
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier: nFL8/swn3j1h/9zy5VpVOtuVq/x+RjR864n1AGF8u6E=
Subject key identifier: 19:E1:69:B8:6D:F5:7A:78:8C:A4:6B:22:4D:CA:4A:3B:1A:99:C8:EB
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number: 024B
Signing time: Fri 17 Apr 2026 02:16:28 +0000
Manifest this update: Fri 17 Apr 2026 02:16:28 +0000
Manifest next update: Fri 24 Apr 2026 02:16:28 +0000
Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: gB2zn1tPAKbAv0CiDqcVKODsgj4vTb68LxTkV3nHYYI=)
2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: Apr 17 02:16:28 2026 GMT
Not After : Apr 24 02:16:28 2026 GMT
Subject: CN=69e197fc-26d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:0f:89:ab:40:36:e1:83:3e:29:be:09:e0:
c0:ee:1d:91:f2:8a:13:75:44:88:3f:fa:74:c1:6f:
6a:cd:34:69:53:49:86:d2:bc:53:f5:ef:f8:79:b5:
19:93:50:b3:bb:d1:91:db:01:2b:f7:64:0f:b2:64:
d6:83:2f:36:a2:8d:5d:5b:29:7f:a9:f3:56:8c:78:
4e:ce:d7:db:b8:b9:8e:a9:fa:48:48:2b:ac:3b:e6:
0a:24:2d:31:53:5d:dc:eb:b7:24:01:a0:02:d3:22:
a8:ca:01:b1:86:b8:17:21:01:6b:5d:93:a4:ed:e6:
e2:8e:a0:91:69:79:de:71:ca:51:01:28:88:b7:d3:
5a:d8:2e:bf:77:f9:c9:25:ec:f4:2a:e9:eb:35:18:
56:7b:46:a6:e8:4d:48:98:48:6f:fb:96:72:02:fa:
60:4e:9b:b8:3a:f6:ee:a7:cb:8a:72:c6:bc:5a:9b:
fa:5c:de:40:50:70:8e:01:5f:27:68:75:a3:a1:04:
c8:c1:13:6c:98:a7:14:06:df:1a:4f:b7:82:83:57:
1f:88:00:12:44:47:aa:18:e9:80:31:f3:2b:7c:67:
e1:18:b0:8f:c9:ae:1f:97:ac:00:09:70:5e:45:6d:
86:05:a9:2a:54:93:9c:73:48:46:99:c8:5f:d8:f7:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:69:B8:6D:F5:7A:78:8C:A4:6B:22:4D:CA:4A:3B:1A:99:C8:EB
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:7a:c5:f0:27:66:03:84:a8:b8:e3:04:66:b0:8f:da:15:
b8:a4:6a:75:6e:ca:6d:ba:6d:34:e7:33:52:73:8e:bc:1c:99:
d0:42:1e:92:ac:fa:4d:dc:50:65:c2:d8:b8:da:b4:d9:9c:31:
18:3a:1c:ae:53:c2:c4:ec:39:9a:f1:77:39:d5:d5:04:bb:5d:
1e:4b:28:76:8a:27:3b:b8:b4:5c:83:60:d5:7d:ee:bd:88:d7:
53:a4:d1:12:1b:10:b2:81:d8:cd:c9:96:f1:4f:95:a5:9b:68:
a6:17:be:aa:2e:5d:be:2c:57:99:e2:2c:8d:2e:5b:f4:18:3a:
1a:20:72:d6:0a:e9:df:b8:26:22:01:23:f2:eb:4d:ba:61:5c:
40:53:e1:04:75:53:62:b2:f3:7f:a6:80:b4:64:1e:f3:d0:a8:
49:8e:af:06:27:cd:c7:6b:80:ac:0d:24:6f:56:50:45:27:1c:
82:99:0f:a8:a6:a5:0b:aa:c7:92:eb:68:3e:f4:3d:eb:50:f2:
5f:ad:f9:0c:39:e0:eb:4f:24:e4:5e:19:cb:26:e1:15:c5:4b:
5c:3d:f6:fc:03:51:76:78:91:2e:75:e0:95:2a:0d:79:29:26:
08:dd:d9:e2:f5:75:96:1e:fd:df:ed:c2:e6:d4:30:4e:a4:02:
05:9c:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:14:50 2026 by rpki-client