
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier: 6Ae05RwVEen2n4fAj4bBmbrlRfKdFjUJmPjxiujY+Ww=
Subject key identifier: DE:15:19:C1:AB:30:68:C5:C2:EC:19:66:A4:4E:A7:1B:B4:04:2E:8A
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial: 353D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number: 3531
Signing time: Thu 16 Apr 2026 15:07:35 +0000
Manifest this update: Thu 16 Apr 2026 15:07:35 +0000
Manifest next update: Thu 23 Apr 2026 15:07:35 +0000
Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: 9x3FMcKHt3rZQ2XsQQBlBoQYkq0zOj7muIbBpMQn4PE=)
2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: H6okVBbXA5R44ceAsB8vN/16AqSmiHbSqzPIsnHvUSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Validity
Not Before: Apr 16 15:07:35 2026 GMT
Not After : Apr 23 15:07:35 2026 GMT
Subject: CN=69e0fb37-fe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:01:ec:19:01:00:a1:3e:4f:5f:cf:bc:f4:
52:ed:44:56:bd:7b:07:a7:b3:7d:e4:24:52:41:d1:
8d:d4:42:13:73:bf:2a:bd:13:c1:aa:46:d0:be:bf:
42:56:82:5a:76:b7:62:2b:a7:2f:01:31:5c:10:fb:
83:05:59:18:62:14:a2:3a:28:f6:e2:6e:4f:b0:d7:
8a:1b:4a:42:a9:15:91:0a:74:a8:b4:82:93:52:78:
a3:03:d2:98:36:8b:c6:f2:96:bc:0b:4c:9b:37:6a:
8e:1f:61:ab:d4:ec:db:00:34:c5:58:08:44:65:94:
52:67:cf:b7:ea:6d:8e:7a:dd:0b:38:ed:b3:6f:a2:
aa:4b:5f:c3:f3:7d:ab:66:01:c9:bd:a6:a9:fc:a8:
b8:3b:3b:9f:17:fe:bc:53:a9:bd:2c:f9:0d:4e:ab:
60:c1:fc:5a:f1:44:8d:49:e0:e4:4e:c3:ce:ee:6a:
1b:37:7b:7d:fb:b8:b5:dc:af:ac:64:ae:37:09:af:
55:70:d1:1f:96:2a:f3:3f:17:2f:6d:95:35:d5:58:
f1:8f:9b:53:27:e8:50:02:b4:6a:59:b0:ce:f2:18:
23:82:82:3e:eb:87:e8:b9:26:c8:00:5b:4a:55:8b:
00:b3:39:bd:98:00:bc:07:d7:90:0a:e3:0d:61:09:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:19:C1:AB:30:68:C5:C2:EC:19:66:A4:4E:A7:1B:B4:04:2E:8A
X509v3 Authority Key Identifier:
keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:76:61:e9:72:2b:1a:0d:97:48:96:0f:9d:04:22:f7:38:06:
bc:18:d3:c3:69:3b:d3:ab:6d:92:ae:99:c5:d9:8f:d1:81:b6:
64:f5:03:03:28:8e:de:c3:0e:c6:f0:a7:32:35:77:ec:52:4d:
7d:25:59:f3:45:a8:b0:32:b1:69:7d:90:79:14:23:22:b3:51:
8e:c4:15:38:d1:f4:c6:20:a5:b7:21:ce:5a:0e:91:ba:5f:93:
a3:2e:42:a8:dc:c8:c7:0d:9d:8b:e6:96:b6:2e:5a:8a:ab:a6:
e2:ef:dc:19:8f:df:1c:f7:65:2e:03:07:03:1b:a0:31:94:ba:
70:79:93:f6:91:d1:42:84:fa:62:3b:52:ce:bd:b7:c6:de:00:
80:33:6c:6a:bc:6d:ca:74:d8:b2:1c:90:5e:76:dc:2d:57:2b:
6d:1e:37:86:92:94:ae:ff:aa:06:03:df:0a:2a:1c:b3:f6:c6:
09:d3:19:da:17:5b:97:77:ba:66:4a:b6:99:ae:3f:87:17:f3:
4d:a9:fd:cd:fb:ff:30:88:9e:44:4b:e0:fe:76:3e:b5:33:35:
1e:03:10:27:61:64:8e:4c:d3:40:62:eb:e3:39:30:45:ad:28:
22:da:37:b6:ff:c1:b3:00:6a:86:5b:4e:23:ea:88:7f:90:8c:
0c:f7:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:38 2026 by rpki-client