep 2026 20:43:32 +0000
Manifest next update: Fri 25 Sep 2026 20:43:32 +0000
Files and hashes: 1: CIaR8feL2c7-2A021lDWd2emvbA.crl (hash: iEYBFmfJECm1KO+Wqik6vlaU8P21BOjOdiLqblhmvw4=)
2: F126F04A11A911EBB5A4DD83C4F9AE02.roa (hash: gKg5HfquJDWxf6FguB+IjVE9zWcFlZAOKarqs8xULuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl
rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0
Validity
Not Before: Sep 18 20:43:32 2026 GMT
Not After : Sep 25 20:43:32 2026 GMT
Subject: CN=6aada274-b79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:47:d9:4d:f1:9d:eb:49:84:5e:8f:27:11:
a4:f3:67:95:b5:72:83:7d:b2:81:af:52:b8:24:58:
dd:04:cb:d8:6b:e4:57:55:ac:a3:1b:9b:11:94:2d:
c1:e9:84:5f:5e:7a:1f:1b:46:4a:14:20:92:af:bc:
d3:f0:45:13:fd:b3:8f:e2:92:58:66:3d:f7:3b:78:
d9:bb:21:17:8d:82:af:fe:8e:66:0b:18:3d:62:be:
05:b6:b1:f1:fd:70:f8:5c:fb:90:71:d2:8e:89:79:
4d:b9:5a:69:4a:09:f6:38:ed:85:6e:13:58:0c:f6:
e4:f5:41:66:6d:a3:d5:4e:8a:0b:1a:c5:eb:28:ff:
7a:bb:55:bb:30:24:38:a7:36:9a:d5:3c:be:29:ff:
22:72:dd:5f:13:db:b9:5d:6a:cc:02:d2:09:e0:17:
54:07:5c:ee:4f:65:99:4d:f5:47:c8:75:c3:87:a2:
d4:49:96:a7:9c:e1:5c:90:21:29:2b:c3:fe:ec:29:
31:dc:13:38:11:74:e3:f7:04:80:ac:9e:26:e8:9f:
a6:12:ec:b5:67:a1:4f:6e:f3:15:21:32:72:d6:7c:
5e:39:40:fd:12:5b:e0:78:2a:11:65:1f:2a:82:89:
09:a8:1d:b2:53:d0:f0:f4:e2:38:71:fb:fa:95:4a:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:53:FC:EE:5B:95:7C:40:C6:FA:5A:98:D8:DA:CB:4D:55:00:26
X509v3 Authority Key Identifier:
keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:7f:24:14:af:42:25:fe:e6:66:01:25:36:fd:04:93:8b:fa:
d0:f9:a1:ea:3b:3e:57:1a:0c:69:a8:1d:a7:45:bf:6f:e0:55:
ca:49:b2:be:32:75:f7:22:da:c8:94:7e:95:8d:2a:27:6a:d2:
49:c8:c9:54:7c:1d:b7:72:cc:14:8d:74:af:c8:d9:9e:d3:e4:
08:4a:ab:71:99:03:f8:97:8a:90:af:70:cd:34:2d:3c:46:a8:
09:ae:c5:16:c1:3f:1c:3b:04:03:85:86:fb:b5:dc:33:2f:f7:
2a:07:f3:85:c1:03:58:0c:32:a4:c8:93:73:03:6c:b2:6a:f9:
49:0b:fc:de:32:ab:e3:da:97:81:73:e4:62:01:9f:79:6b:0b:
af:f7:2a:a6:37:84:26:b1:e9:56:f9:1d:0b:2d:a6:97:09:b5:
6c:2e:79:12:67:b4:1f:ed:5c:1e:28:c9:4c:4e:57:c9:b9:c8:
b7:06:a3:e0:01:62:a2:b6:30:98:a3:4a:4a:4d:96:7e:6c:50:
35:f3:2e:9a:21:81:15:29:6d:45:6f:fa:4d:b5:19:ba:02:2d:
51:a3:85:87:db:82:37:46:d2:22:51:b6:6f:c9:5a:c5:b0:40:
b8:2d:ab:d7:be:c6:4b:7b:3c:59:64:ec:79:bc:ba:6e:94:c2:
14:3b:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:11:22 2026 by rpki-client