
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier: IfEg14Pykc/L8B3qzkgop4tRfhbomLNdyR9Tu/MMvAI=
Subject key identifier: 23:F6:F9:40:EA:FD:98:25:0D:37:91:37:C5:33:88:C0:D5:C2:93:B8
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number: 02F8
Signing time: Fri 17 Apr 2026 01:11:39 +0000
Manifest this update: Fri 17 Apr 2026 01:11:39 +0000
Manifest next update: Fri 24 Apr 2026 01:11:39 +0000
Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: vlpYwI8Inqyv8j0dXA2Vam0zp9MnQ5x8q1AR5smcxrY=)
2: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
3: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Validity
Not Before: Apr 17 01:11:39 2026 GMT
Not After : Apr 24 01:11:39 2026 GMT
Subject: CN=69e188cb-7804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:fc:cc:bc:f9:0d:47:db:8f:9c:ca:13:5f:
14:ff:84:a9:ec:e1:e8:7c:4a:d1:f2:56:35:17:07:
a7:34:2a:f7:49:0a:ef:e9:0c:a8:a2:c3:d1:78:6a:
e7:94:11:e9:37:08:92:8c:3b:b0:ba:af:ad:88:ed:
50:8f:a7:72:9a:3f:5d:5b:92:af:3b:72:60:55:f2:
32:20:be:5c:fa:37:56:2f:1d:f0:e3:54:a8:1f:70:
1c:0a:82:60:07:bb:d5:24:b4:1b:f9:64:e3:59:98:
8f:33:8e:43:34:23:20:f4:55:47:c3:ca:63:65:23:
73:a1:db:d5:4d:27:ce:7c:bd:45:72:4e:e2:e3:64:
b0:ac:9d:2d:22:c3:11:35:54:f4:88:ee:5c:e4:52:
6e:ac:17:ff:db:d5:fc:f5:b9:5d:58:08:2e:ed:10:
fd:96:b1:27:a0:0b:fc:1b:f0:ad:4a:2d:0b:05:b4:
6f:f1:81:69:6a:1f:88:88:69:d3:fd:57:e5:de:78:
01:2a:8b:96:0b:3e:18:d7:08:28:70:99:18:f4:d4:
fe:1d:1f:1d:2c:8c:05:01:07:fa:64:f4:d3:58:e2:
0d:8d:39:3c:b0:f7:a3:52:34:51:de:7f:df:ad:48:
68:cc:1a:f8:69:fb:dd:1b:a0:c3:4a:5f:c8:57:3e:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:F9:40:EA:FD:98:25:0D:37:91:37:C5:33:88:C0:D5:C2:93:B8
X509v3 Authority Key Identifier:
keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:26:71:09:0e:e3:f5:f2:94:29:59:b0:f5:7f:ec:c4:17:
a5:f5:88:30:e4:79:80:56:f2:90:17:11:37:87:88:22:81:b7:
2d:54:87:8f:fb:f2:67:c9:7d:14:d2:e6:f2:c2:7e:b2:e9:41:
21:7e:cd:54:be:dd:9f:13:f4:02:18:81:9a:f5:98:0a:67:32:
95:c6:b0:63:13:43:60:a2:c3:fd:03:d5:b9:5e:46:36:c6:4b:
ae:9e:07:48:d4:d4:d3:76:6f:51:b7:05:47:0b:c2:d7:03:d1:
09:e6:d1:f9:97:d4:1c:22:ff:4b:e9:31:9b:46:0d:b7:fc:c8:
8d:c6:2b:96:ed:71:78:4f:0e:55:17:f5:bc:b8:08:77:f3:8c:
12:c6:62:ca:85:ff:f7:49:8e:c8:1c:33:37:ef:d2:47:d2:db:
7e:b2:51:14:fc:cb:2b:55:37:2d:19:a9:e6:04:30:25:08:90:
21:37:42:5d:c2:e3:51:63:6d:8c:c2:e8:31:ae:d3:48:a8:a7:
98:c5:e0:57:dc:fd:c5:bc:6f:ab:22:ac:61:a6:f5:78:ec:9f:
67:f9:72:ab:23:bb:5d:33:2a:d8:dc:db:b5:a8:10:16:a4:e8:
ec:d6:58:50:f4:70:f0:9d:21:db:51:6b:7c:b3:88:65:21:04:
34:44:a3:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2
ODhENzQzODQwHhcNMjYwNDE3MDExMTM5WhcNMjYwNDI0MDExMTM5WjAYMRYwFAYD
VQQDEw02OWUxODhjYi03ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8T8zLz5DUfbj5zKE18U/4Sp7OHofErR8lY1FwenNCr3SQrv6QyoosPReGrn
lBHpNwiSjDuwuq+tiO1Qj6dymj9dW5KvO3JgVfIyIL5c+jdWLx3w41SoH3AcCoJg
B7vVJLQb+WTjWZiPM45DNCMg9FVHw8pjZSNzodvVTSfOfL1Fck7i42SwrJ0tIsMR
NVT0iO5c5FJurBf/29X89bldWAgu7RD9lrEnoAv8G/CtSi0LBbRv8YFpah+IiGnT
/Vfl3ngBKouWCz4Y1wgocJkY9NT+HR8dLIwFAQf6ZPTTWOINjTk8sPejUjRR3n/f
rUhozBr4afvdG6DDSl/IVz4GOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCP2+UDq
/ZglDTeRN8UziMDVwpO4MB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG
OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3
cmFhRnNjYWhONXRvalhRNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdismcQkO4/XylClZsPV/7MQXpfWIMOR5gFbykBcRN4eIIoG3LVSHj/vyZ8l9
FNLm8sJ+sulBIX7NVL7dnxP0AhiBmvWYCmcylcawYxNDYKLD/QPVuV5GNsZLrp4H
SNTU03ZvUbcFRwvC1wPRCebR+ZfUHCL/S+kxm0YNt/zIjcYrlu1xeE8OVRf1vLgI
d/OMEsZiyoX/90mOyBwzN+/SR9LbfrJRFPzLK1U3LRmp5gQwJQiQITdCXcLjUWNt
jMLoMa7TSKinmMXgV9z9xbxvqyKsYab1eOyfZ/lyqyO7XTMq2NzbtagQFqTo7NZY
UPRw8J0h21FrfLOIZSEENESjSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:20 2026 by rpki-client