
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File: _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier: q0CKtbvXZ1LTYed9xBVrhhoOC70m7NIyGULlhzPL0Dg=
Subject key identifier: 33:52:C4:4A:E0:96:37:AA:20:EA:74:26:D3:7D:37:52:9F:CE:D9:62
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer: /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number: 01BE
Signing time: Fri 17 Apr 2026 03:34:39 +0000
Manifest this update: Fri 17 Apr 2026 03:34:38 +0000
Manifest next update: Fri 24 Apr 2026 03:34:38 +0000
Files and hashes: 1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: MhdiTr4XMV7TdzFrcL41PLcZcC0Rqt19+OX13/HkXZg=)
2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: PmJXrlZBW/Jhy2d+bdtzc9tf2EA6Xqewg3mOh023Q7k=)
3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: NKX0r2kzj4SUk7RTKDlHma90p8PbwUyF/j7pyE3pWnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Validity
Not Before: Apr 17 03:34:38 2026 GMT
Not After : Apr 24 03:34:38 2026 GMT
Subject: CN=69e1aa4e-b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:f6:37:29:31:da:78:f4:91:06:a3:4c:76:
56:90:ed:3b:0c:d8:aa:d8:76:eb:37:77:45:bf:03:
34:99:ab:1b:11:5f:53:a8:38:b8:92:19:0e:30:5f:
d1:3c:0a:0a:20:82:be:20:e2:d5:5c:03:00:d9:98:
19:82:f6:f3:f4:30:ce:46:12:c0:d9:ab:47:83:2c:
69:37:21:93:f1:a7:83:7d:97:5d:22:0f:9e:2e:28:
a9:16:e2:e3:26:69:45:35:9c:71:80:ad:11:1b:23:
8d:23:44:ac:5a:b6:ab:ba:64:b8:a8:96:23:2b:30:
59:15:5c:0d:4d:b3:32:23:60:95:92:44:31:94:d8:
41:7e:1a:9c:f4:5a:05:43:f9:88:80:90:6a:97:33:
9a:ab:c4:37:32:e4:6b:83:ed:c2:5c:76:1c:41:ce:
74:4e:3f:13:8d:d4:5f:74:39:ae:19:84:f8:98:cf:
0e:de:42:57:16:46:8f:a2:35:49:de:44:dd:f3:12:
42:e2:b2:ee:cb:d8:51:39:0c:2e:4d:85:41:f4:a4:
b5:51:1b:e5:a1:7b:4e:c5:70:2e:eb:55:80:c7:d3:
6c:72:7c:22:e3:2d:64:7d:f6:de:63:2c:03:67:6e:
a5:a9:cc:a2:44:9b:b2:4b:82:b6:5b:fd:58:f6:09:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:C4:4A:E0:96:37:AA:20:EA:74:26:D3:7D:37:52:9F:CE:D9:62
X509v3 Authority Key Identifier:
keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:19:35:4d:3f:69:35:24:58:6a:b8:39:69:4a:4e:3d:74:51:
f3:04:55:ff:e1:0b:e3:94:04:0d:f2:18:88:95:ed:5b:ad:8d:
28:2c:11:30:e1:49:ca:12:91:ca:c8:fb:15:c1:d6:37:a6:d8:
a9:4c:40:39:73:7c:51:5d:c0:7b:3a:28:9d:ed:ff:da:b4:bf:
ae:b6:0b:94:9b:cc:38:32:eb:cf:30:d7:91:9d:34:98:90:d7:
ed:50:c2:c0:8b:22:d6:5d:38:28:23:f2:6a:04:89:5e:eb:5f:
f8:e3:11:51:09:41:2c:d3:1d:9e:1a:c5:e7:c3:a3:2d:6e:75:
80:cc:c3:d3:aa:b4:3f:d5:e7:9f:a4:31:1a:eb:af:dd:ef:a0:
8b:c0:b6:a0:50:86:7e:03:a3:87:cd:b0:57:19:f0:d7:f5:3e:
d4:0f:da:f4:7b:ed:2e:81:3e:f4:c1:0c:f4:8d:00:f4:8d:d5:
a8:60:12:87:3e:b6:91:78:71:78:5a:1b:15:db:62:c8:bd:ed:
8c:52:25:96:11:7f:52:fb:df:10:c4:c6:81:5e:04:77:13:b8:
e2:e1:46:87:bc:5c:33:d8:0c:85:39:35:16:a1:f3:11:05:95:
e5:87:6e:66:bc:df:49:55:a6:c7:8d:81:ee:4b:e3:2c:26:44:
da:a4:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:35 2026 by rpki-client