
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier: EUvP4fg52uYdlH9GYcvsG58nQIiULBR5WwhIPMCutq8=
Subject key identifier: E7:72:67:23:9E:62:06:C4:9F:F0:94:49:5C:BF:38:4A:1C:1C:E0:D5
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 1127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number: 1114
Signing time: Thu 16 Apr 2026 17:11:36 +0000
Manifest this update: Thu 16 Apr 2026 17:11:35 +0000
Manifest next update: Thu 23 Apr 2026 17:11:35 +0000
Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: /YGaqm5Tw2qtJIzQOZyeH4bSDXFc2rgh3n6dGjfqdmw=)
2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: 9W05C1LlPKcEFv9pU3PetAYWB/PzpYrnvZBHnrLu8UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Apr 16 17:11:35 2026 GMT
Not After : Apr 23 17:11:35 2026 GMT
Subject: CN=69e11848-b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:4f:bf:3f:62:3b:8e:2c:3f:69:d7:8c:76:
aa:4e:99:68:20:09:4a:e4:a1:20:9a:b1:f6:83:e3:
2e:3e:28:68:27:5f:c6:0b:a3:49:0b:df:ec:85:07:
16:8c:ae:bf:42:c3:b0:41:fb:97:e3:d9:66:73:d3:
84:4f:a5:e7:a1:2d:69:22:51:37:76:03:db:c1:23:
d9:1a:35:2b:e1:95:fb:c2:26:cf:32:4f:66:61:11:
71:04:1d:3c:74:19:b7:8d:a8:15:58:5c:ef:b5:ae:
2b:ef:e0:28:b4:9c:37:5b:d1:65:c1:23:e4:91:21:
ba:18:89:cf:36:f8:4b:4c:10:88:7d:f3:8a:a7:d7:
28:08:f4:32:2d:4c:2d:c4:e8:3e:4e:9e:e5:66:87:
57:b9:69:ef:b6:28:c5:2b:b2:63:4d:37:12:0c:fd:
16:ef:2a:85:dd:c4:45:4a:73:9c:b1:74:d7:0e:37:
0a:44:d4:ea:0c:e2:ab:49:a6:51:d1:88:10:21:af:
f4:ae:9d:83:33:11:ea:eb:f3:ac:1a:f2:d9:43:d9:
a2:55:50:86:34:b1:9e:63:4d:1d:17:80:ae:8e:61:
87:4e:e3:85:26:c0:64:14:8b:c9:35:ad:50:92:11:
2d:e1:93:2a:9b:37:e1:9c:4c:42:05:aa:75:ea:ed:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:67:23:9E:62:06:C4:9F:F0:94:49:5C:BF:38:4A:1C:1C:E0:D5
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b0:09:e3:52:00:b8:e7:02:4b:8b:c5:e1:5a:a1:a1:b1:16:
f8:9d:59:a7:a4:d5:73:37:41:f9:e2:0b:59:d6:cb:d6:ea:09:
91:2b:b0:b1:32:15:95:46:16:ee:e0:ec:c4:03:5f:c4:7e:f7:
b1:5f:0a:e6:82:08:d4:f2:3a:98:0b:5b:7a:ad:51:ed:da:ba:
db:a2:ac:2f:e3:a6:e6:50:54:f3:74:ae:cc:95:3d:97:90:a5:
b1:04:53:af:04:75:27:f3:2f:b8:73:b6:8a:0b:58:31:4d:11:
2e:49:68:d1:13:56:de:8f:2f:73:15:6f:84:7f:11:25:ac:cd:
5d:31:78:bd:83:1a:ce:57:af:70:6e:9a:76:30:be:c9:48:28:
d0:f3:07:d0:52:83:27:6a:69:8d:e6:b8:ee:c3:ca:ae:3a:fb:
42:53:bc:97:e6:9c:7f:7b:27:24:0b:24:1d:fe:46:f9:13:4b:
bd:cf:23:c5:50:91:16:da:1e:d6:40:ff:24:4a:b7:2b:a9:6b:
ca:83:31:18:bf:03:73:39:d7:7c:72:88:f6:28:0e:35:21:9f:
2a:20:b5:bd:a1:6d:93:db:30:ed:42:63:c3:e1:37:b3:65:73:
44:79:27:c1:1c:4f:b0:59:41:f4:03:b8:8c:64:85:3b:4c:2d:
ea:08:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:14 2026 by rpki-client