
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier: HP2roZ24ClYL1YBt7odN6tTFLGe7w3TFXeq8IYMc74I=
Subject key identifier: 55:B1:2A:86:CB:68:3D:4F:F2:8A:3B:84:9E:17:FA:FF:4B:F6:DF:C4
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number: 0141
Signing time: Fri 17 Apr 2026 00:17:17 +0000
Manifest this update: Fri 17 Apr 2026 00:17:16 +0000
Manifest next update: Fri 24 Apr 2026 00:17:16 +0000
Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: kr2VI+a6lTHg9Ii6yQs0v9CKD+NiVUl+vFDeorqcSxU=)
2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: JxJ+obmiwGl4JMUMgK/WuBnQLS29iCXEyXAVzTMCR8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Validity
Not Before: Apr 17 00:17:16 2026 GMT
Not After : Apr 24 00:17:16 2026 GMT
Subject: CN=69e17c0c-4cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:ea:66:3b:58:75:bb:25:59:ee:4d:a7:a5:
f8:ea:a4:cf:36:c5:98:cc:b6:99:68:05:53:aa:56:
65:28:71:37:f1:7f:11:be:ee:61:d3:b3:c0:7a:96:
3b:7c:a0:aa:01:92:43:53:5c:b8:f8:fc:10:0a:cf:
7a:4c:64:99:e6:86:ed:07:0a:d0:ee:28:79:e2:47:
0c:08:d1:2e:f0:31:36:13:56:23:38:a7:f6:f7:47:
94:a4:fd:b7:e6:ec:5d:4d:68:ae:e8:68:12:be:e8:
5a:47:b7:99:5e:10:14:22:c8:20:af:c2:7c:50:8c:
8d:19:25:60:95:15:6c:45:de:27:7d:d8:44:15:be:
c7:17:f4:e1:9c:9a:cd:c8:df:5f:b1:97:95:db:dc:
ba:06:6c:4a:6b:23:e6:1e:17:ae:d5:2d:c6:49:b6:
9f:cb:a0:37:a0:fb:e0:57:14:1f:48:10:69:5f:b8:
50:1e:3a:cb:f4:28:27:85:60:cb:c9:07:ed:61:8d:
86:0a:24:d0:e0:87:f5:f0:2c:e8:e9:8e:a5:e8:7d:
4a:68:f5:2f:45:40:00:71:19:b3:00:8c:2f:e6:e0:
42:64:39:08:58:d9:73:d5:eb:11:b0:de:e6:9a:84:
e3:2c:5d:a1:2b:7d:63:ea:7f:1d:7d:63:6c:f3:6a:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:2A:86:CB:68:3D:4F:F2:8A:3B:84:9E:17:FA:FF:4B:F6:DF:C4
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:3d:36:ec:e7:26:6b:42:5d:b0:2c:2c:07:5f:a6:c7:60:
51:f4:52:ee:a7:93:fd:c8:20:df:cf:33:ea:30:f4:90:93:6e:
3d:3c:67:bb:e2:b1:3e:42:95:37:7b:a4:cb:bc:85:b7:c6:02:
ed:e8:32:9a:f0:da:29:73:63:91:d4:d8:57:ce:11:56:1f:d2:
41:89:94:8e:c1:e6:fa:af:ef:71:38:dd:80:a2:83:d7:a2:4c:
c5:9e:1c:a2:be:83:10:46:c6:a3:2c:d7:ca:68:fb:05:93:c4:
39:18:04:3e:6a:c2:b7:ee:20:fd:53:98:1c:42:93:21:3f:81:
38:3d:d8:b2:53:8f:c1:98:14:2b:c4:0b:93:17:c9:7f:37:7b:
08:88:3b:24:22:e6:46:31:b4:40:14:f5:c5:a0:a4:e1:51:4e:
df:41:82:41:c7:8e:85:8b:eb:4a:99:0b:69:cc:df:90:ba:8a:
3a:4f:0e:cd:65:29:79:de:b5:d2:33:ed:f0:9a:11:d7:dc:3f:
a8:63:4b:29:d1:16:12:b4:be:49:72:33:82:d5:25:ad:7a:93:
f7:27:f2:8c:50:52:04:ad:26:52:6c:ed:55:aa:a5:f5:23:0e:
bc:52:e4:f3:d0:62:29:05:28:3f:7b:08:f7:46:bd:f6:97:ca:
12:f1:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:30 2026 by rpki-client