
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier: e7FlBX8UHXi79PuZUa15W7f+XIfToNw+G6JxZUPm5z0=
Subject key identifier: A5:1C:7C:8F:00:BF:2F:DE:DE:A7:48:B5:CF:3B:57:88:CF:53:8E:BE
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number: 2A
Signing time: Fri 17 Apr 2026 08:32:27 +0000
Manifest this update: Fri 17 Apr 2026 08:32:27 +0000
Manifest next update: Fri 24 Apr 2026 08:32:27 +0000
Files and hashes: 1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: crnCg78AGbjW7a5VTRP/YRInx5oPUSZgF3omO7NcEgY=)
2: BA419250081C11F1AD289B7B323D8C67.roa (hash: rFS/SZQK8Yk9ioV0Y+bTAAI4kAqBKXvpYRG0EHKZ9fI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Validity
Not Before: Apr 17 08:32:27 2026 GMT
Not After : Apr 24 08:32:27 2026 GMT
Subject: CN=69e1f01b-95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:96:a5:b2:e6:fe:f4:18:f6:54:01:f6:5a:
c2:58:b3:b3:d7:7d:03:e5:1d:d3:69:f2:a4:aa:21:
08:1d:2f:cc:2f:f9:52:61:cc:55:2a:45:87:1e:24:
40:14:a0:f1:a5:76:f8:46:50:7b:be:4c:40:cb:53:
75:17:95:6a:2c:42:1e:84:6d:d2:5f:8b:cf:6d:16:
aa:c2:4b:0e:06:6d:4e:b1:01:8b:68:5f:cb:75:96:
c9:c0:1c:a1:1e:7e:e5:49:f0:8e:dd:5f:d3:b2:e8:
8c:b7:2d:3a:17:95:af:c8:9a:59:64:c0:99:3a:c0:
bd:6d:1b:e1:25:c9:e1:c1:40:bd:56:53:26:4e:c5:
e7:4a:8e:cf:4f:47:29:fe:ad:e2:4d:c8:9b:3b:07:
b5:46:43:4b:ec:65:ed:84:e7:c7:7f:2a:5a:be:ac:
bc:ef:ea:e6:05:80:f6:09:64:ab:73:f5:a9:dc:fb:
ea:e9:31:96:81:76:38:2b:ac:9d:61:63:74:f0:c6:
c8:86:9b:16:4d:67:f8:3c:e9:19:f5:d9:1a:dd:4e:
e5:2c:8d:0c:30:fd:94:38:1a:1f:d9:e5:05:38:a8:
42:11:ef:92:33:66:c4:e7:da:4c:c4:63:45:0d:b1:
cf:a4:4e:26:f0:b7:1b:a2:62:0b:ff:70:4f:b9:fb:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:7C:8F:00:BF:2F:DE:DE:A7:48:B5:CF:3B:57:88:CF:53:8E:BE
X509v3 Authority Key Identifier:
keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:ae:c1:f1:e2:cb:15:9a:89:a1:9a:81:05:04:d8:01:f1:
ae:c1:86:e0:50:89:ad:3f:bf:39:f3:cf:fa:a8:95:79:cc:62:
bb:0e:76:2a:0e:f4:00:10:62:4c:6b:69:25:66:6b:ee:6d:1c:
46:00:28:e6:50:51:dc:a6:7b:36:2c:fa:2b:f9:ab:9e:22:cd:
5d:f9:31:5b:84:6f:3e:32:f5:38:d0:af:11:d4:c8:45:14:0f:
f1:d1:f6:59:aa:ba:7e:84:7c:8d:64:33:02:29:d7:93:65:35:
be:ac:50:08:41:68:a7:06:41:e5:f7:45:d0:6e:36:17:7c:da:
2c:77:74:78:fb:54:97:27:a1:6c:1c:aa:f2:15:9f:82:de:83:
51:82:7d:d6:f8:c2:82:49:77:9d:d9:fc:41:26:93:e6:6d:82:
0f:8f:77:60:3a:0b:68:6a:c6:d9:9c:f5:3c:c1:8d:06:17:06:
29:f6:5a:11:5a:7c:e3:66:ae:1b:87:db:3c:86:6f:18:03:85:
ce:c4:14:0b:0b:64:a2:ee:4d:57:21:6d:00:1c:7e:01:2f:4b:
db:db:3c:a8:e3:d1:9c:a0:34:18:76:0e:78:0f:f9:63:46:80:
8d:bf:7c:dc:94:0b:ad:63:23:2d:67:fe:6a:f1:ee:cd:34:31:
89:ca:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:18 2026 by rpki-client