
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: IM2zQVW12XRK0ajNZ7C3qEnPxgpGA7oiCZURONNHXwk=
Subject key identifier: 7B:E6:96:FA:54:20:29:0E:3C:99:58:C9:63:96:FF:FA:6C:DC:D4:1A
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 01D8
Signing time: Fri 17 Apr 2026 03:19:31 +0000
Manifest this update: Fri 17 Apr 2026 03:19:31 +0000
Manifest next update: Fri 24 Apr 2026 03:19:31 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: NEKri82jQ/slvH5fIZHrXJBQdKClzfE4mPBu1rjPV3g=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Apr 17 03:19:31 2026 GMT
Not After : Apr 24 03:19:31 2026 GMT
Subject: CN=69e1a6c3-6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:62:84:a0:7a:80:cb:dc:1a:45:25:87:71:
15:c1:e4:15:50:b7:ae:f9:7a:55:bc:3e:1a:99:47:
36:52:20:b1:0c:69:5d:23:a1:af:99:0f:f3:ff:d4:
8f:e0:6d:8e:69:1a:8f:0e:31:23:07:60:e5:d5:0e:
e7:09:64:8b:b4:fa:12:97:b3:97:6a:64:fc:2f:40:
02:8e:26:23:35:40:61:7a:86:87:c6:8b:d8:4e:af:
8a:5d:7a:b4:c9:f9:44:87:ef:01:1d:2f:da:3a:2d:
10:6f:33:71:66:1a:e6:1e:21:aa:a6:61:b1:dd:59:
b6:52:68:e4:ef:04:f7:4a:b5:7a:ab:a7:a5:d0:21:
66:3f:ad:99:cb:99:93:f9:b5:01:78:9a:33:8e:1d:
53:72:13:4f:5a:c2:cc:0f:87:3e:53:9a:ae:61:07:
27:05:67:38:ae:e2:f5:91:bb:89:bb:86:c6:0d:c6:
d9:49:46:b3:c5:92:c2:d5:da:4c:51:4d:b0:fb:c7:
fb:e4:56:86:5c:1c:7c:8b:90:83:18:c1:62:72:67:
09:d0:ec:64:e3:0a:a2:e5:81:bf:aa:40:be:03:ef:
76:67:e0:45:5e:42:25:b8:df:77:ba:6e:39:e5:7d:
c5:ff:99:7b:12:52:0d:81:d8:2c:07:10:71:40:ef:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:96:FA:54:20:29:0E:3C:99:58:C9:63:96:FF:FA:6C:DC:D4:1A
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cc:14:b3:69:99:26:0b:1e:2d:61:2e:8e:82:fc:b9:07:1f:
be:b5:84:ac:bb:f5:22:7f:c4:16:fd:30:06:3b:2f:e1:ff:0e:
98:6e:2b:96:14:53:1f:fe:23:2e:52:6d:ec:dd:e3:af:cc:3d:
58:c2:67:72:25:75:e9:df:d3:64:46:02:79:06:68:70:06:26:
12:5f:82:6f:bf:0e:47:51:7f:82:1c:62:ff:46:51:76:79:6b:
f2:e5:75:91:95:15:59:ad:39:07:6b:5b:fb:54:4d:66:91:bc:
f5:3b:d8:98:0d:57:91:a9:1f:9f:83:b8:a2:65:05:f8:9f:c7:
15:b8:b3:c8:65:51:95:8f:3f:e6:7b:24:13:64:90:14:9c:db:
4a:a8:e0:38:ef:b5:0b:4f:4b:e4:86:04:46:0b:88:d9:5f:23:
35:bc:22:4d:90:51:a2:5c:8f:bc:57:db:15:82:33:3d:c4:49:
69:de:e9:4e:36:9c:36:8f:80:72:85:89:ed:fa:a8:9c:71:c9:
ec:0f:43:47:7d:38:ad:9b:1c:35:f8:ec:59:2c:c5:1d:16:2b:
de:9a:63:ba:fe:d3:2b:55:e1:62:88:a9:d3:40:ae:01:1d:80:
46:93:df:d3:77:03:35:8b:d5:15:d8:fd:0b:35:48:45:49:a1:
0c:52:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:23 2026 by rpki-client