
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: BzRgz94K145Zh5oTVufUe4OPFP041zEr7ME7HNyYPIc=
Subject key identifier: 0D:80:CB:BE:EE:F6:6F:48:2D:17:CA:2A:DE:89:33:3B:3A:4B:F1:25
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 0406
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 03FE
Signing time: Fri 17 Apr 2026 00:21:44 +0000
Manifest this update: Fri 17 Apr 2026 00:21:44 +0000
Manifest next update: Fri 24 Apr 2026 00:21:44 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: dFj5f/Pns36X+1DvvxMLtDp/sPYusmKLS5/SkNvsqrU=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Apr 17 00:21:44 2026 GMT
Not After : Apr 24 00:21:44 2026 GMT
Subject: CN=69e17d18-7b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:0a:cd:2b:0b:de:f5:6c:53:43:c1:a4:a8:
32:ec:69:80:00:87:87:bd:1a:5d:b0:94:53:af:73:
1b:43:71:db:39:4e:69:07:a4:3d:f2:b0:c9:07:3b:
91:e7:2d:d4:6f:3c:56:fa:fa:cd:1e:ea:1f:a9:53:
8f:6c:59:01:f2:6b:00:b5:d2:dd:eb:0b:45:7d:22:
83:2c:5f:c8:50:2d:c8:d2:02:e8:95:0c:ac:9d:c4:
f0:a2:71:1c:7f:34:4d:b6:a1:2e:94:40:59:a3:23:
65:29:a4:15:d3:40:36:f7:e7:2a:64:75:db:cb:3c:
12:23:ae:2e:90:d0:b9:03:70:d5:49:95:d9:8b:fb:
f8:cf:ec:e2:28:64:0a:85:da:00:7f:a4:47:cb:ab:
4d:2c:2d:4f:76:e3:16:50:02:6f:c1:b0:25:df:b5:
2e:e3:e8:75:55:79:02:ed:a5:26:1c:57:32:c7:fd:
67:38:b9:ec:7b:2b:f8:43:3c:d6:9f:ab:70:48:4f:
f3:f0:1c:c7:cb:a0:a5:55:27:34:a5:74:47:c4:96:
51:8b:09:07:98:9d:12:03:0b:a5:30:48:ef:95:a4:
ad:c3:c3:86:9a:20:ff:dd:e1:35:c1:f5:ac:63:d0:
4a:4f:09:30:3e:16:9a:68:27:31:f3:ab:4e:89:8d:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:CB:BE:EE:F6:6F:48:2D:17:CA:2A:DE:89:33:3B:3A:4B:F1:25
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:aa:94:40:d0:33:5b:f2:82:ba:e0:a5:8d:9b:81:ed:e1:
35:65:e2:a6:e7:ad:a1:f9:90:4c:b3:81:5d:13:5a:4e:86:eb:
f5:ec:26:b0:be:a8:25:9a:4c:59:85:31:ef:94:60:5e:89:d3:
c7:21:89:01:a2:7c:77:d7:cb:bb:b4:5b:ce:7d:14:ed:b0:67:
fd:7c:b8:35:48:ee:65:46:eb:8f:43:c6:43:8f:5a:ff:1f:15:
1c:4f:9a:88:48:0c:0c:ce:74:2b:48:38:ba:7f:7e:c9:c8:01:
91:e6:04:5a:47:90:a7:03:fa:6d:88:1d:5e:24:38:00:73:6d:
3e:d7:a8:99:02:b8:23:b6:e8:93:50:f1:9a:0d:5e:54:6d:21:
fa:3a:03:2a:63:a8:41:45:d1:4e:87:3f:35:ba:eb:c3:c0:99:
a1:f5:e2:5b:fb:5b:12:ba:cc:7d:9b:a9:e2:6f:0a:30:80:27:
7a:d6:ca:8b:5d:b5:95:d8:ee:1a:17:8d:69:5a:84:ab:56:d5:
a7:1d:3d:69:e5:2d:83:aa:86:e6:52:9b:e8:22:5c:8d:f0:5a:
61:0e:be:b2:b0:f1:73:58:39:fa:08:c3:93:e8:d4:fc:ef:dc:
22:72:b4:df:ee:b4:e7:32:30:80:08:3b:af:3e:d2:3c:d7:20:
40:e3:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:28 2026 by rpki-client