
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
File: ulHQnhOT5woFhzID_3zE4f1-pw8.mft (raw, json)
Hash identifier: 2+fiPd1q4rReImEKrgWTGyTysP5j6bexbgryeSIKz/s=
Subject key identifier: AF:C3:CB:91:33:DF:60:9E:05:F2:B7:35:19:68:81:6F:18:62:BB:09
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Certificate issuer: /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial: 1C87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
Manifest number: 1C77
Signing time: Thu 16 Apr 2026 16:08:25 +0000
Manifest this update: Thu 16 Apr 2026 16:08:25 +0000
Manifest next update: Thu 23 Apr 2026 16:08:25 +0000
Files and hashes: 1: ulHQnhOT5woFhzID_3zE4f1-pw8.crl (hash: MsB410+7mqV+4EPPOmlz0ivB2sNionPSQ6WDxj3utBQ=)
2: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (hash: kb+dyeOwVVg/Z6TRUEqLhtnoMRAUu0DJXJFO0yQHy+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7303 (0x1c87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B03, serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Validity
Not Before: Apr 16 16:08:25 2026 GMT
Not After : Apr 23 16:08:25 2026 GMT
Subject: CN=69e10979-a19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:49:99:c7:c3:9f:90:64:a4:88:2e:92:2d:
ed:59:c1:56:d6:c7:4f:97:31:01:59:f4:0e:a0:76:
f0:d2:59:36:4d:ce:25:83:05:37:0d:2e:b4:52:02:
dd:71:4b:9a:0c:b4:ac:b8:ef:dd:8d:26:8f:7b:f0:
a5:ba:cd:ce:b5:cd:7e:21:09:e9:37:53:3f:bd:2c:
04:36:89:8c:32:88:41:6b:5a:ed:0f:79:72:e1:d7:
6a:33:5e:1c:05:a3:76:6e:6f:6e:d6:94:1f:19:f6:
3a:dd:68:22:ef:d1:b4:5b:70:8f:c0:c5:7f:12:50:
db:ad:19:f5:5e:ac:ef:2b:dd:20:36:f5:7d:6a:43:
da:62:b0:7d:64:0f:44:42:b7:9d:cc:c4:28:4d:89:
75:94:36:84:ca:1d:a3:45:a9:5e:27:d2:df:c6:07:
f0:63:1c:ca:26:10:b2:d3:4e:d4:32:d0:c4:bf:4e:
5f:9c:19:8c:5a:ce:d0:06:19:d0:90:bc:ec:4e:b6:
ca:df:e1:9a:67:bb:9b:b2:ad:9c:01:18:54:07:04:
72:c0:6b:3e:ad:90:60:f6:d3:6d:dc:29:f2:e5:1a:
51:12:a7:2d:0f:5c:2a:70:48:46:52:01:00:5f:9c:
4b:91:7e:ae:27:0b:00:29:7a:9e:dd:27:7e:ae:02:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:CB:91:33:DF:60:9E:05:F2:B7:35:19:68:81:6F:18:62:BB:09
X509v3 Authority Key Identifier:
keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:35:19:ec:44:37:b2:b6:91:c8:b3:be:bf:8a:21:b7:0c:
4d:26:16:fd:f9:02:f7:95:35:20:6f:58:f8:6a:76:48:b9:27:
1c:b2:9c:a0:e0:c4:be:db:e2:8d:0a:d2:a3:b6:d2:e2:09:5e:
8f:b5:57:30:c1:e9:09:f1:b7:7c:d0:f6:92:11:63:47:a8:15:
b3:7a:29:8a:86:bd:8d:79:5a:64:af:4a:4c:50:7c:4d:34:cb:
66:f6:5c:5c:93:d6:36:39:60:01:fe:49:12:00:cd:40:aa:86:
61:d4:d1:9a:07:68:97:1d:e0:6a:56:20:7e:70:3f:bb:c9:0c:
3c:79:c1:54:4b:22:c1:0c:0b:b3:3a:bb:80:66:dd:1a:ad:99:
ab:c6:9e:d6:03:f5:58:b6:de:28:e9:bb:a2:bf:ba:be:54:82:
8c:aa:c6:f9:c4:2f:05:c5:c0:ce:1b:4c:71:b0:4f:99:06:66:
81:fd:eb:17:ad:ed:95:7d:2e:e0:b9:b6:a6:c2:04:11:62:e1:
6a:c8:bb:cb:c3:0c:5f:4e:5f:04:35:b3:c4:d3:bc:a4:ba:5a:
b6:b8:8b:15:94:46:85:e2:77:50:55:96:d5:c0:2f:38:af:0c:
fa:c6:77:22:65:d0:21:7c:e6:8a:ad:da:f7:b1:9c:73:40:4b:
b5:01:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:49 2026 by rpki-client