
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
File: RrMUYkbIqOvcBwyRKtn1czFjUfM.mft (raw, json)
Hash identifier: Dk4D+7YDMCPT9s7J6plZrI8xIb8c5tthd8nnsEFpxeI=
Subject key identifier: 64:F8:C9:D1:F7:FF:3C:62:EA:4B:E1:D6:84:7A:3D:F9:57:C6:2A:6F
Authority key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
Certificate issuer: /CN=A913B25C/serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
Manifest number: 10
Signing time: Fri 17 Apr 2026 08:47:19 +0000
Manifest this update: Fri 17 Apr 2026 08:47:18 +0000
Manifest next update: Fri 24 Apr 2026 08:47:18 +0000
Files and hashes: 1: RrMUYkbIqOvcBwyRKtn1czFjUfM.crl (hash: 0qkbS09b/tin+WZ71tzOyYn5ySbej5wkocfESAf2F/Y=)
2: B7B0933824D711F1BC6B08E2AB833773.roa (hash: qfb5OhL2JYl88uq6Z6fcjDjGJqh3quT1pfhxv2w56CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Validity
Not Before: Apr 17 08:47:18 2026 GMT
Not After : Apr 24 08:47:18 2026 GMT
Subject: CN=69e1f397-cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:91:67:35:e9:aa:e6:e5:10:14:af:c3:ef:
ff:b6:41:11:a9:ea:e0:54:56:8e:55:30:fb:95:76:
ab:37:73:48:86:b8:4d:89:35:86:c2:26:72:9d:dc:
36:26:6f:e1:15:bc:9c:96:06:15:bd:1e:91:98:ad:
19:71:c8:e0:de:b3:5c:f4:cf:df:6b:fd:a6:fc:95:
9e:13:24:3c:20:eb:f2:9b:57:1b:1c:e0:ea:ab:e6:
93:49:90:f4:02:96:2a:39:c7:d7:60:73:50:75:72:
f7:2c:8f:36:8b:22:f1:45:d1:67:87:e7:86:72:88:
23:65:43:39:42:01:ff:97:10:24:a7:60:7d:28:8b:
d4:ac:fb:33:6b:62:d8:6c:8b:45:1d:b1:aa:31:b5:
85:38:5c:e8:a6:82:e5:71:92:fd:1f:3c:4e:ab:fd:
71:15:cc:4e:93:c0:01:7b:10:cd:74:77:b1:79:7e:
9d:42:07:ca:f9:e8:c3:33:01:67:da:18:c2:9c:4c:
7e:24:f1:1e:e3:44:f9:ba:16:4c:48:a2:9f:17:27:
74:bc:b6:0b:c8:3f:5a:bc:7b:42:74:47:93:84:79:
bb:30:7a:4d:15:d4:7c:a2:7a:b5:2f:c5:2a:2d:29:
ff:c8:59:30:5e:1e:e8:c1:ab:2c:e5:c8:73:87:b8:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:C9:D1:F7:FF:3C:62:EA:4B:E1:D6:84:7A:3D:F9:57:C6:2A:6F
X509v3 Authority Key Identifier:
keyid:46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:cd:6c:c5:d0:77:a3:7d:f8:41:99:65:2f:02:82:b3:43:63:
08:ab:6a:92:00:d8:93:78:59:46:d7:2e:ea:d2:c7:b0:00:4f:
ee:7c:8a:e1:01:be:0f:e6:49:50:b2:49:3b:b6:d8:39:9b:76:
cd:2a:5c:6d:8b:cc:e8:90:98:30:54:e8:53:84:ba:88:5d:38:
09:3c:02:9e:3f:51:a7:3c:ce:0b:f9:66:ee:a3:75:54:9f:2e:
2d:a9:e6:12:47:ed:67:f3:2a:6f:1c:21:db:bb:c0:5b:91:76:
0f:43:19:28:46:b7:3e:b1:59:37:89:17:7c:78:ab:c0:95:07:
87:a6:38:fd:05:ff:1d:d1:67:fb:f3:97:76:56:dd:3c:e1:e9:
bd:e0:7a:0f:b3:8c:01:93:44:b3:33:b9:57:08:b5:4f:a8:fc:
45:3f:be:a9:63:e4:0c:43:22:18:cb:2e:f5:4f:0c:fe:b3:18:
e6:52:56:ee:14:a2:83:6f:fb:e5:c8:c3:bc:3f:85:18:66:a8:
e5:8b:b8:49:d9:c9:e0:7a:37:82:af:6f:c7:53:ca:10:14:9b:
d3:c3:1a:87:9b:ab:4e:dd:63:0a:7b:d4:44:95:72:af:61:89:
a8:dd:62:5a:37:b6:e4:87:7b:f8:0c:7b:45:c8:94:f5:35:ee:
68:52:27:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QjI1QzExMC8GA1UEBRMoNDZCMzE0NjI0NkM4QThFQkRDMDcwQzkxMkFEOUY1NzMz
MTYzNTFGMzAeFw0yNjA0MTcwODQ3MThaFw0yNjA0MjQwODQ3MThaMBgxFjAUBgNV
BAMTDTY5ZTFmMzk3LWNiODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQDJFnNemq5uUQFK/D7/+2QRGp6uBUVo5VMPuVdqs3c0iGuE2JNYbCJnKd3DYm
b+EVvJyWBhW9HpGYrRlxyODes1z0z99r/ab8lZ4TJDwg6/KbVxsc4Oqr5pNJkPQC
lio5x9dgc1B1cvcsjzaLIvFF0WeH54ZyiCNlQzlCAf+XECSnYH0oi9Ss+zNrYths
i0UdsaoxtYU4XOimguVxkv0fPE6r/XEVzE6TwAF7EM10d7F5fp1CB8r56MMzAWfa
GMKcTH4k8R7jRPm6FkxIop8XJ3S8tgvIP1q8e0J0R5OEebswek0V1HyierUvxSot
Kf/IWTBeHujBqyzlyHOHuAqHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZPjJ0ff/
PGLqS+HWhHo9+VfGKm8wHwYDVR0jBBgwFoAURrMUYkbIqOvcBwyRKtn1czFjUfMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjVDLzY1M0JCQkI0MjRE
NzExRjE4ODFCRDJEMEFCODMzNzczL1JyTVVZa2JJcU92Y0J3eVJLdG4xY3pGalVm
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUnJNVVlrYklxT3ZjQnd5Ukt0bjFjekZqVWZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC
MjVDLzY1M0JCQkI0MjRENzExRjE4ODFCRDJEMEFCODMzNzczL1JyTVVZa2JJcU92
Y0J3eVJLdG4xY3pGalVmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCFzWzF0HejffhBmWUvAoKzQ2MIq2qSANiTeFlG1y7q0sewAE/ufIrhAb4P5klQ
skk7ttg5m3bNKlxti8zokJgwVOhThLqIXTgJPAKeP1GnPM4L+Wbuo3VUny4tqeYS
R+1n8ypvHCHbu8BbkXYPQxkoRrc+sVk3iRd8eKvAlQeHpjj9Bf8d0Wf785d2Vt08
4em94HoPs4wBk0SzM7lXCLVPqPxFP76pY+QMQyIYyy71Twz+sxjmUlbuFKKDb/vl
yMO8P4UYZqjli7hJ2cngejeCr2/HU8oQFJvTwxqHm6tO3WMKe9RElXKvYYmo3WJa
N7bkh3v4DHtFyJT1Ne5oUieH
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:02 2026 by rpki-client