
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File: usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier: kQ2sZQHZTmlhJbwuFHokCY/aIx9JApqYBSz7R79wjDA=
Subject key identifier: DD:FA:B4:80:39:E9:59:99:B1:05:20:EE:AD:F1:7B:AF:7A:FB:55:8C
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer: /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number: 3D
Signing time: Fri 17 Apr 2026 08:13:39 +0000
Manifest this update: Fri 17 Apr 2026 08:13:38 +0000
Manifest next update: Fri 24 Apr 2026 08:13:38 +0000
Files and hashes: 1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: aNky5KznIG6/PnWeA2teTrjK2/PzExnSFK8s2YGtJQY=)
2: 9D379516E54D11F092458985756F56BC.roa (hash: Hhwlbhyj8xIcBqU3mSebItjPxuaiWJe6Fv2dlfosEMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Validity
Not Before: Apr 17 08:13:38 2026 GMT
Not After : Apr 24 08:13:38 2026 GMT
Subject: CN=69e1ebb3-0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:de:15:56:e7:0d:a4:fb:fd:10:77:b6:b3:
6d:84:89:ce:51:bb:b8:99:fc:1a:6b:7e:cb:e6:3a:
6f:8e:6b:94:76:23:f3:42:91:71:d2:b1:67:2f:dd:
03:b6:08:4c:83:ec:8a:e4:c4:29:da:1d:9d:a7:0b:
dc:32:8f:62:12:ff:15:c9:e7:ce:61:37:ed:29:7f:
0c:09:3f:5f:5f:8a:89:56:54:8d:93:32:f2:23:83:
aa:e9:f4:68:74:b2:3d:72:cf:7e:5b:38:07:d1:a4:
aa:16:d2:fb:c2:5e:e9:26:4e:f1:01:76:c9:89:84:
c4:8c:08:77:9d:06:ed:16:73:a1:eb:54:04:2d:f3:
c1:05:48:5c:f3:99:77:3a:ee:93:67:db:c1:67:4d:
c4:27:09:ff:ad:ae:4f:f4:77:71:74:ad:2e:86:20:
63:ee:12:d6:bb:d5:b0:63:96:d4:80:6b:18:1a:02:
55:ea:c5:52:82:b8:18:e1:43:18:51:e1:ae:35:58:
18:12:2b:75:9b:ab:d1:36:7f:2d:3a:15:ce:a6:06:
d1:4c:c2:68:d7:5e:82:d2:d6:cf:35:68:35:13:51:
e6:71:8c:00:d5:b0:34:33:1a:0b:e0:59:c3:ba:83:
9a:77:b5:f2:ea:6a:4d:0e:6a:3d:47:0d:8d:4a:26:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:B4:80:39:E9:59:99:B1:05:20:EE:AD:F1:7B:AF:7A:FB:55:8C
X509v3 Authority Key Identifier:
keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:c3:b9:8f:c7:e6:60:86:db:51:50:c2:27:bd:b2:5a:72:e0:
bd:a9:1c:e3:2b:85:c0:1a:a7:d5:2d:30:ea:70:3a:6d:93:26:
b3:82:25:d3:15:bc:d2:86:1e:96:eb:14:a3:29:1b:3e:71:00:
cf:cc:ba:70:34:1a:f1:f2:e3:ab:80:bb:4a:e4:a9:fe:88:04:
e8:39:09:7b:e6:01:81:b6:4a:2a:01:58:3e:d0:aa:b5:d8:48:
02:df:5a:fc:9d:2b:af:c5:a6:ef:72:2c:50:ab:8c:8c:59:6e:
44:cf:a3:6f:a2:af:48:d0:e6:1a:75:05:b8:4f:ab:f9:af:4e:
f3:d7:b4:8c:2e:9e:dd:23:10:60:f9:12:d2:14:41:9a:a4:fe:
32:59:46:d6:9b:b0:97:6e:71:15:82:7d:64:20:33:72:61:ab:
76:f6:14:45:98:a0:59:ac:f9:5a:de:88:a4:d7:77:13:e9:73:
f2:af:ab:25:da:bd:7e:88:79:38:91:72:37:37:b5:43:e7:6d:
b9:57:97:ec:06:e1:16:48:a3:62:94:15:15:a7:bd:e6:d1:c4:
c8:8b:53:f4:b7:77:50:26:b1:8b:17:9a:59:1a:e1:63:b4:6e:
12:a5:19:0a:ca:c8:91:f8:60:c6:14:55:8b:79:a3:02:d2:36:
24:eb:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:58 2026 by rpki-client