
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File: _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier: 4YrVfEI7Y0cciuffOEF3GJmncGePqtNXi5Vg4050nbo=
Subject key identifier: 2E:AF:D7:F4:03:F7:6B:38:50:2C:7E:43:A3:C1:25:A7:38:5C:50:6E
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer: /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number: 0240
Signing time: Fri 17 Apr 2026 02:52:05 +0000
Manifest this update: Fri 17 Apr 2026 02:52:04 +0000
Manifest next update: Fri 24 Apr 2026 02:52:04 +0000
Files and hashes: 1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: JCqjFs6YAc9OCdfRUyusM9QT/yWGOnYqyzEyVJ6rv5g=)
2: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: h9+rV5KTh8hiz/Mh+8LSh/6EazAt2Pe7IWwQzS6Asp8=)
3: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: 2/oEhNKw4A8hCV5h32sgGlhduxEgDsT8LW5cn4d4U6o=)
4: 2BB01CE0276711F1A27699BFC0833773.roa (hash: Oxy2vKZrTf1XlrdBowSVsy5MCvRUGaCeQ6J4bpGvONc=)
5: C724415E35F911EE9F140449C4F9AE02.roa (hash: 1QPFfKPtxnZyzoIhQPujaiv9QOfwMAK/nR5JlwDQYrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Validity
Not Before: Apr 17 02:52:04 2026 GMT
Not After : Apr 24 02:52:04 2026 GMT
Subject: CN=69e1a054-7894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:60:bf:a8:07:8e:d7:03:fa:83:ac:1e:62:
1e:bf:72:3c:b1:a0:da:67:12:fe:33:80:d9:e0:87:
ff:f5:04:7a:18:82:e2:18:26:0f:57:5d:16:07:da:
ac:e4:b6:db:b3:d8:e4:01:d1:a7:70:f3:5e:0f:61:
54:95:33:4d:fb:b9:9d:eb:62:be:73:0b:9a:8e:dc:
bf:03:ae:de:ee:19:17:bf:74:d3:ae:f3:38:72:33:
2b:88:d1:94:a6:28:7e:7c:45:02:6b:f1:3b:df:d6:
b9:f6:ec:b6:63:8a:6a:ca:b1:c7:5b:ad:50:f2:62:
49:32:f3:09:b5:04:c0:5c:7a:e9:4f:00:2d:f3:85:
cd:ab:1c:ac:2c:3b:05:04:cf:20:be:40:78:5c:be:
fb:b1:87:07:32:f0:03:fb:6c:44:92:ef:31:86:69:
92:ab:04:df:5d:63:64:73:2f:f1:9f:3a:0f:24:c7:
28:64:7b:2d:79:c0:db:f9:cd:bc:39:d2:88:98:99:
c0:5b:cb:0a:9f:c6:ed:e9:98:73:da:f1:0c:47:d7:
cc:84:ab:d1:7f:6e:93:e1:72:ab:5e:6a:4f:54:06:
08:fd:3e:8d:5b:4d:44:f3:11:fe:77:2f:49:87:39:
99:12:b6:e2:33:e8:94:a7:30:ca:b1:b4:de:b5:89:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:D7:F4:03:F7:6B:38:50:2C:7E:43:A3:C1:25:A7:38:5C:50:6E
X509v3 Authority Key Identifier:
keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:f1:39:db:d4:08:4d:d0:58:44:40:3d:71:1c:71:5f:ea:
33:61:85:58:a1:fc:e6:b8:1e:e2:ac:aa:76:7c:c6:08:cc:de:
a2:f9:c5:11:e3:91:c0:3d:73:a6:59:51:c2:0a:e6:bc:f9:44:
7b:21:11:ca:ad:e5:bd:5b:03:a9:24:75:fd:b6:57:11:57:6b:
47:c8:ce:f4:19:93:98:32:e4:f7:95:01:9c:30:e8:69:3e:07:
65:08:88:37:78:ed:10:a9:7a:3c:92:56:02:5b:9d:95:fc:ae:
7d:bd:72:d4:b3:43:88:0a:4b:76:49:f9:09:52:14:26:fc:dc:
45:ab:3d:be:e3:79:91:c7:11:de:d9:74:dd:23:25:d4:be:c1:
4e:b7:50:33:ae:fd:3d:4c:a2:c4:ad:94:88:85:75:f4:ba:78:
7c:01:19:41:59:ad:ba:25:8b:6e:00:4d:d5:1a:50:72:78:1e:
f0:ad:0d:a2:c6:ad:d1:9d:2d:25:4e:13:a6:85:09:4e:69:6b:
e7:92:ff:a5:0a:3e:85:d7:8e:04:b0:6d:2e:83:7f:17:c5:dd:
04:85:19:fc:15:b1:3b:e1:26:7c:7c:80:61:33:5f:02:28:78:
95:72:eb:f2:2b:19:d6:44:b5:ce:39:2a:2f:dc:cf:56:43:2b:
69:d7:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:36:21 2026 by rpki-client