
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File: sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier: V+S/pZNhmh7tmChsiyY8PKv5S6UO/s5+7BI0jyg3+Zw=
Subject key identifier: 6D:02:4B:3F:54:48:CC:15:85:B5:58:B7:BE:06:78:D6:2D:01:94:2F
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer: /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number: 45
Signing time: Fri 17 Apr 2026 08:05:39 +0000
Manifest this update: Fri 17 Apr 2026 08:05:38 +0000
Manifest next update: Fri 24 Apr 2026 08:05:38 +0000
Files and hashes: 1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: pSrNXIQR0uBcsFEZoEHIz5W1t3VE1++9Y5ZibIliJPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Validity
Not Before: Apr 17 08:05:38 2026 GMT
Not After : Apr 24 08:05:38 2026 GMT
Subject: CN=69e1e9d3-7826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:1b:b3:35:15:11:b2:c0:61:e2:cf:80:ea:
02:82:25:1b:a6:09:e6:62:4a:af:bf:1f:75:2b:cd:
5c:fe:3a:69:e8:cd:bf:06:89:50:f6:3d:82:6b:c3:
21:7b:9a:26:06:a3:8b:3b:ab:b2:46:3a:70:7f:95:
91:80:f9:38:ef:6c:3a:bb:47:24:3f:aa:ba:ec:5e:
f7:e9:ff:a1:ec:19:e2:d8:da:4a:f4:bb:e2:99:2b:
b0:a0:49:c8:17:13:f7:44:ea:8f:9d:29:0f:a1:c7:
70:59:59:f1:8c:e9:b7:5e:9f:7d:2b:bb:93:3b:5f:
97:91:16:ad:a6:a7:7f:4b:eb:91:ff:92:a1:98:ae:
18:33:23:5b:ef:8a:a3:4c:9b:74:9f:44:5d:d9:3f:
4c:97:9d:ee:aa:bd:e4:b4:a5:1d:83:0f:47:6a:cf:
71:b6:a0:a2:51:dc:73:4e:7b:c5:bf:2e:7b:c0:de:
a7:e7:c6:53:e9:70:fe:ef:14:14:02:a8:fe:ee:8f:
cf:45:c1:59:3c:ba:3a:fb:f5:3e:72:51:54:c6:b4:
8c:62:9e:ef:4b:4e:36:70:e5:79:4e:67:a9:10:c2:
66:29:c6:07:00:55:92:85:5e:6b:7d:38:f2:b7:0b:
a2:65:6c:d8:9a:5f:78:20:49:75:d1:bc:4c:d2:49:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:4B:3F:54:48:CC:15:85:B5:58:B7:BE:06:78:D6:2D:01:94:2F
X509v3 Authority Key Identifier:
keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:58:63:24:8f:c9:8a:9c:03:41:0e:a5:4f:13:92:a7:5b:
79:ce:dc:eb:f4:49:bb:cd:fe:6f:34:a0:5d:21:00:3b:66:51:
38:0c:39:c2:15:ef:e5:5d:01:7e:25:1b:a8:74:9d:c3:22:80:
3d:cb:65:91:c1:59:ae:0e:de:96:99:5c:af:f3:10:95:3d:9b:
75:db:9c:bf:5e:f7:73:d4:57:bd:43:2a:fd:ce:fe:b0:2d:82:
6b:aa:e1:c7:d5:9e:f0:ac:f3:c0:c4:36:99:d9:0c:37:31:7f:
22:0d:8d:ec:20:d5:ee:31:a9:6b:2e:54:21:44:aa:ff:fa:db:
02:95:67:a2:66:1f:e1:3f:4d:1f:1a:3a:7a:1d:28:e1:84:18:
1e:78:2c:8a:d2:a5:a5:83:e8:e8:9b:6a:64:a1:a6:69:f3:2e:
62:74:ba:f0:7d:c5:62:7c:68:c3:f8:6c:2c:64:e5:0d:d0:46:
b2:1f:dd:39:00:90:b6:68:57:0d:36:f1:95:c2:89:ef:ed:a6:
35:cb:9c:a8:fc:f6:00:57:08:37:92:18:f2:8b:7c:38:fd:6d:
e2:07:2d:c0:4d:ab:99:89:11:dd:49:13:68:4a:bd:24:3d:11:
a3:f0:bc:a9:a6:e0:4e:e7:fc:2c:c6:a1:03:9f:4b:ac:d4:32:
81:b3:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:14 2026 by rpki-client