
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: iyIOfM/sDYtrrRaaCjtnXKM8L7LNsU+ew+bs6UAtgLE=
Subject key identifier: 68:AB:D2:0B:8F:CB:02:00:4C:5F:46:C6:AF:3D:F0:6F:FB:65:6F:D4
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 04F5
Signing time: Thu 16 Apr 2026 23:41:03 +0000
Manifest this update: Thu 16 Apr 2026 23:41:02 +0000
Manifest next update: Thu 23 Apr 2026 23:41:02 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: zaiKcBClbmyj8BapNU0cgeVaIoj2jkmPiBzKb9Fdwiw=)
2: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
3: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Apr 16 23:41:02 2026 GMT
Not After : Apr 23 23:41:02 2026 GMT
Subject: CN=69e1738e-9113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:5a:8b:84:46:a5:ae:ca:01:1f:f0:5f:45:
73:df:2f:83:a9:4f:4f:55:e4:37:e6:11:de:9d:88:
8d:7a:f3:0e:ab:0f:86:8d:c3:00:7f:84:b0:50:57:
b0:39:6c:bd:d1:66:20:76:de:e4:29:3c:51:00:6c:
cf:dd:00:23:7d:da:9d:09:80:66:b5:2a:83:9b:48:
e1:d6:98:e3:8b:c8:c8:c3:7a:41:33:db:18:e1:62:
01:d2:a9:19:33:d3:76:87:ce:76:76:99:31:23:6b:
f5:49:9b:31:9d:d7:06:88:34:f1:81:eb:70:9e:18:
76:03:42:5e:1f:fe:54:90:2a:27:df:ff:63:7d:d7:
3b:97:82:cb:fe:cd:24:52:c7:5d:89:f4:d2:2c:bb:
af:57:9b:d1:92:4c:d9:83:21:a2:d2:78:92:f2:2b:
fa:fc:ce:02:1b:71:54:6f:7f:09:e2:b4:1a:3c:c8:
57:91:b1:c5:0b:31:96:92:b6:97:25:b0:a8:b9:4c:
83:1c:5c:37:47:37:ab:06:bb:a2:45:0a:66:ed:e5:
7b:b3:cb:c6:4e:4b:60:3d:0f:2d:9e:d8:47:f5:ae:
79:24:cd:b5:82:5d:7a:39:65:b9:00:b8:b2:50:d8:
f7:93:9f:31:f0:27:94:c3:26:6d:2b:98:69:63:3a:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:D2:0B:8F:CB:02:00:4C:5F:46:C6:AF:3D:F0:6F:FB:65:6F:D4
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:cd:04:30:dd:2c:04:96:15:d9:14:49:6c:cc:5d:ab:54:ad:
0f:ce:51:dc:46:2c:31:c7:89:7f:3a:6f:bb:e3:44:58:59:56:
e0:ae:34:5a:18:9d:cb:a4:d6:8e:85:1d:74:d8:58:b2:ad:47:
f5:b4:b3:56:33:3a:4c:67:97:52:a3:58:66:6d:13:b9:44:8a:
d3:dc:6c:fa:ed:8b:f9:00:a6:e4:5b:65:ff:6e:3f:8c:a4:24:
7b:00:fa:99:e9:0b:49:94:57:33:3e:65:29:55:0f:66:d3:c2:
d4:aa:81:4c:ab:9f:b7:86:32:d3:02:fb:e4:60:88:06:98:dc:
1c:16:fe:90:0b:db:22:d0:5c:4d:e2:41:74:d3:bc:c5:1d:29:
76:c6:24:7b:ab:9d:9f:d7:30:b7:99:6c:04:09:ca:af:19:c4:
09:f9:65:86:f7:0b:b3:ea:bd:07:e3:ff:0a:32:d2:07:0d:c1:
89:90:20:57:42:98:32:f4:c1:75:14:5a:9d:9e:46:7d:42:02:
12:a9:c4:59:1a:cc:27:1f:0b:b6:e8:a0:e4:d8:1e:10:b2:6e:
1a:31:c0:4c:65:7a:c1:da:72:73:03:c5:8e:ae:5b:dc:d0:7d:
44:db:03:37:41:02:fb:97:ff:ba:9d:61:3f:69:d0:65:9b:4f:
4a:cf:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:51 2026 by rpki-client