
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json)
Hash identifier: zjnq0WVBspxoV+5FmMmbAkClFwtRfYVBPSf8bHX/wgs=
Subject key identifier: 52:74:13:7C:33:89:71:93:7A:BC:76:03:63:7D:07:E9:75:F9:73:F7
Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Certificate serial: 08BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
Manifest number: 08B4
Signing time: Sat 18 Apr 2026 20:20:27 +0000
Manifest this update: Sat 18 Apr 2026 20:20:27 +0000
Manifest next update: Sat 25 Apr 2026 20:20:27 +0000
Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: INmanq222VDIoreTM3nER/kTu6xOHD+iKaoUa0aM2Fw=)
2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: 08XSlJyPx4Pnv98WRUQO7iPvbktsbvN6HxXtSNgZ5oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Validity
Not Before: Apr 18 20:20:27 2026 GMT
Not After : Apr 25 20:20:27 2026 GMT
Subject: CN=69e3e78b-c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:ce:63:a1:9b:97:bf:2a:f2:4e:cc:17:e4:
35:4d:7a:36:f3:b3:b6:e3:a6:67:cb:ef:48:94:23:
a3:52:4e:12:9a:f2:a6:b7:de:61:14:27:3a:26:67:
5b:b6:52:08:54:45:89:65:3a:1c:64:94:ad:fa:ca:
24:95:69:5f:96:a6:45:db:0b:63:f2:9b:54:c3:ac:
7d:3a:e9:61:55:43:bf:12:c2:35:9b:6d:8c:ba:f5:
9e:b3:2b:c2:08:1a:85:4d:21:9e:e7:0c:26:47:fa:
cd:be:7b:24:f1:6d:2c:f1:b4:f7:6e:e7:fb:f1:37:
e1:de:9d:76:5e:00:ae:62:d7:de:b5:8b:8c:00:63:
8f:73:96:e2:62:bb:50:7c:95:cb:75:93:13:67:fa:
5c:9b:31:b8:23:7c:6e:ad:43:57:6e:26:51:de:0a:
12:86:9d:68:20:f0:41:8c:bb:56:ae:67:a8:63:4e:
e3:1d:d0:bf:bc:b3:ea:03:c6:53:be:8b:9e:6a:bb:
de:f6:2e:31:17:31:48:75:71:29:1f:05:82:42:4e:
55:c1:c7:ea:fc:37:88:27:df:41:d6:92:70:65:0b:
9d:20:51:f0:cb:30:c7:9b:6b:c9:55:25:78:4e:9c:
1c:d4:99:d5:cc:b1:fa:10:56:20:4a:90:bd:46:6b:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:13:7C:33:89:71:93:7A:BC:76:03:63:7D:07:E9:75:F9:73:F7
X509v3 Authority Key Identifier:
keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:46:a5:f5:e0:2f:a5:cf:9d:7c:b3:7e:92:f3:db:bf:32:
c2:5c:a3:0a:3c:2f:a9:28:cb:fc:68:80:52:91:c1:d4:de:8d:
35:40:71:ba:8b:43:47:30:60:e0:66:34:07:2a:d9:c5:bc:b4:
4e:f0:c5:b0:07:aa:e2:19:a4:ce:a0:52:b0:05:2f:30:be:37:
fa:b6:af:a2:03:1d:79:06:4c:82:b6:32:8c:33:a3:58:fa:9c:
8b:13:90:6b:e3:9f:bb:22:60:35:c7:b5:49:20:d6:ca:e7:33:
5d:a1:d1:98:5e:b4:db:50:7b:be:45:d5:22:9b:b6:dc:01:f9:
9d:8f:dd:89:d1:fd:1b:b1:ac:62:a4:4f:ec:8e:42:67:08:fd:
0e:27:21:4b:71:e6:ac:a2:2b:e9:2d:cb:d1:aa:aa:7d:ff:9d:
55:f9:dd:9b:fd:b6:c3:9d:67:e9:4a:9b:6c:46:19:1d:07:35:
32:7e:26:e5:95:a4:76:a4:cf:7e:98:a8:4b:45:a3:36:47:fb:
3e:ea:0b:43:0f:dc:e3:91:67:4e:98:26:7c:8f:1e:4b:b0:b8:
9c:2a:22:13:e7:2b:7e:88:8d:da:59:5c:50:8c:9d:38:44:de:
89:4c:cb:b1:58:10:c0:c2:83:d2:dd:f6:7d:1a:f3:df:3c:77:
b6:2c:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:10 2026 by rpki-client