
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json)
Hash identifier: aeLR/apfJ7tgNgpPSbMs3VhSby5B5l56/6u1vrJM+R4=
Subject key identifier: E6:FD:16:67:94:E4:AD:D3:87:6D:C6:A1:EB:DF:00:CE:C2:DB:F6:2C
Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
Manifest number: 012E
Signing time: Mon 21 Sep 2026 05:38:17 +0000
Manifest this update: Mon 21 Sep 2026 05:38:17 +0000
Manifest next update: Mon 28 Sep 2026 05:38:17 +0000
Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: kUfpuEQstZc20MenbyS8FWuCtI/Xqd0wVhVVcR+t9so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Validity
Not Before: Sep 21 05:38:17 2026 GMT
Not After : Sep 28 05:38:17 2026 GMT
Subject: CN=6ab0c2c9-19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:57:70:7d:99:7a:3a:e8:33:5b:f6:8e:ee:
bd:37:8b:4c:46:c2:21:05:8e:90:3a:06:21:67:15:
bd:1d:55:92:fe:6b:fc:a4:53:0f:c8:4f:d0:49:e6:
46:64:7c:0f:1e:f6:9e:ee:fb:04:13:e7:e2:2e:5f:
2d:3d:67:24:86:70:b4:59:5e:37:7e:cc:5d:78:c6:
83:e6:9e:67:95:c8:b7:cc:1d:6d:8d:5b:05:42:4c:
8a:9c:69:c5:1d:e7:bb:3f:0b:1e:8f:f9:4a:d9:34:
cf:f5:40:38:a5:72:56:94:4e:ec:45:93:78:d6:6f:
a3:3c:e2:04:ec:37:ee:f3:49:a4:d3:75:16:a4:db:
63:09:61:06:83:2a:5b:03:ed:09:6e:e8:88:48:3f:
14:a9:01:5d:cd:02:47:78:33:b4:ae:ce:85:a3:f4:
fa:17:db:59:8e:54:41:7e:59:03:99:b1:8d:6d:a7:
ef:a0:da:9c:d3:d0:fb:54:65:f7:cf:b7:d9:ab:46:
70:fd:c8:74:5f:71:f4:e4:51:ec:35:54:01:bd:f9:
c8:06:71:b1:86:97:96:ea:f6:0e:f5:d8:ad:1d:39:
0f:5e:18:68:52:61:d5:8c:c2:68:f8:64:6f:b0:6e:
24:91:95:31:69:2d:97:ff:11:f3:3c:98:68:b9:41:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:16:67:94:E4:AD:D3:87:6D:C6:A1:EB:DF:00:CE:C2:DB:F6:2C
X509v3 Authority Key Identifier:
keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b6:46:71:70:6d:84:b5:ea:92:e6:25:9d:d3:28:e7:65:0c:
bd:96:f9:eb:b3:03:36:db:7f:40:b3:4a:a7:8c:a2:e4:af:87:
93:9d:33:27:d0:40:c3:d0:14:13:bd:0c:eb:d5:54:2a:5e:cd:
a0:df:71:5c:82:3b:bc:da:74:ff:b5:84:bf:3b:35:a3:4e:87:
de:d6:e3:7a:7d:8e:18:9a:1e:96:60:c0:52:4a:2d:de:b2:d4:
4b:70:cc:b0:b1:f1:98:f5:22:08:5d:aa:1b:38:c0:e7:7e:00:
9d:a6:5b:4d:bc:f6:ce:6e:8d:82:26:4c:81:a1:36:41:ff:c3:
71:10:7f:a2:2a:b0:66:2b:cc:0e:ca:2d:4b:90:15:88:fd:61:
ec:27:f3:c5:04:0d:8c:64:6d:e0:a3:5c:7f:bf:53:3c:e6:71:
61:a9:44:f2:a4:cb:9f:da:06:71:48:b7:56:29:cc:41:e2:0d:
47:bc:ce:4c:8b:55:06:f7:de:48:a2:6c:2b:d1:a2:7e:6b:a3:
d7:5f:44:62:85:d6:e3:8d:34:20:14:b9:70:81:d4:8c:af:06:
31:42:73:b1:5f:f6:c3:8b:bc:38:59:68:00:3f:14:fa:de:7f:
32:98:1f:57:2e:0e:0e:03:74:b6:04:71:19:4f:71:d8:af:01:
32:59:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:44:32 2026 by rpki-client