
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: 2heGwL+rg4E6od4NqkejVXR1rCMsoZoJj/IP/sdAha8=
Subject key identifier: C1:BC:4F:DC:10:BA:85:DB:6B:80:83:4B:56:4A:9E:B2:AC:B5:AD:24
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 09FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 09D4
Signing time: Thu 16 Apr 2026 19:55:10 +0000
Manifest this update: Thu 16 Apr 2026 19:55:10 +0000
Manifest next update: Thu 23 Apr 2026 19:55:10 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: FPWmMzZbW+HiJ0MMarrqmjBPpXZXefdIgJK49Q3yoLQ=)
2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: qEfH7eQ/C2gOZPU1jxCU+fijhvqs0pReImF1DTY96Jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Apr 16 19:55:10 2026 GMT
Not After : Apr 23 19:55:10 2026 GMT
Subject: CN=69e13e9e-8559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:88:1b:62:91:f6:b0:9d:f3:75:38:70:c7:
bc:eb:5e:4d:8b:8c:3e:76:eb:bc:58:ea:6b:65:b9:
ef:2d:08:29:59:e1:a3:23:60:c8:d8:ad:4c:19:50:
a8:e8:92:52:10:fa:e4:9d:3a:85:db:22:09:cc:7d:
32:c9:4d:09:5e:14:cc:43:4a:12:dc:e4:4d:2e:0b:
0c:36:e3:15:07:2b:97:ea:4a:95:5a:26:ca:b7:87:
53:f3:35:80:45:6d:d0:d6:a9:50:82:8f:6a:3f:3e:
a4:e1:af:47:d4:cd:9d:f3:d2:eb:7d:9f:e9:a9:89:
b0:fa:be:71:85:57:d9:1b:46:7b:58:28:3a:cc:ca:
e4:13:84:0f:3d:e1:59:b7:1a:8f:b7:d2:c5:74:10:
fc:90:ce:b6:ce:28:1f:6b:3b:36:e7:78:5f:fc:54:
96:3e:85:e5:17:cc:02:74:86:de:33:fa:4d:51:71:
fd:89:de:3e:78:d3:40:36:1d:60:1a:52:84:c4:c7:
3e:db:f6:b1:8d:71:1c:e1:d9:71:c8:c9:14:e7:fa:
92:58:5e:2c:5f:c2:6b:f6:bc:8c:24:30:1c:1c:b1:
e4:53:dd:27:ae:95:60:cf:77:c3:ed:14:b3:c8:6e:
6d:c3:40:94:6d:be:26:e9:36:41:e4:d8:f5:04:29:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:4F:DC:10:BA:85:DB:6B:80:83:4B:56:4A:9E:B2:AC:B5:AD:24
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:44:ca:12:15:24:bc:e5:3a:35:3e:fe:e1:aa:46:b3:68:b8:
19:be:3d:7f:4a:ec:35:b8:cc:66:83:ed:17:85:4c:5c:87:c3:
f2:c0:b0:34:87:eb:e0:c2:ce:6c:31:af:b6:32:9d:54:8b:e7:
62:16:3d:3f:ce:48:15:02:56:0a:3a:5a:10:c6:66:d3:5b:9e:
f0:28:f7:1a:63:6e:39:fb:4d:66:15:de:45:36:fd:5a:3c:1f:
3d:38:47:8b:3f:22:3d:2c:4b:32:9e:e8:73:61:5d:a4:13:94:
4a:da:d3:30:78:fe:3a:5b:a8:b9:1e:cc:4b:b2:fa:32:32:1d:
3e:be:4b:76:ba:cf:f9:51:5f:49:e5:70:d9:a0:84:33:00:00:
07:89:be:a8:69:a1:c5:95:b8:cf:b7:9a:39:46:c0:30:bb:4a:
7f:37:6a:13:68:ec:d1:ed:77:ef:51:01:62:12:70:e7:56:70:
cd:e7:3b:70:d9:ce:8d:34:04:33:aa:43:a2:f0:8a:7c:fe:17:
7f:81:4f:58:5a:12:3e:c2:f8:e6:89:6f:1b:8e:39:d0:45:4b:
5a:65:cd:52:87:44:b7:59:a0:9b:3b:53:7e:aa:7d:22:b9:0c:
49:fc:63:de:b9:00:f4:50:a2:4e:c0:36:b6:70:cf:b0:dd:9c:
8b:e0:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:28 2026 by rpki-client