
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: 9dp2OmBtgx8/h2U9epTmW9c7WbH/UUXxhU6H1evHhNY=
Subject key identifier: 64:65:22:3D:A2:E0:04:8E:FA:9D:78:E3:C2:68:68:2A:72:1A:A7:7E
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 02DD
Signing time: Fri 17 Apr 2026 01:15:44 +0000
Manifest this update: Fri 17 Apr 2026 01:15:43 +0000
Manifest next update: Fri 24 Apr 2026 01:15:43 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: hESsnJZh8f/gor0oPIPqQ77mUJC5r4xgFiNsaHZGIpk=)
2: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
3: 89BBD5642D1A11F197364435B4833773.roa (hash: mhRUcRBlgDpdRN3yUVHe2zfzqzBRrJRcQtBUfg0jwmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Apr 17 01:15:43 2026 GMT
Not After : Apr 24 01:15:43 2026 GMT
Subject: CN=69e189c0-c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:b9:6d:31:b4:c6:58:2d:54:c7:9c:68:1c:
fd:a3:3c:f9:3a:b0:0c:aa:5b:b1:a3:34:f8:18:13:
01:0a:ac:37:bc:3f:12:d7:2a:00:5b:f1:a4:32:9f:
d8:b7:0f:d0:e4:41:65:6f:f4:86:af:a8:0a:23:15:
bc:e4:85:41:11:db:63:98:cf:66:8f:ee:eb:c3:ab:
11:c7:06:68:24:0f:77:ec:17:ce:44:4c:c7:79:44:
e7:87:df:1c:44:03:5e:8d:76:3c:67:91:64:ec:a5:
c1:bb:f7:5f:c0:e4:83:15:53:a3:3c:18:8b:98:b6:
fa:08:11:eb:92:59:c9:cd:7d:92:60:33:1a:0d:c3:
75:a1:0c:d3:8d:17:3f:12:f4:16:ec:5c:c5:de:b4:
36:0b:60:d1:38:d3:4d:62:1e:f7:d3:50:e0:06:37:
0f:f9:7b:48:bc:73:fa:10:e7:c7:3c:44:69:71:f4:
87:73:90:78:50:d9:14:a3:81:22:0a:2c:a8:54:30:
59:70:f5:7f:21:3c:92:26:6d:5e:12:0a:6c:e4:a4:
df:b6:ee:3e:18:c6:99:2b:dc:13:4f:d0:b7:6f:32:
4f:32:a5:4a:fb:52:13:27:85:35:01:eb:40:1f:0f:
a7:0e:00:9d:62:0d:a9:cd:f1:f6:1b:be:59:c5:b4:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:22:3D:A2:E0:04:8E:FA:9D:78:E3:C2:68:68:2A:72:1A:A7:7E
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:28:2b:4d:83:21:54:9f:4f:34:cb:fd:a8:5c:44:fb:63:5c:
6b:4a:be:dc:1d:5e:5c:09:1d:c6:98:6d:1d:69:9d:6a:01:61:
41:ce:21:ce:75:9d:a4:88:b5:aa:4e:d8:84:fb:81:25:3c:48:
6e:df:6b:0e:e4:77:95:69:e4:06:a1:b1:ae:cb:1b:77:74:4d:
b0:4f:4d:dd:c4:a7:b1:db:0b:1f:9f:8c:c4:59:1d:a9:20:5c:
73:1c:db:bc:1d:78:67:63:e1:bc:3c:1d:c3:0c:6c:f0:e7:aa:
0b:4e:41:a8:79:f8:34:c8:ae:c0:d4:2b:5c:16:cb:c5:b5:a2:
0c:75:79:51:7f:18:df:b6:0d:e4:dd:ae:99:6e:75:70:f4:fc:
0b:14:32:b7:f7:14:08:62:aa:e5:e5:df:15:ed:d7:d8:4b:55:
98:c7:09:13:3b:b4:77:63:11:19:1d:e8:1c:4d:fe:33:4e:69:
77:86:ec:35:36:15:f5:bf:84:94:24:b5:b1:e7:74:1d:7a:35:
d5:d3:77:8a:98:72:d4:dc:bc:ce:7f:6c:bd:22:96:8f:72:87:
a6:b6:4a:b3:d7:d6:1b:3c:2c:ab:9a:88:70:9f:a3:ba:ee:c6:
d3:03:5a:f8:3e:fd:d7:04:5e:3f:b4:2e:96:a2:f7:ad:e8:0e:
bd:63:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:14 2026 by rpki-client