
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json)
Hash identifier: GDfKxQi8ni3yryyUdT4jKTvOY9gqbCC2GgJOba7pYFc=
Subject key identifier: 1C:4A:3E:D0:67:10:E0:55:11:FE:8A:64:65:09:08:BC:F2:29:F8:D0
Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
Manifest number: DC
Signing time: Fri 17 Apr 2026 06:25:51 +0000
Manifest this update: Fri 17 Apr 2026 06:25:51 +0000
Manifest next update: Fri 24 Apr 2026 06:25:51 +0000
Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: v6wnoJ5S9B3TYoyjk1xLYXerIm51SdC2H/o4XlNIwfk=)
2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: yZGNlzCw9fYEkUgbHQXyzQMU/Eeaou90bAR9FcUS1CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Validity
Not Before: Apr 17 06:25:51 2026 GMT
Not After : Apr 24 06:25:51 2026 GMT
Subject: CN=69e1d26f-1dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:9f:4d:5a:bc:86:a2:79:81:6b:8e:19:80:
e7:87:a6:80:10:c7:14:56:ac:df:fb:22:b8:c5:d8:
be:02:84:77:43:15:66:5c:67:84:88:67:08:cf:fb:
13:10:54:52:8b:f5:2f:81:aa:70:49:5f:84:a7:b4:
1e:a2:47:83:b2:90:c5:74:7d:d0:9c:2a:e3:f9:6f:
cf:10:48:76:37:c9:17:60:3d:27:c2:33:6c:87:b5:
10:1a:6e:e8:1d:4c:3e:aa:6e:c0:67:b9:2e:33:ba:
7e:a3:ec:16:bf:27:92:1b:94:51:59:e9:d1:d7:44:
47:83:32:10:b4:5d:e5:5f:e2:6d:51:4e:90:96:98:
09:8c:12:a6:18:8e:0d:a2:9d:f1:8e:dc:db:6d:83:
28:91:61:62:84:d9:9b:97:f2:fc:30:93:13:50:79:
80:9c:b7:0c:48:4d:89:45:85:0b:d7:01:9f:cd:9e:
16:91:ff:90:89:7e:06:21:8d:f1:da:91:e3:68:aa:
8e:23:69:a4:7f:b9:69:3b:b4:b4:54:68:a2:1a:64:
ad:05:c1:6c:d2:96:6b:7a:7a:9c:9c:5a:23:e0:20:
94:8e:5f:a2:d7:3a:7c:ce:fa:12:cf:dd:f8:04:06:
70:e0:d7:c7:7c:c2:df:fd:dc:99:69:46:0b:a5:62:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:3E:D0:67:10:E0:55:11:FE:8A:64:65:09:08:BC:F2:29:F8:D0
X509v3 Authority Key Identifier:
keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:27:b1:83:14:4b:a6:b9:8d:8c:51:1c:0a:dd:64:19:7e:
e8:a3:28:26:9c:8c:7c:78:37:16:ad:f2:5c:e7:42:cf:eb:64:
55:5e:4b:7a:68:0c:f8:33:ae:97:99:79:21:ca:1b:7b:c8:33:
47:47:f8:9b:b9:18:e3:33:de:da:1e:94:f9:dd:f5:48:e3:48:
7d:e1:9a:96:91:63:bb:5e:bb:29:cf:45:af:40:6c:8c:c0:55:
3d:b2:f7:ac:dc:f4:c8:4c:b3:fa:ba:47:b2:a2:e4:4d:50:65:
c7:0f:46:da:8d:7e:ab:d5:92:c0:d3:e9:fc:b5:d8:ce:aa:46:
d3:08:21:70:a4:11:a5:05:96:b0:3d:aa:e7:a4:4c:9d:17:f2:
7e:b9:82:77:71:48:6a:6a:d1:53:5a:ff:0d:18:c0:cd:eb:66:
36:a1:4f:56:13:5d:2a:7f:bb:ff:4e:fd:32:a3:76:4f:fa:18:
7a:0c:7c:12:d4:8a:50:ff:c9:4e:0e:a7:72:76:aa:2b:fb:d2:
11:d0:03:4f:97:01:12:00:32:3d:df:53:28:e7:51:d3:01:24:
d5:80:1d:a4:19:fe:58:60:9f:8f:df:9d:d9:7b:81:dc:76:f9:
78:ba:7c:2c:b8:f6:ef:35:f9:3d:66:5e:8c:22:52:c8:e5:af:
9d:86:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:11 2026 by rpki-client