
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: 7M3EvYm7hCX6Xg4vTiciIqoti+n9M7TzRzuaVtQED/0=
Subject key identifier: FB:D0:38:64:E7:FF:A0:40:BD:27:B3:E8:C0:CF:F0:CA:EE:5D:72:73
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1DAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D5D
Signing time: Thu 16 Apr 2026 16:05:08 +0000
Manifest this update: Thu 16 Apr 2026 16:05:08 +0000
Manifest next update: Thu 23 Apr 2026 16:05:08 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: IA8V0r4JDyGhfAmtRfM97I1kfWPc6fRKkF5e4oxbGYI=)
2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
3: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
4: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7597 (0x1dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Apr 16 16:05:08 2026 GMT
Not After : Apr 23 16:05:08 2026 GMT
Subject: CN=69e108b4-e919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:9d:38:29:02:5c:1f:fa:03:72:05:34:06:
e7:21:58:ba:78:5a:f7:b3:e3:9c:03:23:fd:2e:a4:
3e:ef:fc:2d:b9:98:66:d8:ec:64:22:3a:98:8c:79:
16:c2:bd:f7:eb:ea:e8:23:ad:c4:e8:77:f6:e2:d9:
95:17:8f:8a:ba:23:8d:6a:85:d9:e4:9b:30:87:cc:
52:bb:2d:46:75:18:3f:ad:9d:d7:65:be:88:d3:87:
93:a4:ab:f8:11:0d:8d:b1:57:ed:fe:1c:19:45:49:
0e:7b:a9:aa:4f:58:c1:6f:52:f0:06:b2:ea:f6:47:
9a:91:78:6d:bf:b1:1b:ac:9f:c2:20:42:69:95:7c:
8c:fe:68:4f:f1:7e:6c:b4:6f:4d:8d:43:c6:86:77:
13:11:a4:5d:01:8e:8c:d5:9a:d5:d4:39:aa:23:a1:
a0:5f:f5:b9:a0:d9:c7:19:0f:7c:32:4a:ab:9d:1e:
ba:b6:a9:4f:49:88:ee:98:45:12:94:fe:a1:63:4e:
30:32:68:f5:7c:ac:45:c3:8a:a3:05:de:2f:a1:6e:
59:3f:74:ad:7c:d1:6d:4d:d2:69:72:2c:97:31:42:
52:34:b2:fe:32:7f:79:91:00:2a:77:e9:92:e4:aa:
7c:18:eb:1e:9b:c5:bd:f1:b2:3e:41:07:f0:23:8b:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:38:64:E7:FF:A0:40:BD:27:B3:E8:C0:CF:F0:CA:EE:5D:72:73
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4c:83:c3:c0:f5:6d:fa:82:99:44:a9:1d:0b:c9:61:cf:a6:
4d:32:34:42:5f:ef:0b:38:67:2b:4a:fd:97:c4:92:e2:8b:69:
6c:b9:4a:df:99:6f:db:ae:50:da:ee:92:b0:f4:06:2b:4c:96:
ea:a5:16:38:6d:ac:e6:d0:31:17:d5:1e:ea:bb:04:1f:51:9d:
44:d4:6d:4c:c2:0a:67:19:74:f4:d7:d7:aa:f1:dc:99:0b:45:
bd:86:3d:f0:2c:47:ea:97:bd:5c:8d:cf:2c:29:0a:77:5a:fb:
cf:16:28:8d:ae:ae:25:ba:41:c2:b9:3f:2e:79:8c:82:e8:4b:
f4:15:30:fd:e2:0e:25:d6:0e:67:15:4c:49:18:ed:15:32:08:
88:f7:12:27:87:56:db:5e:50:97:e4:99:eb:83:6d:27:2f:2a:
ae:8f:98:8c:b9:a0:64:0d:f0:bc:d9:35:14:f2:6b:8a:b8:18:
2d:e4:51:c9:71:a5:6d:90:db:0e:eb:33:f5:6c:33:b2:0d:f6:
2d:e9:49:d9:48:6c:d9:cc:06:7a:6e:1a:79:82:39:ca:c7:82:
34:b6:ec:4b:65:b3:2d:f0:9b:52:05:0f:1f:ce:6f:79:62:e2:
e3:5f:36:ef:89:79:b4:e4:27:22:45:4f:be:d9:62:1d:b6:16:
f6:5a:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:56 2026 by rpki-client