
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier: vXp3yHR27lhMsbAcv705Rf9hR7Caqi2AxJnex22riXg=
Subject key identifier: 2F:5B:2A:06:A7:CC:C4:46:F6:B4:72:A4:F8:F2:E3:57:F0:4B:BB:FB
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial: 05D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number: 05C6
Signing time: Thu 16 Apr 2026 23:00:17 +0000
Manifest this update: Thu 16 Apr 2026 23:00:16 +0000
Manifest next update: Thu 23 Apr 2026 23:00:16 +0000
Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: 4WLpJJkZkGu/cwXS1xCWEr9IEWm+/DEE2YhNB2D/Moc=)
2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: FhhQyHeWyKOZmuPQHPKmrZdEe/8rcAsfsUV6nBHHPzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Validity
Not Before: Apr 16 23:00:16 2026 GMT
Not After : Apr 23 23:00:16 2026 GMT
Subject: CN=69e16a01-cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:62:c9:1a:c1:40:fa:44:65:af:fc:53:92:
99:9f:3a:2b:8f:a5:4a:5f:ff:cb:87:3f:de:f3:ab:
20:bf:a3:e8:90:fb:29:a0:ce:18:92:77:03:06:3b:
6b:49:f0:84:d1:8e:3a:79:58:ba:6d:09:28:63:39:
f1:0e:52:33:70:8d:bd:e3:ae:7e:15:c5:27:07:35:
fc:2b:5e:ef:b8:e0:9f:1c:f1:b4:8f:74:51:49:90:
9a:8b:18:69:a6:cd:0a:e4:b0:83:14:1a:cb:62:78:
73:98:2d:0e:c9:48:17:98:0a:21:17:00:d9:a5:08:
45:10:17:36:8b:3f:fc:a9:b4:22:12:56:35:fc:ab:
5d:4d:7a:ad:1e:80:49:30:4c:8b:26:9f:d1:b2:c8:
69:76:0d:12:28:43:1a:63:df:41:7d:98:30:cd:60:
13:fa:ee:ac:40:54:05:48:06:46:58:74:99:48:3a:
3e:67:d7:4e:24:6f:af:b2:9e:ed:a0:1f:d6:5b:d2:
af:5b:01:4b:e2:02:55:81:f7:c5:3e:8e:48:6b:70:
d9:b5:e5:33:a0:91:da:e0:8f:5c:3c:d6:3d:b3:72:
71:92:e7:34:73:20:7d:ac:62:69:29:76:b1:f1:f4:
4f:2b:5d:8b:79:67:67:06:2a:ac:63:36:88:d7:86:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:2A:06:A7:CC:C4:46:F6:B4:72:A4:F8:F2:E3:57:F0:4B:BB:FB
X509v3 Authority Key Identifier:
keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b2:03:36:83:40:bc:8b:2a:44:0b:c9:0e:b6:1e:92:dc:1d:
13:d6:f8:65:d9:86:ba:5e:26:88:74:ad:5a:72:1e:ad:a5:6e:
d8:cd:28:b7:67:87:0e:8d:73:e2:21:63:d4:61:15:6e:c5:af:
38:11:40:c5:36:7c:b5:7d:b1:bb:91:a7:36:fd:95:a1:cb:4c:
df:ac:69:04:ae:9c:20:df:2c:9c:fd:d8:bf:26:97:d7:2e:aa:
a3:70:e6:d3:25:73:c7:3c:e1:bc:6b:fd:45:a4:03:c3:1d:a7:
7b:cb:35:14:54:33:4c:1d:67:a2:f4:ca:82:03:68:9a:00:1a:
79:ac:77:85:de:d0:89:00:45:54:90:6e:4f:e2:44:e2:06:13:
d8:e3:d5:0b:1b:c8:1a:10:d3:7c:19:8d:ea:f1:71:49:a0:12:
e9:59:50:ca:dc:02:ce:63:2c:3b:fb:00:ca:94:fd:c9:43:f7:
1a:b1:24:fa:f2:52:d3:4d:e3:9c:2d:20:e5:54:07:4d:52:06:
77:b6:06:78:73:c4:4e:9d:d8:ac:f3:c1:8c:e5:9a:5a:c7:bb:
7a:ea:d6:57:48:b2:5a:17:e3:01:f2:fc:68:e0:84:5d:ca:bb:
61:87:57:13:38:f8:85:ce:7d:47:dd:4b:29:4d:d5:0c:d8:a6:
06:9f:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:29 2026 by rpki-client