
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: 0asczY9sAYajeXR65P5Q3mDVtVvnDfHrwRXDHVCFKwo=
Subject key identifier: FC:C0:EA:1B:9F:FA:59:81:95:21:33:07:A0:15:F8:2C:48:A3:7C:70
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0216
Signing time: Fri 17 Apr 2026 02:38:24 +0000
Manifest this update: Fri 17 Apr 2026 02:38:24 +0000
Manifest next update: Fri 24 Apr 2026 02:38:24 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: EBLcpom+meUjd3Z91I4qlC1qE2Os98j1tLGPOqXt+PU=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Apr 17 02:38:24 2026 GMT
Not After : Apr 24 02:38:24 2026 GMT
Subject: CN=69e19d20-569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:44:39:4a:58:55:07:e2:55:99:1b:7f:ff:
9a:04:e8:c0:5a:3a:b0:5f:c2:fe:3c:0f:65:a0:c4:
f3:5f:c5:dc:ac:d9:01:76:16:8d:61:6c:71:b6:af:
b7:0e:4c:7f:e0:5e:ef:24:f5:dc:33:c5:1c:49:0c:
11:ac:f1:bd:cc:db:ea:06:4b:35:bd:8f:78:8c:5d:
82:7a:75:f0:f6:8d:1b:1d:8d:c5:c9:6a:4b:98:4b:
2d:22:d5:31:8c:26:84:e4:8b:7f:72:ef:50:39:50:
c6:80:54:a2:41:8e:61:56:db:42:58:f0:cc:08:9c:
f4:c3:97:8d:63:d5:c1:90:90:76:b5:c5:af:9f:a1:
5e:cb:6a:7a:c1:4a:8f:2c:2e:a5:02:f8:3f:34:d5:
72:99:f6:15:ae:12:73:79:60:8a:76:e6:6b:f9:19:
8a:c3:d0:71:5d:5c:2a:d4:61:ba:19:f4:ac:4d:3f:
96:ba:f8:1a:02:46:5b:12:b7:c2:2f:15:5a:a5:0f:
b5:9d:e3:44:52:7d:39:d8:88:34:f5:fc:ea:c9:77:
00:84:39:eb:70:30:1e:69:fd:9e:32:c2:5a:8d:d2:
6b:93:dd:97:f8:d9:97:2c:ad:fb:6b:3e:39:8e:e1:
43:e3:e9:04:5e:94:1b:04:fd:dc:c7:06:53:fc:25:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:EA:1B:9F:FA:59:81:95:21:33:07:A0:15:F8:2C:48:A3:7C:70
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:40:77:27:da:a6:b0:64:af:62:7b:c6:cc:ba:bb:35:5c:
de:6f:73:33:f6:64:f7:05:98:7f:f8:cd:ab:e4:57:3e:cc:8e:
77:59:30:88:30:ff:50:69:7e:21:55:6d:e8:33:82:65:74:ba:
56:b8:81:1f:9c:15:6f:bc:9b:4a:d0:b8:44:bd:27:b5:f6:ec:
c5:a5:bf:f8:a0:76:ba:37:e5:3e:e3:f7:7f:7a:25:07:8f:68:
e3:17:8f:01:43:b5:f5:73:a5:f1:d2:5b:1f:aa:9c:fd:5b:37:
29:54:56:89:7a:92:a2:ad:36:ac:74:47:e7:70:a7:89:24:62:
ff:46:0a:b1:58:55:d0:b1:04:71:65:1a:7d:da:40:1e:95:4e:
b5:5e:8f:48:d0:52:7c:04:cf:f7:71:29:5d:35:8d:d1:c5:57:
0f:7e:4c:74:4d:67:dc:e9:1c:74:ed:1a:fd:c5:5a:eb:0e:95:
64:d6:1b:8b:6a:11:30:2c:2b:b8:db:a6:e4:e1:cf:40:4d:2e:
51:f3:5d:7e:58:a5:70:1a:9d:11:d3:f8:8a:bd:a8:f1:80:00:
8d:7a:38:7a:fe:f1:4e:dc:5f:2c:35:12:81:b7:cc:94:e5:95:
b2:b2:2d:a8:02:a7:7d:37:2a:4f:27:16:bc:70:ca:aa:ec:29:
b8:dd:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:13 2026 by rpki-client