
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier: 3GQvblt8YZCa2ZYxstu9EOp4dzN4KYk5vphLcVDu5ZQ=
Subject key identifier: 4D:D8:4E:04:96:0E:70:4C:DA:80:6C:FB:29:73:B5:EE:A8:F6:17:6C
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number: 0230
Signing time: Sun 20 Sep 2026 18:51:34 +0000
Manifest this update: Sun 20 Sep 2026 18:51:34 +0000
Manifest next update: Sun 27 Sep 2026 18:51:34 +0000
Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: w8+5sMh/JgRAMHkU5+DdaJp5gk4SoSbncqEwMSsTjR4=)
2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Validity
Not Before: Sep 20 18:51:34 2026 GMT
Not After : Sep 27 18:51:34 2026 GMT
Subject: CN=6ab02b36-a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:62:27:05:36:d6:2d:20:73:ef:39:88:32:
1b:6a:07:5c:66:d0:25:d1:e2:01:22:3f:d9:b8:33:
06:23:75:3b:49:c0:dc:05:66:cb:af:88:fb:84:b3:
d4:e7:34:0f:6f:f7:14:d8:24:47:90:06:5b:6d:d4:
e4:ac:1e:8e:57:88:1c:3f:47:65:36:4b:6d:a1:21:
91:4d:f4:f0:d5:66:2f:d2:12:f7:33:8e:a3:24:d0:
f8:3a:78:c7:f2:58:21:59:be:7b:fb:bf:cf:ff:13:
f0:b4:39:19:3f:2b:ab:95:54:a6:a2:97:c2:36:d0:
2e:a5:bb:99:f1:0e:e6:5f:f0:7a:70:34:c5:89:6f:
6c:7c:18:cb:a4:2b:d5:bb:62:4a:a3:8b:e8:b5:4a:
49:24:88:f4:da:2d:d7:b2:8e:6b:1c:56:01:d6:77:
68:f5:f5:0b:48:94:97:09:3b:c3:71:1c:aa:ce:76:
67:17:1c:fe:96:3f:b3:48:dc:d2:13:6e:f4:2d:02:
86:07:77:86:40:fa:69:6a:fd:16:45:6c:30:84:4b:
07:c1:37:27:6d:b2:f2:5c:68:27:cf:42:91:f9:20:
42:54:55:4b:e1:90:bb:74:b7:a3:ad:71:89:4c:9b:
2e:e1:ce:55:08:d5:5a:81:7c:4e:c6:fd:27:7c:87:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:4E:04:96:0E:70:4C:DA:80:6C:FB:29:73:B5:EE:A8:F6:17:6C
X509v3 Authority Key Identifier:
keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:32:24:a7:1b:34:53:86:f4:77:48:d5:d5:6a:5e:77:e1:
48:70:62:0f:94:44:5a:1c:49:8b:78:1a:89:3e:ec:dd:88:fb:
64:c3:65:61:1e:0b:26:d4:87:6b:92:37:39:13:82:b6:84:0d:
d0:b2:60:24:80:37:0e:0c:93:67:38:2a:d1:cb:7b:bf:99:ad:
53:22:b4:11:7a:0c:85:40:68:ba:d8:c4:cd:f6:dc:a7:da:c0:
c9:70:2c:31:8f:38:2c:e2:38:98:18:cf:ad:5f:0b:77:6b:07:
a8:93:fd:38:da:4e:65:df:bb:56:46:10:36:0b:d8:a9:e7:9f:
5a:99:07:21:ed:e0:ef:b0:cd:b1:04:44:4e:00:37:71:39:60:
bd:6d:a8:6a:d7:42:6d:fe:1d:4e:1f:cb:fd:fc:d7:c6:d6:c5:
16:84:68:6d:d8:2a:e8:0a:1b:64:54:26:29:de:d1:fa:02:99:
9a:1f:b5:1d:10:8a:c7:d3:07:4b:1a:e6:2e:7c:45:b2:8b:ce:
98:e1:44:12:45:c5:70:b8:18:01:50:5d:6d:c2:d2:24:40:66:
99:55:7b:66:01:2d:a9:96:87:49:52:ac:73:8c:3d:1a:dd:d9:
1e:6c:00:0c:5e:8c:dc:e6:26:f7:f7:6b:a0:05:ee:7e:c2:f3:
48:a1:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:42:16 2026 by rpki-client