
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File: U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier: GQ3Q9loAgIN1Dsrm6PQ66P1VUMwImgA7+ADBCA6vJyw=
Subject key identifier: 0B:2B:94:B8:F7:85:9C:7F:D4:E1:BF:04:E9:38:3B:64:61:A0:AA:BA
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer: /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial: 0A35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number: 0A0A
Signing time: Mon 12 Oct 2026 20:00:49 +0000
Manifest this update: Mon 12 Oct 2026 20:00:48 +0000
Manifest next update: Mon 19 Oct 2026 20:00:48 +0000
Files and hashes: 1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: 7T04e4aeiBuAJIJeoi794wHS/3E93xkgIutCKR301sY=)
2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: UYJjUuDuK1W3HsQFdJ/davmP3gSwAU5pFdDlWucm3no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Validity
Not Before: Oct 12 20:00:48 2026 GMT
Not After : Oct 19 20:00:48 2026 GMT
Subject: CN=6acd3c71-1f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:29:92:ad:dd:bf:2c:7c:6a:e1:69:6a:ad:
e3:ab:cd:7f:ca:ec:cd:78:74:9c:0d:03:47:f6:94:
ee:2a:46:66:de:f6:07:95:c6:de:b0:9c:b6:bc:9e:
b3:b6:61:ed:bb:77:cb:90:e2:08:af:f4:c4:cc:8e:
d8:a6:56:b2:4a:1c:bc:8a:41:db:a4:57:a7:d8:39:
0e:0d:65:68:ef:c6:84:0c:f4:2c:65:b5:60:37:75:
13:bb:21:97:33:f0:a7:69:87:98:6d:a0:1a:fa:bb:
2f:2c:6f:69:6e:1b:e3:0c:71:6c:89:b8:96:f3:22:
e6:8b:11:58:ad:b3:15:c2:88:8a:ea:c7:5d:82:ab:
90:5a:75:85:d0:d5:47:96:18:6c:15:82:6b:2d:29:
81:36:e6:07:17:4d:81:36:e4:41:ba:33:0c:2b:75:
76:30:04:59:35:90:2c:b6:ec:24:45:57:59:af:3e:
bc:5c:87:ad:85:d9:cc:6a:6c:70:8e:1f:5a:74:e8:
25:5d:9b:70:46:70:fc:b7:2d:95:d9:5a:d0:ac:8e:
b7:71:da:c5:da:3b:26:22:c4:63:1d:37:b1:17:75:
5f:2b:48:67:0d:7a:f7:89:78:c4:b0:7d:06:cb:8a:
8a:64:9b:42:fc:78:50:60:5b:09:72:c9:8f:03:1e:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:94:B8:F7:85:9C:7F:D4:E1:BF:04:E9:38:3B:64:61:A0:AA:BA
X509v3 Authority Key Identifier:
keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:19:9f:98:e6:b1:b3:82:93:1a:a5:e6:dd:62:c5:ca:7c:
5d:1f:57:fe:4d:a4:26:56:f0:07:44:3d:8b:68:53:22:7a:f6:
38:54:0f:6e:d1:b3:ba:92:01:ce:0c:bb:c8:e8:b7:54:7d:47:
66:5b:2f:34:f2:16:c9:29:a4:ea:2d:8c:18:07:e4:3f:6a:92:
c9:ca:04:49:48:11:22:5a:23:7f:13:20:82:b0:46:d1:13:10:
31:41:ef:bf:f9:34:8a:76:53:24:45:69:63:34:24:1a:d5:1d:
e1:d7:47:83:fc:86:56:4c:2f:d2:de:bf:d5:02:9d:87:5e:f4:
e1:ac:f8:6a:a6:99:b8:1d:a8:66:3c:a7:c9:e2:80:48:cb:2f:
3e:c9:82:09:e1:7c:50:89:f5:42:7d:50:ad:7c:8a:4a:9b:a4:
9a:97:1d:7f:cd:2f:41:3a:2f:3a:05:13:54:f3:f4:8e:5a:51:
5f:4b:ce:df:42:d8:fa:8b:86:99:9f:7a:91:d4:c5:62:14:ac:
0f:3f:62:46:ac:2f:e1:82:06:c8:74:52:75:fb:35:a9:75:15:
a3:9f:52:40:d0:e5:88:92:55:03:b7:86:52:cc:55:26:15:9e:
25:5b:b0:55:ec:28:3c:66:93:24:3c:7f:bb:50:96:8b:66:46:
8d:2d:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:59:18 2026 by rpki-client