
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: RFnpi2SPGvNZEXCMHKLqKeFGh51RMS6YyzGrtOxwqMg=
Subject key identifier: 33:C0:42:E4:0C:C1:C1:EC:C7:E2:05:62:3F:1D:FA:01:3F:F3:5C:74
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 0220
Signing time: Fri 17 Apr 2026 02:32:31 +0000
Manifest this update: Fri 17 Apr 2026 02:32:31 +0000
Manifest next update: Fri 24 Apr 2026 02:32:31 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 1wwtcf4/AsIaDgw2eV+5p7nFPxBESGlyqRrJwGfr66E=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Apr 17 02:32:31 2026 GMT
Not After : Apr 24 02:32:31 2026 GMT
Subject: CN=69e19bbf-ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:37:97:e9:1b:f9:e4:7d:45:1b:7f:47:bb:
57:8e:47:a1:f6:ca:d2:b3:2a:47:cc:08:ce:a1:89:
60:2a:e7:1a:2e:e9:ee:71:e5:26:a8:49:8b:63:37:
4d:0f:d0:8f:29:55:0b:f5:94:36:da:eb:a6:e8:76:
02:79:e2:e2:86:48:8e:2f:1b:7e:37:4d:bb:0f:59:
fe:ef:a0:28:2c:92:ea:29:4c:1f:dc:6d:bd:65:ea:
cd:02:2b:e8:f8:3c:40:98:68:c9:3e:36:87:ce:4a:
fa:02:b7:8e:ce:42:c7:a8:e1:10:6b:de:ae:d2:93:
28:55:bd:87:38:93:02:ac:8c:5d:56:13:1e:24:b3:
c3:2b:4a:ee:f8:6a:0f:28:16:a6:2a:ca:6b:bc:6d:
e0:4a:35:a3:94:d9:d5:38:25:99:c7:3e:4a:f5:c9:
e5:5c:91:b3:7f:77:d5:87:8a:9e:c6:10:fa:4b:c2:
a2:67:a5:2e:f7:a0:2e:5d:9e:27:3b:9e:bf:af:f5:
e1:e3:d7:65:5c:80:5e:ca:73:e7:3f:67:12:b8:1b:
ae:07:1a:01:6a:b7:0e:5c:ec:ae:05:c6:b3:ee:57:
33:7c:d3:b4:54:e5:cd:13:ee:e2:cf:13:de:69:f0:
00:fc:96:53:69:93:88:ea:6f:d7:52:f7:f0:26:8b:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:42:E4:0C:C1:C1:EC:C7:E2:05:62:3F:1D:FA:01:3F:F3:5C:74
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:45:78:93:3d:6c:9a:79:6b:d3:9e:d0:08:66:b6:96:62:3d:
76:da:76:5e:f7:a5:d3:38:1e:60:e2:4d:db:d7:2b:b3:0c:71:
b8:96:70:ee:64:d7:f9:bd:94:06:2b:94:63:a4:6c:1d:d9:11:
31:d5:a1:a6:eb:91:93:ab:0e:c5:01:cb:5a:22:98:23:5c:da:
b5:59:aa:39:4d:f8:fe:51:84:fb:6e:8c:86:26:b8:25:e2:5c:
3b:c8:e8:a4:eb:7e:9a:09:61:5a:58:89:97:74:e3:ee:dd:c6:
a8:82:92:24:20:fe:5c:c2:65:ce:eb:b1:a0:99:77:9f:80:cc:
8e:b2:be:b7:7c:89:77:94:86:c8:96:f3:a8:7d:49:4b:68:c0:
80:72:68:c6:ab:d0:ad:4a:a8:02:cd:1d:c7:f7:ec:74:0c:b8:
10:70:41:77:15:98:a5:2a:55:66:71:5e:58:dc:9a:70:1b:f2:
f0:7a:00:42:ed:4f:fa:05:fb:ca:c0:17:5e:43:3c:bc:31:e8:
41:75:b0:7b:ac:85:52:07:fe:c7:57:8e:d1:b9:f5:c1:eb:55:
e0:bb:81:35:6a:ef:10:16:11:4e:fc:d6:27:72:73:9f:f4:49:
18:91:4f:63:a3:94:63:b1:88:5d:5e:96:fc:68:4f:e4:07:1c:
32:ff:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:45:51 2026 by rpki-client