
$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier: CTcv94DIEFi1EcKv5uEY5tqCgzRi7v/F5IEXOEjsw5M=
Subject key identifier: 01:B8:70:5D:0D:05:F0:AB:58:50:A0:69:D3:4B:BE:DC:F6:27:88:B2
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number: ED
Signing time: Sun 19 Apr 2026 06:02:56 +0000
Manifest this update: Sun 19 Apr 2026 06:02:56 +0000
Manifest next update: Sun 26 Apr 2026 06:02:56 +0000
Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: ETjAaz6hH4qRTnZG7s4DIxmeFybp5lY4yDXVU/GPDfE=)
2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Validity
Not Before: Apr 19 06:02:56 2026 GMT
Not After : Apr 26 06:02:56 2026 GMT
Subject: CN=69e47010-c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:78:3c:46:b7:ba:c7:05:b1:ba:54:15:1e:
ad:cb:e6:88:2b:fe:b5:95:e9:1f:c3:26:86:9f:cb:
75:87:8d:22:93:cd:e1:e2:20:d8:9f:84:c4:a4:aa:
e1:df:98:08:1f:a6:f1:a1:cd:f6:4b:42:2b:5d:35:
39:9c:bb:4d:5c:12:42:55:cd:b9:e4:41:2f:40:df:
0f:3e:9d:64:d4:77:2b:67:bb:e9:ac:e0:44:5a:c3:
53:78:c3:2a:1c:7b:8c:64:5a:d9:ba:a3:41:68:e7:
a2:03:5b:f2:cb:40:05:22:36:65:86:d0:38:85:22:
1e:83:0d:e5:3b:5f:2e:ee:47:d5:29:6e:01:c6:cf:
e9:c6:c1:b7:4a:21:81:44:00:91:73:ad:ab:2e:4f:
37:3a:d0:67:3a:f3:aa:17:a8:cf:74:fd:6d:ae:64:
e3:11:20:85:a4:81:b6:8e:eb:75:59:aa:59:96:0c:
f2:18:f5:67:8f:8b:7c:a7:80:40:b1:69:5d:6d:db:
e5:4a:db:11:32:6b:8e:a1:fc:a0:14:1a:0b:07:e8:
4b:5b:6e:75:2b:06:ab:bd:3d:25:95:cc:68:d5:c2:
68:09:d7:ca:ad:68:4e:02:27:8e:4b:55:7a:49:97:
09:c9:3e:63:8a:fd:e2:16:ee:b8:e9:1a:bb:0c:db:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:70:5D:0D:05:F0:AB:58:50:A0:69:D3:4B:BE:DC:F6:27:88:B2
X509v3 Authority Key Identifier:
keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:7a:07:a2:a4:0c:b0:0b:f4:27:16:a5:94:4a:3b:3d:96:
b4:14:69:9f:50:b1:cf:3e:48:ae:ba:fd:aa:a8:83:4f:91:16:
38:5a:5d:0f:97:c8:83:28:c1:8b:58:35:1f:ad:3b:60:26:d6:
51:5c:50:b1:51:91:59:d3:a9:b0:8f:55:17:8f:07:31:20:99:
db:17:53:04:cf:7c:f2:f5:ca:50:14:40:a7:9e:d6:fa:1f:b3:
9e:c1:65:30:79:70:0c:aa:56:89:06:91:f6:dc:a0:9e:9b:4d:
d3:13:cd:02:7d:e0:26:f7:0c:35:9b:c2:03:26:c3:58:bf:39:
28:4c:cc:ee:48:02:89:65:54:ea:1d:51:c3:5f:93:0e:25:92:
96:82:90:5c:72:43:4a:8e:c5:19:3d:21:40:35:59:6f:ba:fd:
23:37:75:06:dd:8f:08:0e:01:b0:d0:19:09:58:51:f1:c2:8f:
19:97:2f:75:6d:95:da:0a:0b:ae:87:87:19:7e:63:2d:9b:50:
37:ed:62:38:58:8d:69:94:b7:90:7b:c3:86:2c:3b:4b:54:74:
a6:a1:fb:36:50:9e:31:83:21:1d:97:39:0e:17:cf:34:d0:7b:
f3:8c:b7:69:42:7d:5c:7b:1f:95:4b:b7:ae:95:90:8e:73:e1:
95:0c:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:48:18 2026 by rpki-client