
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier: ShoA/iY4xk4yDLIBOQB/OUUZhvqM4/e2tSglQKdotO4=
Subject key identifier: 9A:73:83:B2:26:C3:AC:EE:0B:21:F6:18:8C:D7:0D:05:46:C0:3E:C2
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number: 0793
Signing time: Sat 18 Apr 2026 22:59:18 +0000
Manifest this update: Sat 18 Apr 2026 22:59:18 +0000
Manifest next update: Sat 25 Apr 2026 22:59:18 +0000
Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: kg5h4ut09l8894HTLkdngZxRnLTXFsXvtqf2zCQr+lQ=)
2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: azVUar1N6hD3UsS78JcQLSff103BlToNlmsvJ16XoGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Validity
Not Before: Apr 18 22:59:18 2026 GMT
Not After : Apr 25 22:59:18 2026 GMT
Subject: CN=69e40cc6-9fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:aa:c8:26:ef:8d:a6:9d:67:c0:4c:83:50:
0e:6d:03:d3:0e:5c:85:07:59:f9:11:e4:0c:ca:aa:
3a:fc:9d:1c:41:6e:5e:58:44:4e:7d:3e:a7:9e:00:
79:93:1f:77:9c:ab:4c:69:82:73:b4:a5:44:13:b0:
c2:09:46:f8:eb:ea:89:e8:12:e4:38:a0:8d:9a:fd:
40:f4:c4:32:1c:fa:39:a1:89:85:65:60:ef:3f:48:
50:63:12:a1:63:c2:5f:34:fe:b8:d9:8c:ca:45:fb:
92:22:41:93:7a:41:35:8a:53:ca:86:6c:22:2c:62:
e6:aa:48:35:7b:d3:c3:30:d3:74:d9:b3:40:64:c1:
a5:9d:15:04:01:98:68:4f:dc:19:c3:75:06:7b:0c:
51:75:9f:af:ee:d4:a4:9d:57:50:27:a0:1a:ea:3e:
84:cd:21:af:c1:aa:5b:26:be:c8:67:91:87:d5:bf:
5f:4d:91:54:29:d2:26:c5:b4:ed:08:0a:3e:8c:4c:
81:3f:23:15:ea:3c:7e:dc:ff:e3:e2:fa:dc:b1:8f:
d9:c3:bc:5f:87:8b:7d:b4:fb:29:67:bd:3d:e0:b1:
d0:68:9a:42:44:48:cb:b1:6f:90:b6:c5:a1:ed:c5:
30:8e:ea:5e:8f:c3:fb:13:ff:a7:3f:9e:9d:1f:43:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:83:B2:26:C3:AC:EE:0B:21:F6:18:8C:D7:0D:05:46:C0:3E:C2
X509v3 Authority Key Identifier:
keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:1e:6a:49:b9:e2:55:4b:ab:a8:66:d4:9b:a7:03:a2:df:
1f:df:be:ba:29:ad:dd:e0:0f:ac:6a:96:77:d9:74:0c:43:94:
98:63:e3:e0:5f:f4:66:25:b0:fe:4a:c4:fd:d4:18:61:7b:99:
d8:bb:6a:03:9c:dc:24:a4:b1:e4:e7:45:6b:63:e0:b2:e4:39:
1b:57:0d:f3:e4:62:71:8b:98:2d:e0:d9:f8:ff:5e:1e:8f:d6:
8b:49:6a:f9:1a:11:96:2f:72:05:1d:64:2e:2f:c7:a8:b7:03:
64:89:8a:f2:e5:07:2a:bd:c7:aa:0e:49:b2:9c:b8:c4:e8:9f:
86:ea:91:96:00:56:6c:9a:a9:c3:87:ca:b9:9b:42:6f:72:80:
b7:13:5a:ca:88:a9:1a:45:2e:ec:69:5d:87:bb:d6:14:14:5a:
2f:2c:f0:c7:2f:fc:c5:b1:50:7a:c9:04:c6:f0:85:68:3a:8d:
b5:b9:80:cb:89:8c:79:bf:ea:1e:ae:87:dd:55:80:e4:fe:67:
3c:42:05:c8:e2:ff:32:0c:c9:48:16:95:a3:74:07:34:b9:f2:
4f:d6:8f:bd:09:77:9b:e6:63:ef:bd:63:d6:b3:35:a4:f6:a0:
f1:cf:65:72:3b:47:de:16:f8:a3:a5:e7:13:77:63:df:98:59:
6c:13:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:44 2026 by rpki-client