
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: Tek2ETs/KcsKiHcLShWJDn1UdXVY2cnGmdmvk4eZneI=
Subject key identifier: E5:82:73:6D:FF:1A:6F:E4:C0:3E:26:8D:B1:F2:48:94:84:DE:8A:E8
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: E6
Signing time: Fri 17 Apr 2026 06:13:00 +0000
Manifest this update: Fri 17 Apr 2026 06:12:59 +0000
Manifest next update: Fri 24 Apr 2026 06:12:59 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 0vP9y+8RrAGiZ7xaL31/SuDxTF1aAvRAAGSohLXx338=)
2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Validity
Not Before: Apr 17 06:12:59 2026 GMT
Not After : Apr 24 06:12:59 2026 GMT
Subject: CN=69e1cf6c-48c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:4e:95:bd:d6:2d:f6:00:7f:29:ec:9e:97:
fd:16:bf:e9:c4:50:4d:4b:70:8b:29:58:72:94:00:
96:78:f5:44:d9:87:d5:cd:d0:50:f6:0c:47:16:2b:
2b:ac:19:9a:80:1f:ca:07:01:4c:d9:cb:7d:ee:8c:
bb:7d:fc:20:c4:93:6c:ad:85:87:49:07:21:3d:96:
d7:7a:3f:fc:cc:61:b3:86:76:e1:3b:58:ee:06:ef:
da:c3:5c:5c:dc:1a:b3:f9:5a:95:e4:93:bb:c8:b8:
bf:5e:0c:29:c3:34:bc:b1:99:b8:3f:ac:9c:04:57:
5d:26:9a:f3:09:09:c3:c4:71:fb:05:88:09:2a:0c:
dd:26:18:ec:31:1f:c3:30:73:28:60:55:35:95:5e:
4f:c0:7d:77:67:02:a0:5d:95:2c:34:96:53:57:7f:
bb:a3:1d:04:9f:1c:3f:66:22:53:b2:60:f3:df:22:
91:9c:0f:df:81:30:a7:8b:ae:4d:28:ba:9e:0e:be:
1b:e7:71:7e:c1:97:56:90:82:4b:6c:65:37:27:99:
a3:5e:70:7e:42:55:fb:ff:08:4c:e3:02:b1:a1:d4:
49:af:b8:de:b8:d8:48:8a:c8:5a:27:d5:cb:bc:3a:
1d:d7:eb:df:a1:03:ae:f7:18:ee:ed:06:35:96:c3:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:73:6D:FF:1A:6F:E4:C0:3E:26:8D:B1:F2:48:94:84:DE:8A:E8
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0b:1b:68:93:4b:71:fe:f3:0c:d0:bd:0a:0e:db:8c:f6:68:
ee:b7:91:91:88:ed:6e:ee:cc:1c:be:7e:c5:fc:48:da:4f:29:
32:95:69:0b:93:da:2c:34:5a:90:53:5e:95:dd:ba:66:58:b0:
2d:16:f1:b8:b0:d3:bd:1b:f6:3a:4d:fd:7d:5e:ef:72:89:07:
e0:28:4f:9b:74:ba:70:af:05:e5:97:a4:42:47:cb:6b:7a:22:
37:e4:4d:4d:f1:b0:3f:e0:de:99:18:0e:8f:de:1b:44:a9:6b:
8c:d8:9a:66:85:26:b2:71:06:ab:c1:cb:d7:ea:96:42:d7:7a:
0c:28:cb:e7:e4:33:6a:46:22:16:8f:29:0b:7e:10:c4:75:6d:
2d:d9:bd:e4:86:26:89:14:2c:dd:c1:9f:ce:73:33:b1:82:43:
0e:5e:fe:b4:13:3c:7a:b7:19:87:b0:46:e4:07:e4:85:e3:35:
18:71:31:4c:1d:61:a0:57:0e:2d:b3:bf:da:9c:3b:96:68:10:
90:d8:0f:75:1c:56:c4:9f:21:12:77:7b:a3:e0:84:95:22:e3:
48:26:4c:16:e9:5a:c0:28:52:47:a9:03:65:4f:22:b8:3b:33:
93:fa:a5:44:77:48:27:18:4d:ce:0e:e5:47:13:65:f2:e9:63:
52:2b:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:59 2026 by rpki-client