
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
File: 83g6eIBQ7px-F4lbU93tZGqSTEA.mft (raw, json)
Hash identifier: Fz6Xk1SY+Y41t4uTCo8kMgYWbzrkNAcl7aPIaMBoB48=
Subject key identifier: 58:F8:1B:06:32:86:C7:4C:F8:64:F4:D1:74:96:48:AB:C2:6E:BC:C3
Authority key identifier: F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Certificate issuer: /CN=A9158019/serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
Manifest number: 14
Signing time: Fri 17 Apr 2026 08:43:45 +0000
Manifest this update: Fri 17 Apr 2026 08:43:44 +0000
Manifest next update: Fri 24 Apr 2026 08:43:44 +0000
Files and hashes: 1: 83g6eIBQ7px-F4lbU93tZGqSTEA.crl (hash: qYgF18S5gkQnbxidiumL6Xp4Zcb4P7rIFTEFRhypNIs=)
2: 100C3F1E212211F18A5869CB2A3D8C67.roa (hash: IMdiCehXyYtBy9e96FQHmcfQXtXWDXRFaUL7xCwpfWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Validity
Not Before: Apr 17 08:43:44 2026 GMT
Not After : Apr 24 08:43:44 2026 GMT
Subject: CN=69e1f2c0-c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:b0:46:8f:80:fb:e1:56:16:08:ed:93:a4:
3e:95:d4:07:15:c6:c2:c5:63:59:f0:10:45:44:17:
6c:5f:19:5a:d6:6b:67:36:82:fb:93:dd:46:6d:aa:
6f:03:f4:b2:d7:0a:93:9f:3d:76:98:e5:14:c3:bc:
94:83:a3:ea:15:d9:7b:9b:bd:04:02:b0:b5:20:79:
dd:30:82:13:69:c6:76:83:7c:0e:98:8e:d3:6d:d1:
06:7a:14:cd:e2:3c:02:b1:5e:fc:ba:94:f4:c3:7b:
08:84:81:79:4c:31:29:c0:d4:fe:28:7f:b5:5b:db:
3e:be:6a:75:b4:1b:66:3a:9a:74:0b:fc:f0:bf:44:
40:c5:4c:cd:01:38:72:b2:d7:99:ac:a3:03:94:49:
5b:37:fd:58:3d:49:bf:24:69:a8:6b:87:65:6e:60:
7b:7e:dd:ed:d5:ea:b3:8b:81:29:94:9a:29:bf:99:
06:b8:b5:91:df:74:4b:6c:0f:15:d3:28:58:73:5f:
70:65:9b:c7:ee:e7:b1:e4:ac:05:f9:3a:d5:8b:bf:
c4:ce:b2:8d:40:67:66:48:24:79:c6:c2:cd:7d:c8:
11:45:69:2a:d9:94:5e:35:19:b7:84:0c:1e:f9:98:
31:09:5a:23:3e:9c:cd:a6:c5:72:ec:01:51:3d:91:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:1B:06:32:86:C7:4C:F8:64:F4:D1:74:96:48:AB:C2:6E:BC:C3
X509v3 Authority Key Identifier:
keyid:F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:4b:88:6b:91:d2:e9:04:a7:ba:07:cb:0c:fe:f8:f8:39:9b:
51:f4:5d:6c:0b:b5:5e:03:be:1a:34:14:d1:a1:e2:96:de:90:
dd:c7:3d:14:ed:56:c3:6f:43:6e:9e:36:ce:06:93:a5:1d:10:
15:98:a5:21:6e:84:8e:2a:0d:f6:b1:7b:f6:25:33:90:90:02:
ee:b4:7f:91:8d:1c:aa:8c:68:85:b5:78:2a:6d:29:10:3d:13:
5f:d2:03:7f:cf:34:5f:a6:b7:4e:10:b9:34:c4:e0:a0:b5:f2:
59:2f:e6:bd:03:9d:5b:1f:69:5b:f5:b2:d0:8e:5a:83:c7:34:
38:42:3d:b2:4b:05:2a:39:26:06:3c:38:81:3a:d9:23:47:fc:
06:10:5a:04:ff:6d:a2:9a:85:a5:b1:9d:22:7f:6f:32:08:1b:
65:62:04:46:d0:cb:6a:ac:a2:27:2f:49:b1:cf:47:91:0c:e6:
6d:bf:a3:fc:7d:f9:01:95:a8:24:e2:66:cf:ac:37:00:4d:19:
3e:90:6d:21:e6:4d:f5:b5:f6:e5:5f:b4:75:31:84:28:59:53:
ec:62:10:26:d2:9e:a8:1b:10:0c:96:d4:3e:ba:a6:30:49:f9:
13:24:98:f4:8f:d8:26:c7:78:17:42:f0:c9:75:54:04:96:21:
00:39:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:41 2026 by rpki-client