
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier: 0rMwMrbpmgqKDW0Tg5wxgFF7aV13YD9MmUdhf06uIc4=
Subject key identifier: FE:A5:9F:67:B2:C3:39:39:08:93:1A:44:CD:A0:20:F9:AE:6E:0A:EB
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number: DA
Signing time: Sun 19 Apr 2026 06:15:54 +0000
Manifest this update: Sun 19 Apr 2026 06:15:53 +0000
Manifest next update: Sun 26 Apr 2026 06:15:53 +0000
Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: zr55ksh379O73WEu5aXQE+nsBTn+yH37Nb2qjLRwGzI=)
2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Validity
Not Before: Apr 19 06:15:53 2026 GMT
Not After : Apr 26 06:15:53 2026 GMT
Subject: CN=69e4731a-73f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:d3:b0:3d:64:86:1b:59:56:ae:7c:17:3b:
2d:85:ba:53:67:ad:a1:1f:5f:d2:bc:34:dc:6e:f5:
bb:f5:04:95:73:be:e9:ff:0e:de:af:d4:e4:09:a2:
3e:bc:7f:e7:af:27:1d:98:de:20:fa:14:4d:ab:17:
4a:da:f1:56:86:f9:47:4d:33:04:6c:14:6a:cb:07:
93:df:61:97:64:5b:87:16:fc:53:36:80:97:b8:26:
87:d0:76:52:2a:a0:03:71:54:a5:f1:98:64:6a:72:
f9:3a:13:23:ac:1a:93:8b:99:e1:04:06:6b:57:c1:
1b:3e:b6:30:84:05:f8:27:81:73:23:1d:05:3b:12:
7d:0a:e8:9f:e3:83:86:05:61:0e:02:35:6c:e4:54:
a1:7a:21:98:a4:9e:eb:22:aa:d3:01:77:c8:84:fc:
2a:5e:ee:a5:48:56:1c:12:72:17:cb:57:3f:05:ea:
19:3b:89:c2:32:ce:29:ff:6f:b5:a5:76:63:00:2c:
f8:58:18:06:f8:bb:c0:cb:0a:4a:91:d5:ad:c0:a2:
06:7e:04:68:a9:78:22:bd:40:80:7e:27:56:5c:c3:
d9:19:8b:ec:7a:6e:9f:f2:3d:82:f8:fc:d3:21:13:
df:4c:f9:38:5b:4d:aa:52:43:0e:45:8b:d9:53:32:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:9F:67:B2:C3:39:39:08:93:1A:44:CD:A0:20:F9:AE:6E:0A:EB
X509v3 Authority Key Identifier:
keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:04:7d:d5:d3:68:26:6c:cc:7e:ef:4d:1c:4c:79:98:4f:3f:
5c:d6:6d:72:32:25:25:88:f1:bb:49:9f:3f:59:c3:af:a2:de:
0f:ed:56:6a:e9:56:50:88:17:5b:8b:ae:bf:8a:70:b5:55:f8:
28:44:04:84:93:ec:b9:25:5a:e7:ba:c4:2a:c8:88:6e:bd:a9:
d2:33:27:c7:b5:14:a2:12:85:db:64:1a:6e:f9:fc:bf:c5:f5:
25:78:c1:9c:35:25:83:70:ab:fb:99:a1:db:65:03:8b:47:f9:
7f:9f:f8:f6:d3:f2:7e:13:06:37:39:93:28:2c:f3:7e:8d:f1:
40:fb:e1:c4:75:07:44:1d:11:9b:7f:e0:cc:32:ad:d2:1a:f9:
99:b9:5f:3c:41:58:ac:9b:45:3d:70:00:31:3b:b5:02:56:a1:
67:39:5f:80:ad:a0:47:1f:88:11:fb:f6:2d:a3:ee:3e:55:8f:
98:5a:56:70:83:0e:ba:08:63:8c:78:a6:91:e7:56:e2:35:ae:
84:e4:87:7b:6b:c3:3b:97:10:19:d5:8f:42:f5:32:56:52:ab:
5d:56:a6:bd:b2:c5:13:74:eb:37:fd:61:73:b1:4a:33:15:e4:
64:8a:ad:7b:09:64:c9:89:cb:46:dd:c6:50:55:75:46:bd:b8:
06:72:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:04 2026 by rpki-client