
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json)
Hash identifier: Zve4Bo7u6RQ5BNir3pHau+mqZJdlvVyTsexU3DM31Pc=
Subject key identifier: 3E:2F:BB:E5:58:ED:CD:F8:09:0C:82:1A:AF:4E:87:94:F2:07:26:9C
Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03
Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
Manifest number: 0257
Signing time: Fri 17 Apr 2026 02:01:26 +0000
Manifest this update: Fri 17 Apr 2026 02:01:26 +0000
Manifest next update: Fri 24 Apr 2026 02:01:26 +0000
Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: eCyDaT7enUmIE5vSiDfvPZleJ/IeDo+HDYO6Rrae1Ps=)
2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl
rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
Validity
Not Before: Apr 17 02:01:26 2026 GMT
Not After : Apr 24 02:01:26 2026 GMT
Subject: CN=69e19476-42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:71:38:cf:f0:7f:eb:8b:8f:22:df:95:7b:
d1:be:35:ef:53:4c:f5:71:fb:ea:8e:31:26:c1:05:
69:b4:59:da:a8:37:ee:5a:c7:7b:b8:a7:8c:06:a2:
bb:44:02:db:27:21:e4:bb:c3:cb:1b:9f:69:34:3d:
68:56:57:31:eb:85:8a:39:fb:db:fa:48:24:62:e1:
6f:73:13:7e:b0:c3:f4:63:ec:6e:3a:62:96:4f:0b:
aa:95:f9:fd:5a:2d:29:d3:70:8d:e1:98:53:d4:85:
1d:35:12:74:59:2d:6e:2f:74:2b:28:d5:8a:a3:86:
ea:5c:97:f3:ee:59:10:57:5e:4c:90:93:8e:ae:dd:
c9:c8:5b:e4:4e:84:e7:63:37:ea:6b:69:8d:d0:23:
64:b3:2e:9b:d3:a1:14:43:4b:fa:d8:01:51:c9:73:
f6:2e:fc:7c:91:c0:c5:57:21:25:c8:25:1b:5d:f1:
23:94:db:74:b5:a3:15:7e:10:cb:a5:d4:79:df:30:
2c:f0:4f:a9:6a:c3:96:22:39:8e:df:42:28:3e:68:
45:4c:b9:66:8f:d2:b5:f3:50:ec:b1:ef:8e:fb:fa:
3d:bc:97:f1:5a:b9:82:2b:27:0d:8e:d5:3d:2e:dd:
e3:b8:cd:fa:90:e9:52:2d:04:b4:2c:d2:63:42:70:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:BB:E5:58:ED:CD:F8:09:0C:82:1A:AF:4E:87:94:F2:07:26:9C
X509v3 Authority Key Identifier:
keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:7d:4c:e4:5f:42:e7:3e:bf:bb:8c:85:37:66:ef:ca:e3:
07:80:82:22:0e:df:6c:96:12:9c:cb:3b:6e:01:d7:e6:61:70:
88:fc:c9:c3:70:cf:2f:02:b2:2f:a2:91:e0:c3:d7:6f:5c:5e:
db:73:21:b8:a8:d7:bf:44:d4:64:43:94:b9:d5:8a:14:98:fa:
66:ba:9c:ed:e1:c7:f5:a9:bb:00:e7:e6:8d:bc:9c:ab:9b:09:
17:b7:ef:6b:77:eb:fe:c7:ff:74:81:b9:d0:f5:d4:ce:84:15:
ed:de:4d:eb:3b:e1:68:8e:47:95:86:36:4a:e6:77:d3:2c:7b:
04:f6:df:d6:d4:f3:c6:85:ab:78:a0:df:36:1f:88:0b:79:dd:
51:71:b2:50:7a:eb:ba:67:1e:a8:e5:e5:a9:06:3d:cb:54:f4:
b0:19:6e:45:57:e7:4d:71:a2:02:b4:b6:70:2b:45:af:30:59:
6a:60:7c:eb:26:38:ba:56:a6:63:e4:c6:4b:67:fc:b6:b9:36:
02:be:ba:fa:b8:42:3f:c6:58:05:d9:5b:8d:03:91:c8:41:50:
82:f4:3f:f3:6c:ac:50:b9:5a:8e:8e:aa:c4:bf:a3:5f:02:5e:
f7:e4:28:cd:98:c7:d5:51:f9:b2:95:5f:b4:42:39:72:85:9b:
52:63:f4:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD
QjcwRTc0MDMwHhcNMjYwNDE3MDIwMTI2WhcNMjYwNDI0MDIwMTI2WjAYMRYwFAYD
VQQDEw02OWUxOTQ3Ni00MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35NxOM/wf+uLjyLflXvRvjXvU0z1cfvqjjEmwQVptFnaqDfuWsd7uKeMBqK7
RALbJyHku8PLG59pND1oVlcx64WKOfvb+kgkYuFvcxN+sMP0Y+xuOmKWTwuqlfn9
Wi0p03CN4ZhT1IUdNRJ0WS1uL3QrKNWKo4bqXJfz7lkQV15MkJOOrt3JyFvkToTn
Yzfqa2mN0CNksy6b06EUQ0v62AFRyXP2Lvx8kcDFVyElyCUbXfEjlNt0taMVfhDL
pdR53zAs8E+pasOWIjmO30IoPmhFTLlmj9K181Dsse+O+/o9vJfxWrmCKycNjtU9
Lt3juM36kOlSLQS0LNJjQnBFdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4vu+VY
7c34CQyCGq9Oh5TyByacMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC
NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf
VEdLbVA5OWFfdm5MY09kQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFYN9TORfQuc+v7uMhTdm78rjB4CCIg7fbJYSnMs7bgHX5mFwiPzJw3DPLwKy
L6KR4MPXb1xe23MhuKjXv0TUZEOUudWKFJj6Zrqc7eHH9am7AOfmjbycq5sJF7fv
a3fr/sf/dIG50PXUzoQV7d5N6zvhaI5HlYY2SuZ30yx7BPbf1tTzxoWreKDfNh+I
C3ndUXGyUHrrumceqOXlqQY9y1T0sBluRVfnTXGiArS2cCtFrzBZamB86yY4ulam
Y+TGS2f8trk2Ar66+rhCP8ZYBdlbjQORyEFQgvQ/82ysULlajo6qxL+jXwJe9+Qo
zZjH1VH5spVftEI5coWbUmP0CQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:33 2026 by rpki-client