
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier: d4BWIpuxwNO1xVuSyZne8XcAbro3Dci3/1lmTKqfcbg=
Subject key identifier: 92:56:7A:23:5A:97:97:45:9B:23:0A:EB:D3:0C:46:E1:F8:68:03:19
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number: 066A
Signing time: Thu 16 Apr 2026 22:31:27 +0000
Manifest this update: Thu 16 Apr 2026 22:31:27 +0000
Manifest next update: Thu 23 Apr 2026 22:31:27 +0000
Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: AlIZkzV6/4+a3OlgAXHt17cv+1KL4YWi18KEUeCei30=)
2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: TOu4rTok/YTcP4XYz+qFAKVXMljHMOdt2vuAWSKuetQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Validity
Not Before: Apr 16 22:31:27 2026 GMT
Not After : Apr 23 22:31:27 2026 GMT
Subject: CN=69e1633f-4757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:d3:26:16:03:5f:81:bb:0d:d8:d2:9a:78:
4a:fb:24:f4:c7:b9:17:2b:4b:65:a6:03:4e:9b:16:
a0:29:7b:63:16:5f:f1:f3:d3:ef:d6:40:fa:55:b5:
92:54:1e:20:eb:44:8c:82:cf:ee:fe:df:d3:e6:24:
ec:c3:a0:16:ae:73:3e:eb:9b:69:4e:57:d3:1f:91:
33:c0:d9:c2:e8:a0:b1:47:bb:81:4d:1c:a9:3c:77:
53:eb:b4:32:4a:c1:bd:27:83:13:9f:2f:fd:b6:8f:
9f:9f:d6:6e:dc:88:16:bc:8d:60:cb:b8:1c:92:5d:
73:bb:2c:f7:20:fb:ce:ad:70:4c:c6:63:a5:35:1b:
fb:15:e3:32:56:eb:2f:aa:e6:90:7b:f6:75:d4:ef:
91:b4:38:f9:f0:28:6e:9a:a5:b5:94:ec:91:d1:b1:
c2:17:5b:95:19:d8:83:68:75:fd:c0:25:8e:68:77:
35:38:10:52:b6:6f:94:b4:4b:48:2c:34:94:81:26:
cc:4e:ca:2e:58:f9:fd:64:f5:fa:e6:77:20:47:2e:
d9:37:ff:f2:da:67:9f:23:44:47:03:41:eb:5b:c1:
e4:c3:72:c8:70:22:e9:04:c4:af:13:f0:5a:f7:64:
bf:e9:68:27:84:07:b4:f3:4a:be:8e:98:06:76:cf:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:7A:23:5A:97:97:45:9B:23:0A:EB:D3:0C:46:E1:F8:68:03:19
X509v3 Authority Key Identifier:
keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:cb:95:91:39:fa:09:15:56:f9:b9:71:47:0e:e3:a3:6f:
bb:c4:c1:a1:3b:18:d2:ec:5d:79:43:33:1f:a3:1b:2d:2c:28:
c5:79:2f:b0:02:31:f6:43:bf:eb:18:a8:b9:d2:b6:f1:28:89:
78:22:65:c5:1f:29:80:14:64:c5:0f:d6:fd:c3:66:a0:ad:a9:
7b:3f:58:65:27:9c:28:dd:77:8f:94:7d:c9:67:eb:a7:1c:7b:
13:9f:60:e4:15:6f:5e:b6:d0:6e:3e:51:42:cf:78:00:8d:c8:
00:91:15:a9:eb:e9:8b:fd:67:d5:6d:50:a8:33:cc:b0:9e:d6:
56:fa:f7:26:37:96:3f:f0:40:8e:d2:63:f5:c6:41:dc:5a:f5:
26:ab:2e:dc:04:95:ca:8c:65:e8:52:aa:ec:ed:1d:ad:ee:3e:
6e:12:83:9c:82:45:1f:31:7b:07:5a:6f:b3:ae:7f:15:b5:c4:
a1:2f:f0:54:61:97:57:17:1a:89:50:30:f7:f4:66:72:0a:8b:
cb:1e:57:7e:a7:cf:01:53:51:be:57:fe:6d:1f:d4:7c:db:5e:
cb:e3:b6:6e:f3:4a:e0:e5:9b:bb:75:b4:08:9e:45:62:2f:80:
a5:66:90:e4:2d:81:8d:21:49:b4:08:6c:02:61:a3:b6:31:78:
b9:53:66:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2
MzBENTcwRTkwHhcNMjYwNDE2MjIzMTI3WhcNMjYwNDIzMjIzMTI3WjAYMRYwFAYD
VQQDEw02OWUxNjMzZi00NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RvTJhYDX4G7DdjSmnhK+yT0x7kXK0tlpgNOmxagKXtjFl/x89Pv1kD6VbWS
VB4g60SMgs/u/t/T5iTsw6AWrnM+65tpTlfTH5EzwNnC6KCxR7uBTRypPHdT67Qy
SsG9J4MTny/9to+fn9Zu3IgWvI1gy7gckl1zuyz3IPvOrXBMxmOlNRv7FeMyVusv
quaQe/Z11O+RtDj58ChumqW1lOyR0bHCF1uVGdiDaHX9wCWOaHc1OBBStm+UtEtI
LDSUgSbMTsouWPn9ZPX65ncgRy7ZN//y2mefI0RHA0HrW8Hkw3LIcCLpBMSvE/Ba
92S/6WgnhAe080q+jpgGds98dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJWeiNa
l5dFmyMK69MMRuH4aAMZMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My
MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS
YVpoaXpLZnZKSGRqRFZjT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgIrLlZE5+gkVVvm5cUcO46Nvu8TBoTsY0uxdeUMzH6MbLSwoxXkvsAIx9kO/
6xioudK28SiJeCJlxR8pgBRkxQ/W/cNmoK2pez9YZSecKN13j5R9yWfrpxx7E59g
5BVvXrbQbj5RQs94AI3IAJEVqevpi/1n1W1QqDPMsJ7WVvr3JjeWP/BAjtJj9cZB
3Fr1Jqsu3ASVyoxl6FKq7O0dre4+bhKDnIJFHzF7B1pvs65/FbXEoS/wVGGXVxca
iVAw9/RmcgqLyx5XfqfPAVNRvlf+bR/UfNtey+O2bvNK4OWbu3W0CJ5FYi+ApWaQ
5C2BjSFJtAhsAmGjtjF4uVNmxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:36 2026 by rpki-client