
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: Fs69hoJEzxpYkgsDq046IaSicggQ/HlR5Ct6YreO5o4=
Subject key identifier: 65:2F:EB:14:32:93:FA:C8:FE:2B:2E:F8:B6:18:3B:DD:AD:05:CC:C3
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 0852
Signing time: Thu 16 Apr 2026 20:42:11 +0000
Manifest this update: Thu 16 Apr 2026 20:42:10 +0000
Manifest next update: Thu 23 Apr 2026 20:42:10 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: S4PvTqSwR7LKnN+yaWrxPRdOczB1I1/d6lByovdIH7E=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Apr 16 20:42:10 2026 GMT
Not After : Apr 23 20:42:10 2026 GMT
Subject: CN=69e149a3-db5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:70:d1:66:21:2f:88:e0:eb:b7:ea:cf:7e:
c7:82:56:f5:a3:08:eb:04:2f:c4:57:1a:5b:ef:0b:
98:a2:b6:e8:04:88:c5:10:3d:e1:4e:a7:a3:6d:95:
94:57:e1:66:49:15:73:5a:c4:a3:8d:df:78:15:86:
74:cb:e5:ed:44:a1:c4:e8:e2:37:af:b3:30:d7:ab:
4c:cd:de:a4:04:6a:93:ff:67:37:d1:2c:32:82:95:
dd:86:0e:c2:fe:ec:4f:e1:c0:af:a4:c6:54:09:e7:
37:b1:5f:d4:36:21:cd:0e:d9:ad:2c:c1:8f:7b:4c:
b3:eb:89:47:0a:54:c8:5c:34:e0:d6:66:e5:8c:59:
5e:94:47:44:bc:80:7b:fb:c8:51:49:a7:57:fd:69:
1a:fa:a2:2c:f1:31:63:bf:6b:03:a6:6c:b5:13:fe:
e0:6b:aa:39:4a:8e:d1:52:13:c0:57:3d:51:ab:32:
b4:05:b0:a2:57:3f:f7:d7:7e:9f:48:1c:65:f4:17:
94:66:ac:f2:49:09:a3:2a:eb:01:4e:cf:c4:db:30:
c7:69:9c:23:8d:4a:f5:0a:4d:4c:ee:d7:1a:bd:be:
3a:70:f4:8c:6b:c6:d2:6b:4a:e5:ea:01:88:f4:e5:
59:c5:aa:90:ab:1c:8c:5e:a2:59:7a:db:2f:1f:59:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:EB:14:32:93:FA:C8:FE:2B:2E:F8:B6:18:3B:DD:AD:05:CC:C3
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:6d:ff:f9:21:19:f4:f3:7e:34:9a:72:e5:75:42:50:54:
28:77:02:b0:7a:7d:01:30:bc:c5:27:cd:32:14:a4:7c:53:14:
33:42:f4:c8:69:bd:ea:7d:1b:f0:09:b7:d8:d7:b2:1e:70:10:
c0:e7:21:27:d2:e3:ca:85:61:03:3e:89:2d:73:38:1f:82:98:
36:f2:63:5d:97:f5:32:20:f6:74:22:15:b4:30:41:30:b7:2d:
45:14:83:0b:01:51:57:16:81:9a:76:44:41:32:52:1f:53:07:
2d:2d:8a:59:66:ab:a3:fd:1b:a2:6b:58:5a:5e:37:9c:3f:da:
5c:f7:52:da:da:5e:28:dd:23:62:a9:1d:15:18:db:af:ef:47:
c8:f7:6c:66:07:6a:fa:e3:dc:a1:e9:e7:9d:32:9d:7b:d3:19:
b6:c2:0e:f9:a1:2a:6a:c1:ab:c8:fa:3e:3b:25:0f:0c:04:c8:
0b:00:be:6f:28:28:a7:99:31:74:a9:3d:34:01:59:35:dd:4e:
7d:5c:c5:cb:67:85:ad:f3:25:90:30:0e:68:dd:c5:43:91:f7:
d6:af:1a:ec:ea:e1:e8:03:bb:c7:0d:ea:89:81:e4:13:a0:fc:
30:a9:1a:87:d3:0d:6e:90:82:b0:b6:fa:47:3f:57:90:07:d5:
8f:bc:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:15 2026 by rpki-client