
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: /u5kaLwcpNx2sgQ5UfSh1o055aqDpoH4huQKXB6J9fQ=
Subject key identifier: F4:F5:47:A9:5B:0B:01:A0:20:D7:B9:72:A3:E2:82:14:38:5A:EE:C9
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 014E
Signing time: Fri 17 Apr 2026 04:53:13 +0000
Manifest this update: Fri 17 Apr 2026 04:53:13 +0000
Manifest next update: Fri 24 Apr 2026 04:53:13 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: wiszC7NJQ3+NOzOOy0FrecjyFeDsbme2aSXAYpweTok=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Apr 17 04:53:13 2026 GMT
Not After : Apr 24 04:53:13 2026 GMT
Subject: CN=69e1bcb9-23e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:ce:ee:66:84:bf:3f:85:17:5f:f8:c0:c6:
2c:5c:50:e2:20:0c:86:79:02:fb:06:8c:40:b7:85:
b2:53:de:77:c2:0d:0a:e6:f5:a0:a3:d2:f1:82:64:
27:3a:c7:c9:64:d3:3d:44:8b:f4:4c:8b:84:f2:5d:
75:a2:1a:60:87:fc:ad:b1:15:be:a1:16:16:71:b4:
fd:d8:a9:39:5e:38:f5:c3:a8:0a:e6:17:f3:68:28:
ad:9d:f7:3e:98:44:38:7d:0e:51:49:ff:17:03:77:
90:bd:ae:77:c9:6a:13:b7:5d:18:e7:91:5e:7f:9e:
6a:0e:26:7a:e6:95:ec:90:19:bb:f4:39:bf:d6:93:
0d:f1:5a:72:99:e0:91:b0:7f:28:34:fe:ec:47:32:
b2:32:5e:f2:09:0c:bc:0a:09:a9:64:0e:5e:50:1f:
18:51:32:0a:5d:8c:65:63:c4:31:96:11:6b:9d:f8:
68:11:f6:97:86:3f:9a:be:fb:b3:e6:73:e0:f9:1a:
9e:ae:67:4d:03:9c:52:77:fd:06:ab:34:65:4a:39:
d5:d2:f2:53:9a:51:92:b3:31:5b:29:6d:dc:64:61:
78:67:ff:f4:62:45:08:07:66:e2:64:08:2e:e1:db:
9d:bb:df:16:53:17:ca:09:d4:31:53:a2:71:63:a8:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:47:A9:5B:0B:01:A0:20:D7:B9:72:A3:E2:82:14:38:5A:EE:C9
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:49:bc:8b:37:5b:f5:ea:10:69:d5:09:e5:e2:0a:12:1a:
7f:d4:8e:c6:6b:73:1d:95:65:16:ab:b2:b4:f3:0a:d1:05:ba:
f6:39:7f:2b:26:d2:87:47:ff:da:a9:91:dc:2e:f6:b7:1e:e3:
1b:3f:04:58:d0:ec:e1:b4:f3:d1:ea:8c:52:fe:c9:15:48:c6:
fb:1f:29:68:1e:6d:62:48:3b:de:ac:06:f5:07:51:9a:7c:af:
eb:8e:92:1a:02:6a:5d:0b:2c:78:95:73:29:7c:4c:17:44:7f:
a0:42:84:e2:15:88:16:d6:c3:5e:5f:c9:88:78:63:3c:45:84:
2e:ba:c0:89:59:15:1a:7f:18:17:85:6c:bb:20:ad:c8:fc:6f:
c7:2f:ab:33:ac:a0:54:9e:77:fe:a3:96:94:a8:83:2b:86:96:
63:2c:6d:5c:48:43:97:ca:ac:16:08:64:d3:14:c3:2d:d4:b4:
31:1b:b2:14:d0:44:8d:7e:8b:ec:c5:e4:72:59:ef:ed:ca:dc:
2e:2b:b9:6b:be:aa:46:66:14:6c:10:f2:d0:21:e4:de:3c:c1:
1f:d0:5f:27:b4:ce:3e:58:14:ee:ed:e5:1c:a0:54:67:5a:f4:
a4:1d:40:c7:01:0c:f0:31:e7:97:9a:f5:7a:27:e4:e4:c3:a5:
48:12:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:15 2026 by rpki-client