
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json)
Hash identifier: VTxGbtRNVJ+c7pPeZ/zBEcMY0Fh5LhCcsPUpYXfn4Wc=
Subject key identifier: FA:81:4F:00:11:52:29:75:3A:DE:FB:56:28:1E:85:F4:DE:E2:75:C3
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
Manifest number: 0225
Signing time: Fri 17 Apr 2026 02:37:13 +0000
Manifest this update: Fri 17 Apr 2026 02:37:13 +0000
Manifest next update: Fri 24 Apr 2026 02:37:13 +0000
Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: rI9W9DEMVQdLGuzimRF67tBBXl+jOvuOz4QXzwC9mf8=)
2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: jQDpwo+QqLU/lJ9etJ9XrTrIVILmvaXnCVSDMxtlPro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Validity
Not Before: Apr 17 02:37:13 2026 GMT
Not After : Apr 24 02:37:13 2026 GMT
Subject: CN=69e19cd9-bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:1a:8b:e7:51:04:61:62:e8:0a:2e:39:dd:
56:a3:13:57:7c:65:97:0c:0d:58:b0:b8:31:d9:51:
7d:4d:5f:74:45:3d:21:f7:ca:ba:fb:09:b8:48:12:
40:9e:1b:f5:c3:41:de:04:3f:fc:96:08:8c:5d:c2:
ad:5e:1e:b6:22:8f:b3:72:7e:eb:03:82:77:35:88:
53:93:d2:25:96:96:88:1c:8e:eb:41:81:73:36:ec:
be:96:c4:a1:0d:7d:37:8f:7b:d2:ba:62:f2:fd:a2:
70:f7:79:b7:9b:4e:26:36:dd:70:dc:ee:0e:a8:77:
23:59:d1:d7:4e:3d:2d:17:c3:1a:07:72:bd:45:08:
c4:83:83:b8:d8:43:6a:82:8d:b2:b4:32:fa:db:23:
ac:6f:4b:ee:9b:e5:0f:0f:c4:5a:99:f7:90:74:12:
cc:d7:5a:16:b2:c6:26:a1:63:e1:a6:91:47:f7:b3:
15:75:52:e1:d0:8f:14:84:aa:f3:7f:2a:04:5b:34:
70:55:cd:fc:89:7d:85:12:36:d4:79:73:13:cf:7c:
11:5f:2e:67:73:45:1d:db:1a:a2:7a:e5:59:d6:e0:
fa:19:49:f0:35:fb:54:ca:ce:f0:93:cd:ab:32:f8:
0c:ff:59:23:89:f5:08:95:3d:ea:69:87:d9:b8:59:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:4F:00:11:52:29:75:3A:DE:FB:56:28:1E:85:F4:DE:E2:75:C3
X509v3 Authority Key Identifier:
keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:9c:6d:a0:1e:f1:ce:f2:06:fd:41:27:5c:93:a1:4c:91:3a:
e8:d0:f3:d8:83:4e:00:5b:25:67:95:da:5f:01:3d:89:c4:0f:
e0:84:45:00:90:b2:d5:13:ec:bb:eb:24:d7:19:e7:37:83:ec:
b4:1c:d4:0d:a1:9c:f1:01:6c:c1:eb:06:c3:86:09:5d:70:19:
60:cb:1e:a5:fa:40:eb:a7:95:91:2b:2a:fc:c7:2e:26:a6:7b:
3b:95:86:e8:9e:bd:45:4a:3b:29:d3:ca:f5:1e:a1:3e:c9:8a:
9c:f8:c3:3e:09:c3:0e:e3:4e:b0:a1:f7:03:80:68:be:27:8c:
2f:eb:d2:e4:5f:01:8c:77:70:cd:43:55:3b:67:1e:7a:8e:cd:
ed:24:65:1a:89:3b:6e:f3:43:f9:9e:c9:0f:1e:b2:3d:77:a7:
b5:8f:20:7d:51:f7:2d:33:a1:cb:2e:29:7f:6b:1d:36:54:5b:
ad:89:1e:be:f7:45:1a:25:90:6f:44:01:d4:95:33:00:10:60:
80:1d:f6:2b:ec:6f:72:ca:82:21:00:6a:26:f8:e1:01:b0:f9:
3e:cd:2e:18:19:3b:93:85:35:a8:ad:12:5f:24:9a:13:26:34:
bb:fe:96:7c:fe:19:d8:a5:a2:59:35:35:62:1d:6f:1e:60:61:
4a:72:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:11 2026 by rpki-client