
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier: NDJWzWMMXbPHwrhMdmJw71EbB9+Gu1qiHUyRMmgKk88=
Subject key identifier: 8C:C7:55:6B:15:CE:72:58:DF:B7:E1:38:B3:0D:23:90:3F:18:00:99
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number: CE
Signing time: Fri 17 Apr 2026 06:31:24 +0000
Manifest this update: Fri 17 Apr 2026 06:31:23 +0000
Manifest next update: Fri 24 Apr 2026 06:31:23 +0000
Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: RU2R5iCEJOlU1z1oQGEliWunGqykiOozJI7ubSiHdXI=)
2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Validity
Not Before: Apr 17 06:31:23 2026 GMT
Not After : Apr 24 06:31:23 2026 GMT
Subject: CN=69e1d3bc-4b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:c5:66:c8:a0:ea:a7:d0:23:f8:43:07:ff:
8b:80:31:c5:61:e0:d3:82:2d:d7:2f:50:42:a2:da:
26:31:af:92:80:cf:f9:a4:89:c2:99:d1:f1:a4:81:
8a:3d:aa:46:6f:03:69:b1:81:83:d7:bf:e9:37:72:
01:5d:76:cf:72:b8:84:7c:ed:57:c4:ee:87:01:be:
47:6a:97:14:2d:5a:5d:35:75:57:3e:2b:29:07:2b:
d9:50:47:ed:15:32:40:a4:d3:df:c0:5b:1b:9f:c6:
d7:fd:92:77:f5:b3:e9:7d:b1:cb:45:92:b6:84:e8:
cc:c5:c5:89:68:4c:3c:ef:ec:5f:60:7c:4d:34:e9:
50:bc:e1:33:4c:aa:ef:e2:17:b9:36:6f:4e:a6:56:
27:ab:cf:3d:05:57:43:27:09:33:cb:03:14:70:04:
ce:38:44:16:f8:3a:2d:19:21:b6:d8:ab:b1:6b:fb:
45:bb:e1:a9:b5:9d:30:ec:f6:1d:a4:2b:70:0b:1a:
a8:6e:6e:d3:5b:f7:6b:8f:7c:01:15:e8:68:b0:60:
eb:95:e9:96:c3:09:5e:65:97:db:4f:66:a3:1c:55:
cd:c7:b7:07:a0:8f:6b:51:c4:7d:11:38:d9:73:d3:
a4:69:26:28:64:09:36:2b:46:4f:44:6c:90:74:8e:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:55:6B:15:CE:72:58:DF:B7:E1:38:B3:0D:23:90:3F:18:00:99
X509v3 Authority Key Identifier:
keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ab:08:0a:73:17:22:b3:41:ac:88:eb:ff:cf:15:3e:bb:bf:
08:58:37:43:3e:4b:a4:2c:96:e4:1f:51:10:98:90:6c:2a:67:
d9:ec:67:c0:bf:2e:f5:ba:2e:96:27:88:b1:d4:5f:ae:a5:38:
43:5b:81:0d:01:a2:62:18:a4:d8:6b:d3:5f:21:e6:69:53:da:
83:0b:a8:aa:27:1a:f1:77:cc:e9:2c:94:af:15:c9:86:36:06:
99:fb:9e:28:11:65:6a:cc:99:26:7b:f7:3d:8d:51:62:dd:d5:
6a:5c:8a:91:5e:a4:ea:78:e8:38:c7:08:d5:78:8b:07:4d:43:
fb:21:bd:5e:c6:31:00:23:42:05:90:c7:37:cf:99:b1:7f:0d:
6d:1e:0b:22:eb:ba:e8:25:bd:ce:c9:c5:ac:24:d1:d9:e8:4d:
6a:0d:dc:a1:79:c8:98:5a:31:11:e8:fe:f0:ac:76:6a:f8:91:
44:4a:1e:9f:0e:02:40:78:d4:ae:7e:90:8b:66:23:21:f1:a0:
60:7b:76:d7:0d:c3:77:61:e4:b7:1d:a6:dc:c9:e0:63:41:d3:
a5:25:06:09:04:c2:83:78:ce:b1:f9:19:25:56:c3:78:24:57:
40:a7:b7:ff:10:04:55:f4:3e:a4:c3:6f:d3:11:3f:5f:38:8b:
ac:e6:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:49 2026 by rpki-client