
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File: feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier: yA3SsxrFL40fHQ+9ixJ6lnMY3IIjJVEAglU+869vGSo=
Subject key identifier: 91:8F:50:B5:DA:9A:69:6E:A8:96:46:FB:1B:5B:B9:9C:0A:3F:08:9D
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer: /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number: 018E
Signing time: Fri 17 Apr 2026 00:44:05 +0000
Manifest this update: Fri 17 Apr 2026 00:44:05 +0000
Manifest next update: Fri 24 Apr 2026 00:44:05 +0000
Files and hashes: 1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: WaDZTAdTcvqiwHB9D9ISx00z03kmUSCMm1KQ2A25I8I=)
2: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=)
3: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: 2z+iQiOun9JI4f1KdKp9Mav00oLerc8hIDbuecZ9Avw=)
4: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: 9ZQJr8Gl5XR1HqKf3vTUBCTUhwF96wb5DS0J+eswdL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Validity
Not Before: Apr 17 00:44:05 2026 GMT
Not After : Apr 24 00:44:05 2026 GMT
Subject: CN=69e18255-4354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:cc:71:7a:41:20:ff:1c:e5:d6:82:06:f1:
74:c9:a4:d6:8c:f2:92:71:11:54:d9:cf:20:e9:8e:
47:6a:4c:cc:0c:29:68:eb:d5:75:79:be:54:1d:0a:
1c:29:3a:62:ce:e5:df:5a:61:0f:17:1e:6a:e7:10:
00:2f:82:90:08:9e:b4:e9:81:3b:29:fa:3c:84:f7:
00:13:e3:63:ff:5f:b3:56:0a:1a:f3:2f:5d:2b:51:
c7:b8:81:60:bf:83:85:11:eb:bd:9b:f5:82:0a:b3:
59:ee:65:b9:11:97:76:65:1a:ff:d0:95:7d:ad:dc:
98:20:dd:0f:da:b6:c5:58:95:26:46:44:ab:76:a9:
51:dd:71:5b:97:49:58:d0:fb:12:fd:c7:d6:6d:39:
85:21:b4:7d:6f:24:30:c7:82:4f:ee:c7:71:25:aa:
69:54:01:e0:64:1f:bb:2a:b9:6d:12:74:48:57:92:
8b:8b:c5:88:a8:c6:7c:d3:99:6e:8c:aa:29:b5:08:
25:74:f3:3a:a2:d9:e1:96:b7:9f:92:39:de:bd:f5:
c3:ea:41:f5:38:8e:d7:ea:02:66:14:52:33:57:db:
62:1f:de:d8:32:d6:b5:e5:1a:89:f5:48:1f:a8:33:
27:d9:2e:84:d0:db:89:0a:f1:35:8a:55:96:d6:80:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:50:B5:DA:9A:69:6E:A8:96:46:FB:1B:5B:B9:9C:0A:3F:08:9D
X509v3 Authority Key Identifier:
keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:bf:e2:04:75:c7:b6:ca:40:96:51:9a:c1:c7:57:ed:63:
1d:dc:c4:b9:d8:e8:80:69:88:54:84:8d:f7:d0:23:4f:b5:68:
56:58:be:d2:1c:04:b7:ed:bf:60:99:75:8a:40:0a:03:99:28:
e6:8a:0f:fe:6e:3a:b5:05:31:72:d4:b3:85:cf:56:98:e1:43:
1d:c1:b2:c5:f8:33:90:19:2e:35:b6:2d:d4:21:ac:52:02:0a:
8a:4a:d6:86:09:a8:be:0b:97:f2:c0:0b:68:f9:7d:f6:68:59:
98:31:14:5a:f8:58:d4:35:9c:3a:25:84:cd:dd:72:29:d0:a1:
44:33:82:70:5c:51:42:92:f0:eb:47:db:c1:ae:ac:ae:c0:65:
5a:c1:c9:5a:38:6a:22:8d:0b:e1:07:31:44:52:18:90:c8:4f:
18:11:a5:e8:da:7d:55:47:02:19:26:00:12:35:f1:b2:01:a1:
fd:73:5f:b1:7a:3e:d0:cf:ce:5b:ce:5a:54:c7:88:b6:4a:ef:
4e:8e:5f:a6:21:1a:d3:4e:97:3b:34:9b:e5:3e:de:7f:7b:23:
8f:e1:f6:7a:c7:6c:43:29:74:d8:6c:2a:62:c5:62:25:ff:76:
b6:7a:a5:9c:88:d2:a5:39:42:84:69:9a:04:a6:9a:4f:5e:30:
00:2b:57:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw
MUE3NTk5MjEwHhcNMjYwNDE3MDA0NDA1WhcNMjYwNDI0MDA0NDA1WjAYMRYwFAYD
VQQDEw02OWUxODI1NS00MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwLMcXpBIP8c5daCBvF0yaTWjPKScRFU2c8g6Y5HakzMDClo69V1eb5UHQoc
KTpizuXfWmEPFx5q5xAAL4KQCJ606YE7Kfo8hPcAE+Nj/1+zVgoa8y9dK1HHuIFg
v4OFEeu9m/WCCrNZ7mW5EZd2ZRr/0JV9rdyYIN0P2rbFWJUmRkSrdqlR3XFbl0lY
0PsS/cfWbTmFIbR9byQwx4JP7sdxJappVAHgZB+7KrltEnRIV5KLi8WIqMZ805lu
jKoptQgldPM6otnhlrefkjnevfXD6kH1OI7X6gJmFFIzV9tiH97YMta15RqJ9Ugf
qDMn2S6E0NuJCvE1ilWW1oAzlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGPULXa
mmluqJZG+xtbuZwKPwidMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2
MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS9FN0M0RjlERUY2MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVn
SDczVXFHclZSWlFCcDFtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ36/4gR1x7bKQJZRmsHHV+1jHdzEudjogGmIVISN99AjT7VoVli+0hwEt+2/
YJl1ikAKA5ko5ooP/m46tQUxctSzhc9WmOFDHcGyxfgzkBkuNbYt1CGsUgIKikrW
hgmovguX8sALaPl99mhZmDEUWvhY1DWcOiWEzd1yKdChRDOCcFxRQpLw60fbwa6s
rsBlWsHJWjhqIo0L4QcxRFIYkMhPGBGl6Np9VUcCGSYAEjXxsgGh/XNfsXo+0M/O
W85aVMeItkrvTo5fpiEa006XOzSb5T7ef3sjj+H2esdsQyl02GwqYsViJf92tnql
nIjSpTlChGmaBKaaT14wACtXtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:11 2026 by rpki-client