
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: kiPPr3+uKEkKtIptU6VHzgb/e1lXEo0k1VcKZOzlEOY=
Subject key identifier: C9:11:66:35:06:2D:49:22:82:FB:68:BD:19:82:04:ED:22:56:BC:D6
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 0230
Signing time: Sat 19 Sep 2026 02:50:23 +0000
Manifest this update: Sat 19 Sep 2026 02:50:22 +0000
Manifest next update: Sat 26 Sep 2026 02:50:22 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: VS2AfnxCpqzfwOttAsJpQmM64pKZ81dWAftN6u0AckI=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: UKDPjI9WdhK3TxDp03my1LqNHeP49K9ROo6jRcr9k9A=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: c2JKhfp9s44ucWPUaCMBJfqkty8QtrYxSxQneezFfq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Sep 19 02:50:22 2026 GMT
Not After : Sep 26 02:50:22 2026 GMT
Subject: CN=6aadf86e-3a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:33:7f:7e:4a:2a:51:aa:55:80:b0:b6:a4:
4b:07:0c:9b:e2:e4:0d:5e:f9:d9:4d:e7:03:de:2b:
4e:f5:4c:44:bd:06:18:4c:33:1a:27:9f:71:a7:02:
b5:86:1b:40:c3:2a:bf:e5:95:43:04:e5:80:ae:c2:
a3:16:76:22:31:b0:da:71:f4:a4:a9:3a:f9:5c:ce:
9f:0d:fa:fe:0e:71:14:75:5b:bf:99:42:20:44:e5:
4a:1a:95:3d:39:9a:a2:d8:75:34:eb:e8:d1:a1:05:
1c:6d:ea:98:ef:a8:aa:a7:4d:b9:25:51:53:eb:d8:
d4:61:ee:a8:b9:67:70:38:4f:03:f6:50:9d:31:4f:
d9:86:34:43:ab:2d:d7:b2:23:91:fd:2b:e1:28:09:
af:1a:0b:92:7f:fa:15:ac:44:bc:f3:f7:ad:26:65:
c9:05:f4:be:0d:3f:0f:f2:45:42:38:20:b8:8f:69:
c4:fe:8f:52:e4:46:17:56:b0:67:00:b3:cc:5b:52:
ec:d3:08:2d:55:35:74:63:89:6a:f2:a2:59:a4:6c:
45:61:6e:20:1a:73:cc:5d:09:97:fd:db:50:27:44:
03:65:8b:88:0d:64:3b:78:e1:49:59:3d:f0:95:5d:
c2:63:0b:a5:2d:4b:d7:4b:c7:be:4e:6f:52:1a:fe:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:66:35:06:2D:49:22:82:FB:68:BD:19:82:04:ED:22:56:BC:D6
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:ed:0d:2c:05:d3:63:76:99:a3:34:ab:17:17:9e:ea:1b:
01:00:44:00:55:12:1e:66:a0:8c:c6:e0:94:da:08:cb:4a:2a:
3e:b3:ec:ad:32:36:c7:37:12:29:48:04:01:f6:10:47:25:b7:
cf:b6:69:90:b2:bf:f0:d5:e2:81:21:f3:c7:59:19:b2:3c:0c:
10:90:52:53:a6:05:1d:31:5d:6e:46:8f:85:db:09:f5:e7:f0:
d5:bb:d0:73:f2:e9:62:4b:73:a7:54:4d:23:e8:fa:5d:94:da:
69:51:bb:fa:50:af:a2:83:6d:24:56:df:eb:79:20:b9:f6:53:
1f:23:d5:b7:af:0f:d6:6d:8d:e6:a5:84:34:7b:c2:b5:ec:84:
d6:30:48:10:54:e2:45:8c:10:e0:c3:6c:2d:f5:3c:e9:71:59:
58:6f:74:65:94:f8:b4:96:88:f8:ae:5a:2c:11:23:00:6a:2f:
ae:bc:dd:79:9b:72:01:de:69:16:b9:31:5c:69:4d:82:5f:8c:
03:55:2d:6c:e1:91:22:1e:08:d5:5a:38:2b:2d:00:50:7e:7c:
47:3a:b9:61:d6:28:bc:9b:01:9c:de:ba:53:fe:44:66:8c:db:
87:e6:e5:e3:4e:20:b2:f4:7d:58:f5:a3:7c:41:6f:d0:9e:db:
f8:2e:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:23:41 2026 by rpki-client