
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json)
Hash identifier: 5w7Q2uHg6FYyLACsaVXlaAbvsyHVWVXgep7YKB5G7wo=
Subject key identifier: A8:51:C0:AF:8B:47:40:D6:00:E2:E0:CD:31:63:F0:FA:EE:83:3E:F5
Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
Manifest number: 0241
Signing time: Fri 17 Apr 2026 02:12:28 +0000
Manifest this update: Fri 17 Apr 2026 02:12:27 +0000
Manifest next update: Fri 24 Apr 2026 02:12:27 +0000
Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: qxDhRLicCipECJUomCV2lDydkrpONBMgdMAfYA4cRGQ=)
2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: rd/wAvSucL3KznyqiuFkW7+IzcHszwzgGGaI1AWvgdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Validity
Not Before: Apr 17 02:12:27 2026 GMT
Not After : Apr 24 02:12:27 2026 GMT
Subject: CN=69e1970b-4c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:c9:c4:55:df:08:96:f4:b2:64:ea:d1:b7:
b0:f0:6d:3f:b3:82:dd:d2:87:75:ce:22:3c:58:0a:
f5:f7:00:8e:2e:a6:b5:f6:5f:f6:78:6f:ac:ce:51:
41:db:bf:a7:3d:be:8a:0d:f3:df:a3:47:3d:fe:b9:
b1:a9:a7:c1:55:16:5c:c5:59:23:fc:a9:ad:c5:57:
cd:55:e8:84:f5:0f:4a:51:f9:de:15:ff:c0:a4:31:
86:b6:48:80:98:dc:04:b1:ba:3c:ba:c0:42:fd:97:
a4:68:02:bc:c3:8b:f9:f3:30:fe:12:85:41:10:25:
79:71:2e:06:9b:fd:48:a0:f1:4a:21:c5:6e:c0:3d:
39:c6:bf:80:ce:f7:e6:45:cb:51:57:bf:b2:19:c2:
47:a0:7f:31:b9:c0:ef:d2:b8:f6:f0:50:7d:40:0a:
55:de:cb:54:87:e8:e7:e9:d0:29:7f:7f:d2:64:1d:
a1:6b:78:17:3f:c5:21:4c:92:86:47:35:7a:ef:3a:
3e:20:28:d9:6e:ac:83:9c:44:8f:ad:b4:72:c6:54:
04:ee:10:b7:6c:44:ff:a3:38:67:aa:1e:af:8f:a1:
99:91:94:e8:0a:ed:59:ef:32:80:76:f1:a4:43:76:
6c:c8:d2:63:a2:af:90:2a:b7:6e:37:c1:d7:e1:38:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:C0:AF:8B:47:40:D6:00:E2:E0:CD:31:63:F0:FA:EE:83:3E:F5
X509v3 Authority Key Identifier:
keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:8d:97:86:fd:9e:33:ea:3e:39:f8:6a:08:b2:85:0e:5d:
55:eb:22:8c:d4:20:db:3a:45:1b:60:14:e3:68:c5:4f:1e:ad:
3b:8c:fb:88:5e:c1:1e:dc:6c:47:59:75:7e:10:72:39:de:98:
e7:d7:c2:1e:aa:3a:5a:12:5c:f7:2a:12:18:71:e9:4e:14:e2:
e7:9f:60:19:b9:58:1a:08:86:ec:be:ae:18:51:dc:c0:06:3e:
93:ea:91:18:7a:d0:94:c2:96:ba:fa:5c:3c:ef:aa:ca:b9:47:
6c:8c:3d:90:df:e0:60:e9:87:83:0b:2d:da:11:b1:0f:90:d0:
b0:cf:32:28:d6:bf:24:7b:a9:5a:ea:17:36:9c:e8:79:49:33:
3a:08:b3:79:85:49:8b:3d:f6:9f:22:44:15:4e:18:a4:94:5c:
0d:c7:0c:f5:5b:fa:8a:0a:4a:96:ba:6b:2f:a3:5b:fe:5d:1d:
6d:b7:aa:1d:ef:c2:4f:f8:6d:f5:c5:52:08:77:cd:31:12:2d:
e7:ef:a1:6e:bd:16:76:68:70:aa:fa:92:cc:57:93:10:c6:bd:
f2:79:80:fe:c4:27:bf:55:a4:1e:23:df:3b:93:42:61:25:af:
9d:1d:bb:b2:fa:a8:41:2d:7e:34:b2:c4:fe:ae:32:96:4e:af:
07:87:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:43 2026 by rpki-client