
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier: 4l7NiRoQoBiKpiwoROj1gT8TyG1Bl9JcCkdKUnfBHGI=
Subject key identifier: F5:27:B8:E8:D6:1B:4F:93:0F:5A:BF:53:DC:60:DD:0E:08:70:76:C8
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number: C4
Signing time: Fri 09 Oct 2026 07:31:19 +0000
Manifest this update: Fri 09 Oct 2026 07:31:19 +0000
Manifest next update: Fri 16 Oct 2026 07:31:19 +0000
Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: II4uDTt5TzYC9RqNYF5cHj0+MxskmP7oLviMnBuZb64=)
2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: u3oEvbx75itItu1LUPoKhhJ7vNGvSPwwEcVgmBYaNDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Validity
Not Before: Oct 9 07:31:19 2026 GMT
Not After : Oct 16 07:31:19 2026 GMT
Subject: CN=6ac89847-8922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:2c:7d:41:e5:08:e3:34:f2:4c:fd:dd:e3:
e9:82:ec:a6:06:34:d5:5e:90:75:7e:6e:f9:be:e3:
28:fc:13:25:b3:ce:64:05:05:31:e2:f3:59:48:13:
29:06:24:89:86:ef:77:00:9c:54:52:01:97:43:93:
09:4d:59:56:b9:27:04:df:e6:10:08:93:fc:fd:c9:
55:e5:5d:03:0a:fb:3b:65:68:bd:72:b2:af:42:8c:
ac:a4:e6:eb:39:0d:a4:d8:9f:66:99:00:60:fb:10:
86:03:b6:22:bd:89:08:06:76:cf:e7:d8:b5:61:a2:
d8:21:58:83:28:0c:13:6d:de:c0:c3:a7:a3:7b:bc:
21:07:e1:c1:fd:bf:5d:77:92:08:86:96:06:bb:0a:
e4:b2:f6:17:12:2b:16:a7:91:99:a9:c7:02:b8:d3:
68:99:f4:e1:e4:eb:65:21:fc:be:50:0e:97:73:4c:
a8:c2:f5:18:fe:c3:60:44:8c:f5:64:e5:47:11:af:
79:e7:ad:af:df:b1:e0:10:07:df:72:a0:bd:f4:5e:
cb:d1:bd:58:e6:33:a2:c3:fa:53:64:83:8d:56:ae:
79:27:c7:06:b2:c7:d3:06:38:24:01:23:87:d9:a4:
6e:26:ba:85:ee:82:5e:8a:6f:eb:ca:90:ef:8a:4a:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:B8:E8:D6:1B:4F:93:0F:5A:BF:53:DC:60:DD:0E:08:70:76:C8
X509v3 Authority Key Identifier:
keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:f1:f3:d8:1a:a1:a3:37:30:09:5b:dd:79:1c:22:e4:a8:
23:87:cd:da:0c:bf:cd:2b:2e:ac:a0:67:1f:10:3d:69:e0:af:
f9:a6:05:0e:ae:cf:08:dd:16:83:88:83:22:1f:31:6a:2b:73:
a6:8e:3a:6a:ff:d5:32:89:8e:a2:c0:d2:44:36:f4:66:e0:4a:
e8:19:d3:da:a4:63:31:6d:c3:60:85:cb:9c:ea:8c:ad:9b:04:
a2:fb:1a:98:9a:f6:14:14:e7:06:a7:e2:ab:d4:36:f6:ed:99:
26:6d:6f:06:c7:40:66:99:e7:6c:f4:54:ed:da:fe:46:37:40:
dc:40:e4:52:8a:16:4d:3a:8d:de:b2:d3:c5:2f:6d:18:be:58:
d2:fe:fc:9f:f7:6f:72:9b:86:ab:41:ca:f8:54:e4:cd:a1:dc:
e0:aa:28:c6:d5:78:46:8b:0c:09:f5:4e:fc:69:da:59:73:37:
66:cc:62:02:94:9f:cd:58:11:48:94:d2:55:85:51:6e:27:81:
06:d6:b2:2d:58:ec:bb:f2:69:c8:72:d7:4f:0e:22:f3:7c:3d:
87:ac:41:68:5f:64:f3:f1:57:59:50:a0:d4:c7:36:1f:81:ea:
8d:e6:d4:db:57:57:15:3a:39:87:e9:3f:2c:a6:0e:b5:f8:f4:
f4:24:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:35:24 2026 by rpki-client