
$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json)
Hash identifier: UgGUTpbR3g+QkAFiMRvUPHOvInn8FMQPh/2TRKgw84k=
Subject key identifier: 15:04:A4:F7:20:D9:7E:0F:AC:AE:31:51:5E:BB:E2:1E:97:A4:C7:3C
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial: 18BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
Manifest number: 18A8
Signing time: Thu 16 Apr 2026 16:25:58 +0000
Manifest this update: Thu 16 Apr 2026 16:25:57 +0000
Manifest next update: Thu 23 Apr 2026 16:25:57 +0000
Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: vgJEUJ5Q4BXvPohgfwiuHetIqhz1kIhDuBBx53IXYvk=)
2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: MEzLdc1mcUKhmt3EB8Vtl6X+cdAGdTbXNb9giVL32ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6331 (0x18bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Validity
Not Before: Apr 16 16:25:57 2026 GMT
Not After : Apr 23 16:25:57 2026 GMT
Subject: CN=69e10d95-87ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:9d:2c:7f:66:60:85:32:40:5c:f9:5a:1b:
22:7c:13:21:90:5e:6f:0f:51:1b:2a:f7:0c:65:37:
e8:f5:46:e3:6d:62:e6:36:ce:a5:73:8b:0d:9e:61:
bf:0f:76:14:6d:90:21:68:91:85:55:f0:2f:09:ea:
cd:0f:4e:47:80:3b:a2:16:55:8e:42:87:c6:e6:76:
60:db:95:4c:26:52:dd:21:0f:56:13:db:26:6a:e7:
e8:6a:d7:71:e0:35:d2:63:bd:7c:5b:e1:36:72:66:
99:24:16:13:92:b1:99:9b:d0:d9:fb:7b:e3:7a:e2:
5b:46:e8:f8:a0:7c:c8:6e:ec:ec:54:84:67:45:01:
77:23:2e:56:45:b3:89:be:db:fe:75:b5:94:f8:54:
d3:37:07:0d:4f:61:e1:4e:ba:c1:38:40:e9:c3:f0:
c3:17:b2:e6:47:42:ea:e2:a2:68:d0:f7:da:31:b9:
bf:84:bb:d8:a6:d9:4e:fb:ec:ad:22:c6:05:75:d4:
30:12:ac:93:86:4f:84:6c:8d:6f:ff:d0:da:d8:77:
95:a7:30:a0:ce:1a:ea:d7:23:5c:89:fa:23:34:74:
2f:06:ce:58:2c:cf:99:19:65:f6:a8:29:41:9b:30:
fe:41:1d:2d:3e:c7:b2:22:35:34:64:d4:f2:69:66:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:A4:F7:20:D9:7E:0F:AC:AE:31:51:5E:BB:E2:1E:97:A4:C7:3C
X509v3 Authority Key Identifier:
keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:ef:67:24:cd:7d:e6:ae:c0:0b:fa:f3:32:dc:2e:19:38:
e2:e9:26:fc:08:4f:7f:92:18:b7:25:bc:ab:b3:a8:dc:f3:b5:
c1:b3:06:6e:41:84:49:ec:b4:f5:94:02:fe:e4:9a:a0:3b:3c:
67:56:31:b1:6c:f5:80:42:18:b2:d8:3d:71:9b:db:f0:dd:9d:
66:9e:7f:b1:2e:db:0f:5d:75:2e:d2:fd:c3:92:c3:f4:ab:36:
3d:79:db:d6:f3:e4:f4:ae:24:1b:bd:b0:b5:c2:bb:6c:bb:e1:
36:cb:4b:84:42:0f:27:b6:f1:fd:ae:92:32:54:17:ec:f4:51:
75:a6:c4:fb:f2:53:ce:1d:2c:6c:c4:43:88:c5:ac:48:d0:d7:
09:6f:97:0f:e5:46:1f:ce:43:fc:fb:04:8f:b3:a9:41:09:d0:
bb:62:81:a4:76:54:cd:4c:f7:5d:17:ad:50:c0:e5:dc:dc:6d:
66:62:2e:e4:31:63:88:0b:3e:a6:1a:7a:f1:55:d8:57:81:99:
01:bf:3f:89:ac:4b:e7:e1:c6:10:bc:01:23:8f:41:a2:b1:83:
bf:8f:7d:0f:11:d8:40:4c:37:97:46:c1:71:d8:3e:0f:fe:30:
1d:59:49:39:38:46:f9:3d:1f:71:34:8e:a2:9a:21:3d:24:db:
5b:3b:07:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw
MkQxRTM3QTYwHhcNMjYwNDE2MTYyNTU3WhcNMjYwNDIzMTYyNTU3WjAYMRYwFAYD
VQQDEw02OWUxMGQ5NS04N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzzSdLH9mYIUyQFz5WhsifBMhkF5vD1EbKvcMZTfo9UbjbWLmNs6lc4sNnmG/
D3YUbZAhaJGFVfAvCerND05HgDuiFlWOQofG5nZg25VMJlLdIQ9WE9smaufoatdx
4DXSY718W+E2cmaZJBYTkrGZm9DZ+3vjeuJbRuj4oHzIbuzsVIRnRQF3Iy5WRbOJ
vtv+dbWU+FTTNwcNT2HhTrrBOEDpw/DDF7LmR0Lq4qJo0PfaMbm/hLvYptlO++yt
IsYFddQwEqyThk+EbI1v/9Da2HeVpzCgzhrq1yNcifojNHQvBs5YLM+ZGWX2qClB
mzD+QR0tPseyIjU0ZNTyaWYm1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUEpPcg
2X4PrK4xUV674h6XpMc8MB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB
NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv
ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGfvZyTNfeauwAv68zLcLhk44ukm/AhPf5IYtyW8q7Oo3PO1wbMGbkGESey0
9ZQC/uSaoDs8Z1YxsWz1gEIYstg9cZvb8N2dZp5/sS7bD111LtL9w5LD9Ks2PXnb
1vPk9K4kG72wtcK7bLvhNstLhEIPJ7bx/a6SMlQX7PRRdabE+/JTzh0sbMRDiMWs
SNDXCW+XD+VGH85D/PsEj7OpQQnQu2KBpHZUzUz3XRetUMDl3NxtZmIu5DFjiAs+
php68VXYV4GZAb8/iaxL5+HGELwBI49BorGDv499DxHYQEw3l0bBcdg+D/4wHVlJ
OThG+T0fcTSOopohPSTbWzsHzg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:17 2026 by rpki-client