
$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier: 59jKJ5e+eNj0qg/kF03nRVVTmiZMjguQcKOkTS/KBDg=
Subject key identifier: 79:EB:B9:66:A4:42:9D:4A:BC:7D:96:66:66:E2:4A:B8:FF:97:DA:7F
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer: /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:18:50 +0000
Manifest this update: Fri 17 Apr 2026 08:18:49 +0000
Manifest next update: Fri 24 Apr 2026 08:18:49 +0000
Files and hashes: 1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: TzkINbMGDcAtfzXnMaicr56m6tuaW6jEGh8GjYaiZyU=)
2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: iKMOZndSspUWn/Q2dD9wJzioM8CavlEGjQksPJ9SKPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Validity
Not Before: Apr 17 08:18:49 2026 GMT
Not After : Apr 24 08:18:49 2026 GMT
Subject: CN=69e1ece9-9944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:a7:e4:00:a7:5d:bd:c1:7e:3a:d6:e1:26:
b2:39:7c:c7:00:f8:0b:f1:c5:b0:ae:c5:3d:3f:e7:
1d:e7:05:e4:03:12:3d:6b:1e:d3:cc:ea:22:5b:99:
9c:12:cb:b8:cc:0a:41:4e:84:d3:7f:05:c0:38:0f:
2a:49:81:94:7d:99:82:ba:56:e8:39:7a:64:26:b1:
50:34:80:ff:dd:0a:57:ac:b9:3d:14:db:1b:95:ee:
fc:dc:31:60:46:ed:9e:f1:a8:1f:71:29:33:46:30:
99:e8:c3:06:bb:93:55:69:d9:ef:fa:4b:7b:8d:a1:
ac:f9:57:7d:4c:27:31:e4:4a:dc:9b:12:ee:fd:7f:
4d:39:a7:f7:db:f2:49:ed:7e:67:f0:ba:de:8b:f3:
99:6c:a2:a2:e2:58:6c:75:1d:16:9f:6c:bf:9e:57:
d4:04:3a:fb:4b:9a:c8:ee:37:62:23:e6:fe:2f:48:
c4:88:52:32:e3:d4:b2:08:18:35:4a:41:a9:45:d8:
79:53:6d:77:5d:64:a6:de:eb:ca:d1:99:f4:3a:e0:
f8:44:01:98:b8:27:c6:8b:d2:ec:b6:5f:78:11:50:
86:bb:ef:c7:5b:66:31:04:1b:54:12:05:5e:52:86:
0f:c6:a2:25:4c:e1:ef:34:9f:1a:40:57:33:98:52:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:B9:66:A4:42:9D:4A:BC:7D:96:66:66:E2:4A:B8:FF:97:DA:7F
X509v3 Authority Key Identifier:
keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:2d:d8:18:e1:a5:17:a6:bd:9b:61:4c:22:41:c4:57:2b:5f:
50:6f:62:e1:06:c4:68:9a:9c:17:9a:68:36:fb:e8:58:d9:9e:
81:46:a3:15:ff:d1:cf:68:cb:cd:09:a8:a5:b2:0d:31:f2:02:
a0:cf:b3:68:06:e1:ab:aa:30:e9:65:21:5e:32:7a:fc:c8:c9:
d1:5e:16:a1:1c:54:b6:19:47:80:94:6c:35:b8:7a:af:b7:e0:
48:69:9b:3a:35:1f:87:4e:3d:28:8b:58:d1:de:f5:e1:1f:06:
b5:4b:98:f6:c5:bc:e2:fb:e1:99:8f:d5:0a:a7:72:20:30:45:
4f:0e:54:17:4d:dc:2d:3f:64:98:d5:d5:77:ec:3e:49:47:42:
b9:87:87:71:cd:48:aa:e9:ee:fb:de:e6:5b:0a:3b:5d:9b:d3:
07:be:e1:20:27:cc:2d:2c:9f:9f:59:9e:b3:69:f5:08:dc:1a:
23:fe:f8:e9:1d:58:dd:6c:9d:c8:69:23:87:73:fe:d2:33:b1:
f2:0e:cc:17:7d:cf:8b:e6:39:82:4a:60:bc:21:01:8c:ac:e6:
db:6e:ed:0f:0b:89:ea:a1:55:6d:8e:f9:78:4b:4b:17:d9:fd:
68:f5:af:f7:73:ad:7c:8f:b9:7a:2d:67:bb:6a:3a:c5:b9:e8:
76:e9:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:35 2026 by rpki-client