
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: j5pX3lBlvo1nSu26Dg7+4hRjoSaXh6sTMsnnWg1tSQM=
Subject key identifier: F3:78:16:28:62:C4:D7:B7:FC:D6:F2:95:F0:12:98:78:D0:E6:53:4D
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 01A1
Signing time: Wed 15 Apr 2026 03:55:22 +0000
Manifest this update: Wed 15 Apr 2026 03:55:21 +0000
Manifest next update: Wed 22 Apr 2026 03:55:21 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: Zfc88Dzhph0J0a50k1FHiBMcvBWdk9BRvWwBN95NfTA=)
2: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: BvVm+cdTU27eoQKqsYV8ea/BQUXoFb6HaNPZQI3tKQc=)
3: B2F952F624D411F1AA718F4CAB833773.roa (hash: uzrNk/ttRA0V5QFMV/D2N3f4BnOOXaAYpx7DnAlMrV0=)
4: DB21824E24D411F1AAE44A56AB833773.roa (hash: sd7eWbgQLT8mF/ebnKb4PSaZd/04vpDcBO1zje9d/YI=)
5: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: hkREO2rJxk9zu25VhNr6Vq8tiIR0z+nxnfZpEJOP+I8=)
6: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: 69VjdrreL7j6MQXGXH1spgGTbaEO3hjgR032vB7O5e8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Apr 15 03:55:21 2026 GMT
Not After : Apr 22 03:55:21 2026 GMT
Subject: CN=69df0c2a-70c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:8d:15:83:87:98:cb:53:e8:f4:03:f1:ac:
19:02:49:01:c4:bb:c4:28:20:01:f3:94:d7:aa:cb:
80:a0:6c:e8:59:b2:35:fd:49:25:a1:6e:80:1a:d2:
7a:65:bb:8f:ac:b9:33:7d:09:47:81:f7:2e:aa:fd:
3a:0d:c6:84:a2:11:9b:26:58:b7:37:61:86:b0:91:
60:b2:c1:c6:83:19:e8:7c:54:f2:27:ec:09:64:73:
db:4d:6c:84:2c:8a:d6:63:24:4c:90:8c:1e:ca:20:
5a:af:dc:d5:7d:db:4f:54:dc:1d:93:80:97:63:02:
46:1b:46:80:b6:4e:c6:32:12:bb:f5:e1:a9:0f:22:
ac:68:37:98:7a:1e:3f:4e:3f:9d:ca:f8:0f:05:c6:
69:21:60:7b:f1:95:ff:4f:0c:83:44:5a:6a:4a:95:
2a:78:b9:9a:d6:fa:cb:7b:e0:8b:d4:b0:8f:a0:59:
27:57:bc:59:5c:03:32:d3:48:33:81:4e:cf:bb:7f:
0d:5f:d1:ab:de:a4:12:52:e6:85:98:06:58:81:ec:
28:9d:6c:b7:fe:68:05:52:f0:c8:23:ee:e2:1a:00:
52:98:a5:58:a9:a2:75:80:2d:2c:8e:98:72:e3:c5:
fd:ba:ff:f1:0a:00:19:0f:9b:ac:c5:9c:b7:e6:02:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:16:28:62:C4:D7:B7:FC:D6:F2:95:F0:12:98:78:D0:E6:53:4D
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:40:42:76:51:dc:cc:04:87:ae:bc:11:ae:c1:4b:dd:64:e5:
5d:f9:0b:d7:91:37:da:35:39:21:7c:ec:83:fc:f9:fb:64:25:
18:ad:04:c7:52:5a:e7:cd:f6:61:55:6d:40:09:2a:00:9e:a1:
03:77:1e:8e:6b:50:5c:03:55:6f:fb:d1:32:06:5e:f5:cf:06:
d1:65:60:f7:65:04:45:e8:d8:25:f7:cf:ef:d1:15:c4:f7:7f:
8e:70:44:a3:47:8a:b7:ff:63:bc:19:e5:bb:f6:26:1f:eb:c8:
7e:99:af:85:26:8a:22:bd:56:9c:65:bd:d9:b1:94:a5:a3:fd:
ac:dd:1d:bb:f3:70:32:cc:cf:ba:75:2a:b7:d6:90:91:7b:c6:
36:2a:c8:1a:72:c2:06:ca:da:c0:1e:d7:14:0e:71:9a:f2:05:
e1:e2:29:48:c7:34:ee:e1:fc:71:1f:1b:33:9a:32:d8:c5:cf:
fa:4b:33:24:3e:5d:b6:e2:bd:1f:54:b7:54:63:58:02:95:80:
3a:48:73:b6:69:ba:13:56:b6:a7:d0:a3:e6:90:92:d8:39:94:
31:f1:79:7a:cc:a3:ba:2f:bf:32:cc:ac:cf:b7:81:6f:d5:a8:
bb:c4:0a:52:c6:c1:70:b4:6c:a5:e1:2c:42:64:84:f4:91:e0:
98:8d:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:50:35 2026 by rpki-client