
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier: meQxq2ciDG18qRHRIIid4wtONZA1F9mIkJ34pv6BtJA=
Subject key identifier: 84:80:9F:6C:28:A8:AD:24:AF:53:F2:42:73:AF:7F:37:83:9B:C5:E8
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number: 0141
Signing time: Fri 17 Apr 2026 05:00:23 +0000
Manifest this update: Fri 17 Apr 2026 05:00:23 +0000
Manifest next update: Fri 24 Apr 2026 05:00:23 +0000
Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: YhwBoRILSCP0hjxsvQJcswvoFWA4ERKCL+DvQCq8Op0=)
2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: 2l8xLgb7twy5Bkmhr6ns+WC6YsJMu/Z43ymaiIWxyEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Validity
Not Before: Apr 17 05:00:23 2026 GMT
Not After : Apr 24 05:00:23 2026 GMT
Subject: CN=69e1be67-b368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:8b:57:2e:93:4b:72:a8:9a:32:87:87:f8:
de:13:55:87:19:1a:7d:2b:7c:b3:c9:a2:9a:05:9d:
ca:c7:7f:c5:0e:bb:26:fe:17:3c:c8:ec:93:63:bb:
03:e4:de:85:b0:be:90:52:87:02:02:29:8b:0d:6b:
b8:e6:af:f7:57:1c:7a:77:42:d6:29:d3:66:41:2e:
32:ce:08:5d:45:cd:5d:a6:f2:a6:9d:f2:32:b9:a9:
8e:55:bf:4f:47:af:c6:b2:71:55:f9:03:b6:72:70:
c6:00:54:30:e8:b0:da:4b:ba:e8:59:b7:d9:cd:de:
d4:35:e9:43:a5:3a:91:94:7f:fb:de:21:59:99:c8:
b6:05:60:78:59:fa:40:f7:b6:4e:b3:d5:d0:c5:f3:
a0:6e:b0:15:fe:f5:6c:9e:de:2e:51:a4:81:e2:b3:
07:50:99:58:c9:15:90:e7:b7:ef:93:1c:00:ca:fa:
6c:73:35:03:37:22:31:3a:64:49:52:d6:8c:c9:81:
f5:93:8b:a7:1d:16:e2:6f:c5:d3:a0:bc:dc:97:e9:
48:89:94:e1:b2:be:05:c9:ef:d1:20:eb:b1:7c:05:
8e:0f:73:91:6a:70:d3:a3:7c:c6:fd:f7:91:04:ba:
5c:35:b7:de:0c:47:08:2b:1d:02:54:2c:11:71:cc:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:9F:6C:28:A8:AD:24:AF:53:F2:42:73:AF:7F:37:83:9B:C5:E8
X509v3 Authority Key Identifier:
keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:94:78:e1:29:3c:31:d1:a2:49:f6:50:a2:bc:0e:11:fd:1e:
4e:4b:c7:5d:61:48:c4:57:10:8e:74:97:3a:a8:cb:f0:fa:f5:
1e:2e:17:e1:a4:c9:aa:5d:0f:59:19:0f:df:4b:d8:d7:2f:60:
a4:f9:d0:28:1e:a3:3c:90:f0:51:8e:e2:0e:a0:83:97:f5:9c:
b1:88:29:19:8a:7e:66:a8:1f:2c:14:b9:15:e4:58:a2:a4:bf:
70:d1:ec:94:7d:dd:ac:0e:b0:f9:03:be:7c:01:89:73:ec:c1:
f7:cf:80:da:f7:61:74:ec:8d:73:52:31:2c:0d:98:47:3f:04:
d0:3b:4f:98:f2:46:a5:be:f9:c8:7d:ac:7f:e0:c5:ab:06:d0:
8c:95:dc:65:cd:f6:d2:24:0a:3b:12:db:88:20:85:f3:d6:9d:
55:1e:ae:da:f5:c3:c3:a4:81:82:09:dd:11:64:d4:cb:e1:6c:
21:46:1b:b4:12:f7:c7:b9:30:97:dc:50:31:72:95:82:96:a6:
77:23:8d:35:25:da:f9:7c:5f:00:6a:1f:55:0e:48:de:62:eb:
f8:f3:35:b5:6d:18:91:17:e5:39:c3:64:3a:36:50:1d:3e:5b:
44:27:31:e0:70:57:32:a1:3f:8c:f4:80:29:cf:5f:5d:6c:93:
e8:19:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:02 2026 by rpki-client