
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
File: 444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json)
Hash identifier: WdZpHrYGEE/BLIrJkdGt7wiYPA5u/HLQgM9cvOJRe4c=
Subject key identifier: 4E:C8:C7:89:2A:9F:7A:27:0B:19:2F:47:EF:7C:00:A8:DD:8B:DE:FA
Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Certificate serial: 068E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
Manifest number: 068A
Signing time: Thu 16 Apr 2026 22:22:53 +0000
Manifest this update: Thu 16 Apr 2026 22:22:53 +0000
Manifest next update: Thu 23 Apr 2026 22:22:53 +0000
Files and hashes: 1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: vqe3tck5pd/BVrBPcfYoXTQ7F9JxQjZ8IW/5LdXiFhQ=)
2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: ty8CivLD0jPzuEhlcoW5AlOudebXWw4EwNKxY6PCl9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Validity
Not Before: Apr 16 22:22:53 2026 GMT
Not After : Apr 23 22:22:53 2026 GMT
Subject: CN=69e1613d-45d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:ca:e7:b1:33:63:7d:96:d8:28:4a:2a:41:
49:6f:41:e8:cd:f2:86:03:7f:8f:0e:bb:a0:95:fb:
39:c1:7f:8d:28:9b:40:a7:a2:36:b6:9c:6a:03:db:
45:39:40:de:e8:c6:09:a0:0d:3a:7e:6b:4e:a2:21:
1f:d6:1e:0d:fb:d3:88:21:c9:39:35:f3:08:8d:ed:
fa:10:80:58:33:cd:fe:6a:2f:f4:b6:a9:d2:d3:d8:
d9:8e:80:d1:14:51:47:1d:2a:2b:48:60:b6:c9:73:
c2:18:88:54:db:a2:ef:5a:f5:22:85:b9:8f:cf:2d:
55:dd:f0:70:83:9c:55:0e:3d:d9:27:76:81:a1:e9:
d7:a0:8e:c3:30:84:2e:6d:9e:80:9b:d1:ce:4b:ec:
8c:22:88:84:57:23:22:db:4b:09:3a:ea:85:ef:e5:
55:b9:df:6b:fb:6f:7f:69:fd:f4:1a:d5:a5:88:0e:
8f:c2:11:7d:6b:05:be:a7:ea:8e:92:4e:63:fe:6c:
07:55:fe:e5:ec:58:2b:2c:68:86:ce:aa:47:39:97:
9a:a9:28:72:34:32:a1:ba:d6:40:03:b3:e3:30:74:
57:81:35:3c:58:0a:42:94:e9:fc:c3:65:c1:1c:23:
7e:56:27:66:80:db:f2:c7:0d:5d:25:e6:df:4b:0b:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:C7:89:2A:9F:7A:27:0B:19:2F:47:EF:7C:00:A8:DD:8B:DE:FA
X509v3 Authority Key Identifier:
keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:cf:f1:40:f3:2c:34:17:b0:c6:8e:a8:d5:8c:ff:9d:2c:
5d:c9:43:aa:ea:5a:07:90:9d:95:57:96:6e:ba:fc:ce:4a:70:
11:41:7d:50:1d:d6:cb:09:8e:b4:fa:53:60:bd:56:f0:de:b9:
22:54:bd:0c:2d:28:af:02:7a:ce:d9:4b:c2:0b:15:17:d0:91:
27:db:d9:a4:43:ba:a9:a4:d5:d8:7f:f2:20:23:95:3b:ea:9e:
cd:2d:1d:0b:2a:c9:ae:12:3f:64:67:11:06:88:a8:11:04:5f:
ad:c1:46:18:17:e9:0a:d9:1c:c7:75:7b:2a:d5:35:90:f0:9e:
59:a2:48:ff:0e:4f:c7:0a:b3:3b:02:a9:15:0c:35:bd:cc:81:
82:38:4d:7b:dd:45:a8:df:4c:b8:93:ca:25:44:f0:80:ed:29:
76:6d:73:f2:d0:d3:bd:dc:15:80:bb:d6:1f:bc:68:cf:f1:5f:
69:93:59:23:86:f8:37:59:54:6e:2d:68:e7:44:1b:cd:cd:2d:
c1:26:49:24:fc:4f:96:f4:7e:a2:35:1c:09:6f:5d:80:45:bb:
ad:db:5a:1c:a4:05:53:cb:2d:82:64:9f:94:2e:2e:73:a9:b1:
b5:86:4f:5e:fe:ae:7a:7f:cd:63:72:38:1d:ae:c7:9d:13:9e:
39:6c:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:21 2026 by rpki-client