
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier: ewnubo2W3n7kKlLwpLpVEwTy7ipCT+JByu5uMDCxaOg=
Subject key identifier: FA:62:E3:B9:0C:B3:C4:2D:AD:55:7E:DF:9B:33:2B:77:04:65:B1:93
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial: 0DC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number: 0DB6
Signing time: Thu 16 Apr 2026 17:50:23 +0000
Manifest this update: Thu 16 Apr 2026 17:50:22 +0000
Manifest next update: Thu 23 Apr 2026 17:50:22 +0000
Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: AUbxTlFFRnohEe42k0hyJYI6JHU5b02xHyB/lN+Vvmc=)
2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: 6j7bxqHzx1dI1kYE2+5kVsCKoZs1p0M+vne2lqDu34U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3527 (0xdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Validity
Not Before: Apr 16 17:50:22 2026 GMT
Not After : Apr 23 17:50:22 2026 GMT
Subject: CN=69e1215e-6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:ae:c9:22:1c:73:3f:ee:d8:0f:51:5f:41:
91:2c:40:eb:28:b2:32:25:98:b5:c0:07:8c:89:0c:
96:cc:62:02:ff:64:45:73:70:66:b8:b3:c7:89:b8:
d6:c3:94:c4:4e:71:7f:46:5b:e5:7b:33:f6:fe:b0:
32:e5:95:7d:20:f6:b5:0d:70:90:32:45:06:fe:1f:
b5:c9:f8:8e:73:a2:f8:f1:cc:f3:f4:7c:82:36:2c:
b3:ab:79:b5:96:73:ca:cb:3f:7b:f0:a8:2f:b5:dd:
cc:14:0f:5f:28:23:2c:db:93:a3:28:b9:80:a8:99:
81:fd:b1:8f:9f:f2:96:34:9d:57:e2:cc:dd:06:c1:
3a:53:a3:ff:28:3e:88:51:28:45:be:41:b2:81:0b:
a3:0f:69:19:9a:20:01:14:43:13:60:74:a4:2b:cb:
c7:2c:99:f1:85:37:f3:43:e6:9a:e9:de:ff:cf:53:
6b:d0:0d:83:88:56:e6:66:b8:20:9b:07:49:51:4f:
58:5c:a9:2d:6b:4e:e4:c4:97:8c:39:51:e4:54:85:
55:ad:ea:6b:59:fe:ea:63:5d:47:94:85:6f:60:16:
4b:df:81:91:fe:32:35:ca:d3:c4:56:1e:73:e4:ae:
6c:c8:7b:22:85:ca:48:9f:0a:28:87:c7:ee:19:cd:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:E3:B9:0C:B3:C4:2D:AD:55:7E:DF:9B:33:2B:77:04:65:B1:93
X509v3 Authority Key Identifier:
keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a2:39:4a:a1:84:19:ce:a5:e5:f4:18:08:58:19:2b:3a:ea:
ba:8c:cb:8b:ed:ed:30:1a:91:9a:c0:cc:0c:71:27:70:9b:13:
8f:6a:79:36:ba:c0:5e:f2:8f:ed:fb:6d:0d:ef:bd:e9:2d:40:
2e:fa:a5:0d:28:f9:2c:e4:d6:e6:58:ec:5b:2a:22:e7:57:ac:
cf:d6:f0:62:46:39:33:fa:95:41:2e:db:32:80:08:ca:31:18:
b6:a9:5f:9c:cd:2c:f4:4b:31:1d:94:6b:ab:4e:e6:0d:fc:77:
96:a0:9e:cc:bc:ca:73:c0:3c:d4:da:09:9b:7f:98:c8:3d:44:
87:5e:51:d9:55:db:e8:5c:fc:1d:93:b5:78:14:00:a4:ec:34:
66:43:1c:ed:5a:bc:d2:ea:b2:6e:ed:d9:61:1c:65:18:d1:9a:
04:1f:f7:9a:d1:07:b2:e9:f5:2c:6f:5b:e4:ba:df:fd:e0:77:
3f:45:2a:21:73:e3:bc:84:45:0d:86:24:a7:f0:22:ac:7c:4e:
80:8d:1d:ef:14:38:18:fb:2f:c3:f1:d1:df:15:96:7b:5d:a6:
7a:e8:fa:0d:5b:86:bd:6d:db:f6:06:ee:5b:bb:d5:ef:50:ab:
a8:be:35:04:0b:a0:a8:ab:48:b3:a7:4c:c0:c4:23:3c:ca:f6:
47:66:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:06 2026 by rpki-client