
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier: lvJpcuqbosysunPW6YTKtctJR3T67QPf0eO1X4WZdOo=
Subject key identifier: 4F:60:7F:74:FD:4B:C8:D1:E7:54:44:6C:93:B2:FE:80:5D:9B:C6:C2
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial: 03A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number: 038D
Signing time: Sun 19 Apr 2026 00:46:26 +0000
Manifest this update: Sun 19 Apr 2026 00:46:26 +0000
Manifest next update: Sun 26 Apr 2026 00:46:26 +0000
Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: dq+Oe6bSakFHLckQ5fG8lcbmOU/B41QizAABSG6WgAY=)
2: 3824E928764711F0980D9877C4F9AE02.roa (hash: RNrBzsULWKNLzQ9xO26elmeen/lXKp/Fjr/z7K/9x2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Validity
Not Before: Apr 19 00:46:26 2026 GMT
Not After : Apr 26 00:46:26 2026 GMT
Subject: CN=69e425e2-2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:e4:80:90:81:eb:ef:a0:ae:84:a0:12:ff:
57:4c:c9:33:32:71:a0:d0:be:12:0e:4f:02:05:42:
3c:61:57:aa:31:e5:4f:df:ab:82:f0:64:43:55:f7:
4d:63:53:33:42:70:43:dd:e8:88:25:6f:8b:02:79:
ab:01:85:05:0d:66:51:18:cc:5e:72:05:61:47:08:
d1:e5:ec:6c:ad:c0:3d:b4:a8:0e:af:8c:23:9c:3b:
7e:ee:8b:93:ad:18:66:96:d7:97:29:e4:6f:4b:f2:
d1:2f:dd:2a:ae:6a:2b:18:3c:34:96:73:5d:f9:c7:
42:3b:6f:ab:e2:03:d0:71:16:4f:29:71:7b:de:d5:
5f:bf:b6:e9:8b:22:c4:d9:8b:e8:10:7c:18:c2:fb:
0f:63:48:00:26:56:7e:c3:9c:94:90:e5:37:4e:90:
c4:4c:37:89:51:55:a2:e8:6c:54:07:dc:68:a8:b5:
d2:84:1d:2a:bc:ec:74:04:29:d7:10:a6:f1:08:d5:
a2:a3:87:d7:58:14:27:67:34:6d:a8:1b:ef:15:63:
94:60:5f:73:aa:00:99:0a:6c:83:d9:9b:06:4e:30:
ab:4d:d2:90:70:0d:1d:73:3b:44:63:27:db:01:70:
1f:3b:67:55:3b:03:2e:c6:36:52:bd:ba:8a:be:50:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:7F:74:FD:4B:C8:D1:E7:54:44:6C:93:B2:FE:80:5D:9B:C6:C2
X509v3 Authority Key Identifier:
keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:c5:ee:da:ca:e2:02:36:99:06:30:fd:f3:34:17:e8:73:
04:bc:78:b8:0e:ea:79:c5:d5:c5:10:c4:c1:79:ad:e0:93:f8:
c5:a3:b0:46:3e:59:71:76:6b:ae:50:81:23:b7:02:c0:35:c3:
44:a8:14:f2:e0:49:e3:c5:de:3f:86:2d:32:d6:3f:e7:08:20:
3c:8a:4f:fd:f6:ca:22:d9:65:47:db:05:9e:89:90:c9:38:57:
51:ff:6e:77:25:dc:13:ec:9f:fb:ec:c2:88:5a:95:86:ac:5e:
91:3a:04:22:51:fa:be:3d:4c:f8:89:6d:4f:36:ae:cc:f2:ed:
57:4d:a3:e2:dd:cb:29:2c:92:ef:40:82:9a:e9:18:a6:ea:21:
64:66:93:ed:b8:6f:56:ed:26:b7:f2:cf:e8:22:b2:6e:4d:57:
ec:cd:70:c3:dd:68:ec:09:5b:9b:0d:46:bb:88:4c:04:46:d4:
c2:7f:4a:38:4b:28:ca:61:81:88:e7:82:0a:69:cb:97:b0:4b:
db:2c:9b:cb:41:a4:e5:e9:88:b7:47:c0:b2:ad:b5:a3:75:0b:
f4:82:af:ce:56:22:60:1d:a9:c9:c7:20:18:5e:c9:4f:c6:3f:
83:ac:56:99:b5:b8:83:0b:d1:73:5c:9a:9a:f1:2a:f5:35:85:
12:ed:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:26 2026 by rpki-client