
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
File: U150NDn0nPv9SODvV-b6fUsxGq8.mft (raw, json)
Hash identifier: lCOMZL0mg9WJ6Q/s66PKXQNq/qDrEoyYUaZhYB3cALQ=
Subject key identifier: 92:A6:CF:04:66:61:EC:5C:3E:0F:D3:44:27:AA:7D:B8:51:23:4C:2D
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Certificate issuer: /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
Manifest number: 27
Signing time: Fri 17 Apr 2026 07:09:36 +0000
Manifest this update: Fri 17 Apr 2026 07:09:36 +0000
Manifest next update: Fri 24 Apr 2026 07:09:36 +0000
Files and hashes: 1: U150NDn0nPv9SODvV-b6fUsxGq8.crl (hash: KgCIqLwBWZhK0nlSLSefUZpoeIGma5dMD1fykGKleB0=)
2: 4FF63D680FE911F1BED32952083D8C67.roa (hash: L99vsE7QVMrcPtMmR6OsKMR7Y2Rb3mEx/QNb9KOL/Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Validity
Not Before: Apr 17 07:09:36 2026 GMT
Not After : Apr 24 07:09:36 2026 GMT
Subject: CN=69e1dcb0-0c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:73:6b:ff:2f:9b:0e:c2:78:9f:4e:80:49:
9f:de:fa:c9:67:c1:8c:36:5a:6b:64:ae:46:21:6e:
6b:11:bb:03:8b:8c:28:23:89:8b:cc:63:4c:ba:83:
9d:31:be:82:50:05:d8:9b:48:ed:8a:4d:69:59:40:
da:8f:a6:a3:29:77:fe:72:d6:82:ab:c4:1c:50:d2:
c3:8a:93:11:fc:74:62:4e:89:5d:6b:ba:60:fb:2c:
9a:50:0e:9d:ca:08:da:9e:7f:c9:ae:5f:06:f9:cc:
94:c8:2e:75:64:01:e9:af:85:b8:d2:ea:be:48:fc:
73:69:ad:0a:6a:87:f5:a2:4e:42:cb:bb:de:3b:66:
cc:2b:43:54:73:fd:a0:f0:7b:89:9f:2f:12:57:a9:
de:46:e0:0f:4f:00:57:cd:f6:04:d6:f0:6d:84:74:
6a:19:bb:be:65:95:62:35:80:cf:c7:8e:59:62:d7:
b2:0c:bf:50:24:4b:97:54:a3:ea:26:73:41:3f:50:
8c:25:8f:65:a0:81:e1:1d:56:aa:2b:c6:1c:9c:78:
70:28:7f:e8:16:99:a6:02:64:1f:1b:2c:ff:87:9c:
96:48:4c:86:2c:f1:4a:96:6f:29:8d:11:70:88:26:
ac:08:f2:95:e8:7f:76:c8:0a:05:46:34:9c:d4:0d:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:CF:04:66:61:EC:5C:3E:0F:D3:44:27:AA:7D:B8:51:23:4C:2D
X509v3 Authority Key Identifier:
keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:4c:45:c5:aa:69:28:37:b5:26:b3:bd:e6:e6:69:09:2e:a1:
11:5f:96:f3:d3:27:ba:7f:80:b6:22:11:e8:2d:bd:f0:d9:6b:
86:8e:42:2b:e9:31:98:f4:e8:e6:a6:a4:8f:21:50:25:76:d4:
f1:c5:ee:ad:1b:a4:57:e3:45:0b:16:c1:54:6b:c7:24:db:1c:
cb:97:99:9f:88:b1:db:68:c9:5d:55:a0:fd:5a:af:3f:c1:26:
b0:5a:85:90:f3:a6:96:dc:01:f3:b3:1e:5c:8f:2f:e9:22:fa:
83:4f:cd:b1:a3:62:f3:a7:ed:c4:5b:69:4a:d2:68:dc:a4:33:
09:03:07:94:4f:f6:ee:70:98:3b:2f:11:96:25:26:1e:2c:d2:
76:6b:30:3e:2f:a7:f3:1e:6c:5d:e6:c3:d6:7e:88:39:41:62:
fc:25:0c:93:f8:fb:e1:c6:81:f5:09:83:16:8f:99:50:71:88:
6c:48:44:1d:9b:37:73:7e:fc:79:51:b0:5a:80:2f:b0:03:11:
06:35:53:6a:47:00:eb:fd:a9:b6:e3:4b:79:87:84:4b:63:1a:
76:ab:9b:bb:76:0e:69:9a:d4:86:51:4f:c8:6d:c9:31:a2:60:
11:f0:f6:18:76:d3:fa:e7:75:b9:38:82:32:df:78:7c:dd:6d:
29:46:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:40 2026 by rpki-client