
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier: NNQ9R+PI+BDy0BnyhCkVRVrH+dvAdKjzMS6nMN+qG98=
Subject key identifier: 7C:B5:42:FC:CD:3D:35:87:82:FB:FC:49:7A:6E:A4:58:4D:DC:A2:2A
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial: 0CE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number: 0CDE
Signing time: Thu 16 Apr 2026 18:14:40 +0000
Manifest this update: Thu 16 Apr 2026 18:14:40 +0000
Manifest next update: Thu 23 Apr 2026 18:14:40 +0000
Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: U+CYXdNSws/N8yyCyJV/3Ty0Xr+bcTpdEsSxTyMSCZs=)
2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Validity
Not Before: Apr 16 18:14:40 2026 GMT
Not After : Apr 23 18:14:40 2026 GMT
Subject: CN=69e12710-6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:60:34:ff:39:1f:d4:f6:95:58:6f:73:c2:
ca:1f:92:31:67:a6:9b:4f:10:70:98:d5:e9:e6:61:
a7:a2:9f:dd:78:4c:f9:2d:e9:28:09:a9:1f:fa:3e:
ee:9b:5f:71:4b:b2:ce:04:7d:b9:97:9a:17:68:0f:
fe:55:2b:8f:9d:88:b3:e7:58:8a:1d:3b:be:47:60:
ef:1e:9b:06:94:e5:cb:62:95:ad:36:88:aa:22:fc:
29:64:97:db:c1:06:51:6c:0c:f9:71:fc:77:f4:08:
b3:1a:a8:1a:fb:74:c2:a0:2e:d2:56:65:53:42:ca:
e8:d7:3c:75:bb:d9:da:bc:08:d8:0b:84:f2:d5:59:
eb:9a:d7:4c:29:0c:48:81:90:e2:fb:fe:c7:15:d3:
dd:a3:b7:41:98:61:e7:75:b8:42:fa:73:2a:1d:8c:
5f:d1:8b:ad:2f:6f:71:b0:02:8d:dd:40:15:e6:b0:
73:76:dc:18:e7:53:39:0a:56:de:9c:01:6d:73:43:
63:e9:8f:76:54:18:7a:b0:4a:d7:56:ab:c8:34:2d:
e6:36:cd:7b:92:87:99:89:61:b3:24:70:f2:37:34:
bd:bf:2f:22:01:f7:cd:8e:1c:32:cf:e1:51:52:a8:
ec:95:f0:e6:64:f5:8c:5c:29:8e:51:19:4d:8b:ed:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:42:FC:CD:3D:35:87:82:FB:FC:49:7A:6E:A4:58:4D:DC:A2:2A
X509v3 Authority Key Identifier:
keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:9d:35:63:70:65:1b:fb:26:a5:ba:93:92:95:8f:c4:52:
f3:c3:8b:c6:6b:21:f8:fd:aa:e4:97:f2:8a:bb:dd:d0:cd:b6:
c0:39:2c:29:95:8e:a4:7d:32:a4:64:05:69:36:af:6d:c3:18:
e6:0f:37:e8:96:cd:d6:3c:32:f2:32:64:9c:d5:bc:7b:0d:eb:
58:18:64:09:85:35:5c:88:d3:a5:29:0d:fb:a6:f7:a6:a3:3a:
5f:0b:40:26:e9:5b:5f:7f:1c:3c:55:e5:f2:51:62:6b:fd:7f:
6c:bd:15:6f:55:5c:f0:73:75:7a:1b:c1:21:04:e8:93:80:43:
f2:99:17:c8:b5:7b:85:4a:af:0f:5f:e8:fd:af:29:19:4e:e1:
e1:e7:df:9a:62:c0:85:86:10:43:46:b6:8f:2a:9c:ff:12:f3:
7b:f8:4c:94:e4:a3:82:f3:5f:3c:36:d4:d4:fe:c4:cc:78:0e:
16:f1:a0:b7:02:f2:ac:3e:bf:ce:42:e5:de:9a:fa:48:54:40:
bc:e1:19:cb:f1:86:d3:f2:a3:91:99:bd:74:aa:84:82:09:be:
a3:6f:de:43:dc:ef:02:78:ab:bb:9f:2b:a3:85:8f:b4:66:48:
ba:75:e3:83:e4:62:ec:3f:94:1b:cb:3d:83:2c:f1:24:49:a0:
d9:b9:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:40 2026 by rpki-client