
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json)
Hash identifier: mdeqgywgnOUTBxc/H5ueqk/qbkoYIYFXNJwg4DMWDcY=
Subject key identifier: 93:64:83:88:42:54:72:7F:29:6A:EC:B5:A5:A0:1A:05:79:A3:C8:EE
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial: 0E4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
Manifest number: 0E44
Signing time: Thu 16 Apr 2026 17:42:49 +0000
Manifest this update: Thu 16 Apr 2026 17:42:48 +0000
Manifest next update: Thu 23 Apr 2026 17:42:48 +0000
Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: fzwQft4RStOqxxWBOttKgNCjacmXeuidPWe1Q/BzpC4=)
2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKgTE44Ui4Km2SlMzbMZshdm2FGBkzXAI+GmGPjCfyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3663 (0xe4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Validity
Not Before: Apr 16 17:42:48 2026 GMT
Not After : Apr 23 17:42:48 2026 GMT
Subject: CN=69e11f99-e791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:3e:e5:33:fe:66:27:5e:ce:3a:e9:48:e5:
3a:02:34:4c:15:6a:09:e8:a1:e6:4e:07:e7:2e:4a:
a3:ec:de:f7:c0:5d:87:e3:2f:65:e6:fe:3e:07:ee:
ce:57:d5:48:fd:f4:6a:23:7a:02:72:c8:6c:4a:ce:
eb:a5:81:e8:58:c2:12:19:a4:b4:6a:00:2c:db:b0:
99:08:0a:59:2b:49:a3:ec:0f:01:14:fa:75:4b:a0:
38:9a:81:73:93:51:ca:d3:68:59:6f:9e:0d:ec:56:
62:8f:ab:9a:94:e9:f1:77:1d:bc:11:81:de:a9:5b:
51:24:f9:93:f9:78:00:ef:3a:4d:03:17:5a:a0:83:
cc:79:cc:88:cd:ee:d4:ef:88:bc:53:1c:95:9c:ee:
fa:bb:41:e9:63:a6:60:a4:7e:f0:27:98:24:0e:46:
77:66:ca:09:d3:85:0e:ed:ed:d5:9c:f9:98:ec:0c:
e9:46:d3:52:76:6d:de:4c:44:eb:ec:e0:67:e5:c8:
2f:b2:52:05:1e:4a:0a:db:bd:58:cf:b2:0a:1d:34:
90:5f:4e:da:8b:36:9c:d9:6e:62:bc:00:71:ee:6e:
e8:7e:29:66:30:98:d4:77:32:a7:7f:ef:39:b3:dc:
a4:82:6a:54:fa:37:f4:59:96:3d:b4:d1:53:3f:8e:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:83:88:42:54:72:7F:29:6A:EC:B5:A5:A0:1A:05:79:A3:C8:EE
X509v3 Authority Key Identifier:
keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:bf:9d:e2:e8:93:16:9d:ed:69:f8:a2:33:cd:4b:af:1d:
e6:04:07:a5:d2:d6:a2:81:f2:61:0f:45:73:95:60:22:2c:03:
4d:65:d7:2c:f1:23:24:f2:70:0b:3c:d1:25:80:38:6f:e1:e5:
fd:9e:81:47:45:43:13:4c:b6:74:36:a8:da:ab:bb:1c:e8:c3:
7d:79:06:46:0b:a9:02:59:0d:c1:a1:a5:b7:58:b6:c2:56:e5:
e6:ba:9d:f2:da:70:82:32:3c:4d:7d:06:86:f8:ff:e3:52:17:
cd:e7:bf:3c:bb:f7:52:ef:6a:1e:c8:54:7a:f8:0c:73:a8:06:
ca:00:bd:b4:bc:7d:ce:cb:a6:7e:95:6b:60:9b:ac:71:63:11:
49:f6:b0:cd:c9:97:ac:ca:c7:35:d4:90:59:7e:47:00:f4:c5:
b7:e0:ea:55:47:e5:00:8e:51:8b:80:5f:f9:3a:3f:d8:19:59:
05:3f:52:e9:62:d0:19:15:10:43:f7:b5:b4:0c:a6:a2:df:bd:
fb:1e:1f:14:6d:fa:75:0b:b4:3c:20:0e:64:c2:22:91:fc:cc:
be:78:d5:64:75:11:bb:4b:bb:84:0b:bb:e7:fd:4f:ec:8b:55:
65:c2:c3:01:68:0a:3c:7d:96:0b:65:b3:04:e9:25:62:9a:23:
10:d7:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:10 2026 by rpki-client