
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier: yeOg+S0P/KRH8zg3gVG8TDHZu6zKtOCPuwwvtQp1p04=
Subject key identifier: A6:CE:BE:63:48:DB:5B:4D:6E:8B:30:1F:32:D7:51:DA:5D:D6:A2:F3
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number: 9D
Signing time: Mon 21 Sep 2026 07:17:35 +0000
Manifest this update: Mon 21 Sep 2026 07:17:34 +0000
Manifest next update: Mon 28 Sep 2026 07:17:34 +0000
Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: o9mQApGv4SrKt8nZTqVktLL5uXYwyO8/oIrYtwIS5FE=)
2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Validity
Not Before: Sep 21 07:17:34 2026 GMT
Not After : Sep 28 07:17:34 2026 GMT
Subject: CN=6ab0da0f-46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:7c:d4:f5:38:96:ba:29:f0:13:58:b4:9e:
8a:cf:01:43:4f:7c:b1:4d:09:0e:a1:9a:5a:70:31:
be:5e:1d:cf:5f:c7:f7:80:92:ca:46:6f:5c:96:06:
8b:00:25:f0:99:b9:0c:dd:21:1a:9a:7d:dd:78:51:
63:95:f7:1e:ab:d1:f9:90:1d:b6:50:cb:63:7a:17:
45:70:a7:3f:81:8e:81:b0:4f:a9:fa:6b:81:db:cf:
42:e7:e2:65:a3:9f:49:13:ae:64:8e:ec:28:5c:21:
43:98:57:f3:d3:2d:9f:c4:7e:05:6f:c8:10:82:14:
65:1f:bb:1a:80:3e:fc:7e:fa:30:0d:34:9c:da:f7:
39:ca:3b:db:9b:ee:a8:e5:2b:c8:88:0b:5a:d2:1d:
d3:13:63:09:48:ad:4f:c6:8f:10:da:50:78:9d:4c:
4d:53:49:a3:10:29:07:4c:30:e0:03:54:2f:be:91:
01:78:81:34:a2:75:73:65:15:de:90:30:49:89:74:
67:5c:a6:4a:d5:d0:90:3c:48:7c:f5:6e:cb:95:34:
95:90:11:1c:2f:61:42:2b:1d:02:44:71:a6:92:f2:
47:9c:ea:78:97:24:b3:df:c2:ec:8c:82:6d:dc:38:
f3:e0:3b:2b:45:39:a3:86:4d:be:22:c9:da:92:1b:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:BE:63:48:DB:5B:4D:6E:8B:30:1F:32:D7:51:DA:5D:D6:A2:F3
X509v3 Authority Key Identifier:
keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:46:23:03:44:90:b8:81:10:41:2e:fe:05:05:c4:7b:bf:
97:14:13:b2:61:b1:68:d2:e7:ab:10:03:e5:f4:a3:38:43:94:
4a:a1:38:3b:f0:6b:21:6f:66:f2:6e:14:41:23:e7:65:a8:0c:
50:dc:7a:23:12:c9:22:63:d9:1a:66:e4:8e:c2:c8:52:76:83:
92:3c:ee:42:e9:f6:3f:86:36:7e:eb:de:dc:77:8c:cf:9a:d1:
36:ee:b4:51:94:57:04:48:a8:48:75:75:f6:b9:82:19:3b:22:
cf:64:65:79:45:58:68:dc:a1:be:81:a1:5d:89:6c:e0:4b:48:
71:b3:d9:f9:cf:5b:ed:b9:cc:f9:ae:24:fe:6f:6c:0c:e3:06:
1f:67:d2:07:23:f1:46:87:88:0f:42:75:a7:82:af:33:3e:93:
05:e5:db:a3:81:01:d9:93:cc:9f:d4:a7:20:10:5e:0a:62:73:
39:d6:33:57:05:9c:0a:cc:ca:6f:d8:f3:ea:29:2f:94:18:b1:
cf:54:3c:49:22:96:66:9b:7d:1a:69:98:2c:ae:78:89:8b:9b:
69:3f:ce:ca:0b:15:f4:19:4e:a1:92:7b:94:e8:87:a1:e6:f1:
5d:49:9e:d1:3d:64:c7:99:22:8a:5b:b8:b7:31:af:d5:e0:5b:
31:c8:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:47:17 2026 by rpki-client