
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: Gx109m1Wq/Dna44gYkvipXFT6coabGq68aHCj0XO5g8=
Subject key identifier: C2:4C:3B:9D:41:5D:62:40:B4:F3:03:1F:AC:EC:14:98:CD:E2:89:00
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: 01B4
Signing time: Thu 16 Apr 2026 22:57:06 +0000
Manifest this update: Thu 16 Apr 2026 22:57:05 +0000
Manifest next update: Thu 23 Apr 2026 22:57:05 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: CDIEsFw3MCJ+9Mn4ZnkISiOJnVaFU1IeZn3v7Hk8wVU=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Yv6bUlsD/jxVLpyWhyU1eut2obLAQwxoOOHmIUOMRcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Validity
Not Before: Apr 16 22:57:05 2026 GMT
Not After : Apr 23 22:57:05 2026 GMT
Subject: CN=69e16942-cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:2d:7e:21:d4:96:e9:54:31:a3:6f:91:e3:
c2:38:22:12:03:02:74:62:fd:ed:6c:6e:75:ee:08:
80:e0:6b:72:80:81:13:99:e0:07:09:88:0e:02:91:
35:6f:21:90:e0:ce:a4:04:aa:89:09:40:bf:dc:ba:
fb:74:a1:19:89:33:36:fb:74:bd:18:49:9a:18:b8:
49:4b:9c:55:97:39:12:15:ce:7e:a3:4e:2f:28:24:
a7:f5:66:41:9e:c5:b0:25:39:3d:dd:f8:ce:4d:91:
41:4c:02:0d:f3:24:73:17:18:16:b7:8b:5a:d7:2d:
cb:b5:17:cf:57:b1:bf:07:ed:35:ff:f4:de:85:5f:
13:66:f2:b1:55:e2:42:4a:63:ca:81:3c:2b:85:9c:
32:26:b6:b7:e8:e6:fe:df:17:92:d1:2b:f2:49:37:
e8:17:62:fa:84:7f:32:30:ab:bb:f7:5e:28:3c:b6:
a3:b0:a9:11:31:e0:5a:af:e9:e4:a3:91:b8:24:84:
ad:ce:7a:51:d0:5f:62:8f:a2:69:d5:79:48:53:7d:
62:13:53:27:71:cd:6a:c1:af:be:82:d9:7c:d5:c0:
af:87:22:0b:93:f2:39:be:47:37:66:c0:23:d3:1c:
e3:93:2b:b7:39:1d:77:76:f9:91:0b:be:b7:0e:37:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:3B:9D:41:5D:62:40:B4:F3:03:1F:AC:EC:14:98:CD:E2:89:00
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:dd:9f:58:46:d0:2c:5d:43:d0:66:5c:22:7b:d5:61:38:
f7:e4:94:1b:ce:ad:af:02:c9:fb:7a:dd:7c:fc:a5:7c:f1:e5:
b2:f6:89:7e:68:22:56:e8:08:24:e7:bd:0e:65:ed:c5:fd:10:
d8:9d:51:85:65:2a:7e:f2:6e:9e:f8:d0:ed:ed:9d:cd:d4:48:
0a:f6:d6:80:76:c8:4f:5a:e6:b7:f0:fc:b8:81:7b:51:8f:9f:
cb:0e:34:2f:80:4e:4f:4a:00:a1:f8:8e:67:79:f5:83:28:1d:
3d:99:5d:56:19:05:74:d4:0f:8b:ea:d2:9e:55:da:44:c2:97:
0b:a6:25:82:ad:ed:e4:99:14:e4:2b:4f:ef:3f:31:14:74:5b:
13:ce:7e:61:e6:df:dd:49:c3:27:0a:65:14:ad:fc:55:c8:99:
7f:e5:03:54:02:38:1d:6a:97:17:2e:e7:45:96:01:51:67:1b:
ce:0a:52:d9:d0:b3:0a:11:a2:ff:14:af:38:f8:71:a6:04:ba:
bc:bf:4d:bd:d4:c5:d4:1f:1b:e8:81:ad:7c:6f:87:0c:9d:2b:
e4:94:01:35:d8:96:d6:2c:38:fb:a2:99:17:f9:8c:68:15:29:
d8:8b:c0:86:36:14:e0:72:4b:bd:52:81:c0:c8:58:5d:f3:14:
6f:fb:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:04 2026 by rpki-client