
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json)
Hash identifier: gQ4tRpWP77CT1kFo1ktCTq27vGqSM/p5Iv7wz4B/0NQ=
Subject key identifier: 37:E1:C0:88:CF:41:3C:89:8D:49:CD:1B:E6:5A:5F:D5:1F:D1:16:DF
Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
Manifest number: 6F
Signing time: Fri 17 Apr 2026 07:35:16 +0000
Manifest this update: Fri 17 Apr 2026 07:35:16 +0000
Manifest next update: Fri 24 Apr 2026 07:35:16 +0000
Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: fog+Bkii2i94MfZYoFJZaPvDSQaC88r0nRn1kDFHGfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Validity
Not Before: Apr 17 07:35:16 2026 GMT
Not After : Apr 24 07:35:16 2026 GMT
Subject: CN=69e1e2b4-4b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:a9:58:5b:4f:bb:91:ba:3d:6d:85:bd:ce:
a6:47:b3:64:1a:33:03:ec:77:b2:67:8c:85:c9:06:
a0:c2:e0:81:b7:09:d7:5c:98:ba:a0:04:b0:97:0d:
3e:28:08:33:7d:4d:62:1b:7b:7c:b3:2f:f5:71:71:
8f:14:44:a0:d9:c3:63:40:75:29:37:52:33:2b:b1:
c8:53:34:68:b9:13:bd:1e:06:7b:96:fe:1f:5a:42:
38:a2:a8:cf:08:b3:57:20:e1:94:42:c6:7c:5b:cf:
14:28:5c:a4:9a:8d:06:85:12:9c:69:ec:42:4f:c2:
71:91:44:c4:1a:9b:42:b5:cb:b1:0b:21:ff:c6:6a:
76:a7:f5:54:f0:db:e2:2d:d6:6b:24:e4:8d:40:af:
28:ec:22:e7:9e:10:f0:b5:0d:10:c4:dd:5f:44:7a:
6c:67:b9:d9:6f:9d:d0:db:fd:40:d9:76:9e:cb:d4:
2b:b6:e5:b3:c2:15:75:82:46:23:8f:78:40:39:bd:
ab:91:ef:f2:1d:94:1c:45:15:a2:fa:2c:24:db:2c:
dc:6b:54:c5:c8:bf:3b:76:5b:e0:2f:20:f8:e7:b0:
5c:ff:fe:9c:ff:d8:33:7e:b6:37:6a:ef:98:50:fd:
ef:4c:4a:02:db:45:49:32:8c:29:b3:8e:69:48:9b:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:C0:88:CF:41:3C:89:8D:49:CD:1B:E6:5A:5F:D5:1F:D1:16:DF
X509v3 Authority Key Identifier:
keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:52:ba:80:87:ff:9e:31:37:4d:31:b0:e2:14:b3:b4:09:
4e:d8:a6:dc:3f:d4:43:2b:3c:3b:49:5f:dd:31:30:5c:f6:6a:
fa:97:4b:ef:a5:aa:b9:fd:9e:31:43:a2:b0:fc:d3:bc:1d:15:
94:98:df:31:c8:62:b2:85:42:00:19:b9:10:d0:31:5d:e5:62:
7b:6e:1d:99:b1:17:b2:6c:3c:2e:e8:4e:c2:5e:ec:fc:ca:11:
df:01:af:07:af:b0:d3:36:47:72:1d:6a:67:16:53:3a:1d:e0:
75:f2:76:7c:ed:e9:2c:fe:be:84:56:eb:e0:27:6c:25:df:f2:
2d:e9:19:5d:c0:30:e7:25:0f:a4:ac:4c:22:d2:ee:bd:03:63:
db:3c:a3:62:b5:1a:62:2f:88:c2:80:fb:7c:f4:d9:e5:42:91:
84:e5:5c:4e:7d:56:71:b7:55:50:7f:28:58:6f:b8:2d:95:f7:
a7:09:db:81:9e:2d:f0:ef:20:48:b1:8e:9e:2e:5f:d1:5c:83:
53:68:5e:0f:68:0e:48:ea:bb:f9:79:19:de:f8:3f:e6:19:4a:
fb:02:b5:72:94:99:e4:b1:5a:c9:e2:ce:52:11:86:c7:cb:96:
b6:81:04:39:3e:88:61:c9:d4:00:d8:4f:a6:57:59:4d:8b:2b:
d1:42:e8:e9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4
RDUxNDA3RTAeFw0yNjA0MTcwNzM1MTZaFw0yNjA0MjQwNzM1MTZaMBgxFjAUBgNV
BAMTDTY5ZTFlMmI0LTRiMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8jqlYW0+7kbo9bYW9zqZHs2QaMwPsd7JnjIXJBqDC4IG3CddcmLqgBLCXDT4o
CDN9TWIbe3yzL/VxcY8URKDZw2NAdSk3UjMrschTNGi5E70eBnuW/h9aQjiiqM8I
s1cg4ZRCxnxbzxQoXKSajQaFEpxp7EJPwnGRRMQam0K1y7ELIf/Ganan9VTw2+It
1msk5I1AryjsIueeEPC1DRDE3V9EemxnudlvndDb/UDZdp7L1Cu25bPCFXWCRiOP
eEA5vauR7/IdlBxFFaL6LCTbLNxrVMXIvzt2W+AvIPjnsFz//pz/2DN+tjdq75hQ
/e9MSgLbRUkyjCmzjmlIm9hDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN+HAiM9B
PImNSc0b5lpf1R/RFt8wHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF
ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5
Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF
S1hsOEpHUWdwOW8xUlFINC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAPqFK6gIf/njE3TTGw4hSztAlO2KbcP9RDKzw7SV/dMTBc9mr6l0vvpaq5/Z4x
Q6Kw/NO8HRWUmN8xyGKyhUIAGbkQ0DFd5WJ7bh2ZsReybDwu6E7CXuz8yhHfAa8H
r7DTNkdyHWpnFlM6HeB18nZ87eks/r6EVuvgJ2wl3/It6RldwDDnJQ+krEwi0u69
A2PbPKNitRpiL4jCgPt89NnlQpGE5VxOfVZxt1VQfyhYb7gtlfenCduBni3w7yBI
sY6eLl/RXINTaF4PaA5I6rv5eRne+D/mGUr7ArVylJnksVrJ4s5SEYbHy5a2gQQ5
PohhydQA2E+mV1lNiyvRQujp
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:22 2026 by rpki-client