
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier: k7INFtV6BCh4omw9j88I02lYmTDL3GzZwPXh4lE5QHA=
Subject key identifier: 4C:A6:FD:08:D7:82:E0:5C:A3:91:46:77:57:C2:F2:82:19:79:87:96
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number: 04ED
Signing time: Thu 16 Apr 2026 23:39:21 +0000
Manifest this update: Thu 16 Apr 2026 23:39:21 +0000
Manifest next update: Thu 23 Apr 2026 23:39:21 +0000
Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: KWsQNk+B/XUxtE+1WKWUzWQNSC7noGe4iV1eZ7n9T94=)
2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: zbXMrXwx1yzaHmM3iEw5RvlADnQZubhK6bBZesY2itA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Validity
Not Before: Apr 16 23:39:21 2026 GMT
Not After : Apr 23 23:39:21 2026 GMT
Subject: CN=69e17329-badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:d3:a7:41:bd:f7:69:b4:5c:e4:1e:27:46:
bb:ac:b3:93:58:55:5c:5b:8f:0f:fc:5b:d3:a9:c5:
a9:0e:ba:18:e8:3f:a2:24:9c:91:e1:fe:39:ec:22:
d8:a9:6d:44:f3:c6:1f:ad:d8:92:f0:7b:8c:76:f9:
c2:18:2d:e3:63:4c:4e:1f:fd:b8:2c:7d:32:5d:d1:
d7:17:17:2b:97:63:54:67:94:a3:d9:4b:98:bc:42:
b9:22:2a:e8:a5:a0:2d:69:69:a5:34:6e:96:30:e2:
11:fb:8f:c5:db:c0:14:da:7f:39:63:33:37:a3:64:
ca:e1:b9:60:f3:11:7d:cb:c0:7b:34:bc:7d:bb:61:
40:5d:2a:69:1f:2e:3e:59:78:74:7a:b1:57:95:63:
23:c3:da:c2:99:92:58:b0:bc:44:bf:fd:75:38:47:
39:3d:c9:97:fa:a3:ff:8f:23:8e:bc:94:40:72:ef:
51:e2:ec:9d:56:2e:f5:18:88:ba:4c:5e:b4:41:5c:
d8:f6:2a:5d:96:ac:22:35:7e:1e:27:ae:e9:b6:5b:
17:c6:b7:0f:2a:ce:f8:c1:b2:04:39:86:da:51:19:
b8:e9:5c:f3:2d:fd:a8:de:59:89:df:61:43:b4:82:
7f:a1:a5:12:e5:83:c5:44:38:9f:85:60:ff:c9:26:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:FD:08:D7:82:E0:5C:A3:91:46:77:57:C2:F2:82:19:79:87:96
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:a2:26:f4:b5:12:c2:6a:9c:73:26:c4:7a:10:07:e3:2b:
07:46:10:f4:b7:f2:19:04:da:c3:59:98:f0:ec:03:71:07:ba:
b8:8c:ff:1e:f5:d2:30:ea:1a:01:e0:38:b1:44:e8:3d:51:cd:
9a:97:0f:6f:4b:05:be:e3:54:9d:cc:0d:93:f4:12:c0:9c:10:
53:72:7a:74:bc:0f:96:96:e1:fc:5a:a5:cf:c2:65:b4:ea:86:
a7:b8:6f:a4:40:84:50:99:aa:6c:70:8e:1c:1b:4d:85:cc:75:
a4:d5:53:74:92:23:3c:9d:ea:61:0f:db:b9:9b:94:cf:26:23:
1e:e3:7d:cc:9a:0a:91:fa:78:1d:ba:43:4a:f8:3b:1a:6b:21:
03:1c:30:93:ba:85:3c:22:59:f2:8d:ff:12:d1:1c:0c:29:37:
4b:76:13:75:ed:3a:88:61:b5:d4:41:df:f6:06:4d:3f:42:8a:
0b:6f:96:86:97:ee:e9:9d:2f:be:f1:32:34:c7:1f:2a:c4:ff:
ef:68:73:59:2a:17:bc:c0:d1:16:0b:5d:2c:cf:58:d9:d3:87:
c6:75:8b:18:77:25:0d:14:6f:85:97:cf:51:fe:38:16:42:d5:
71:7f:5c:b3:6e:d4:97:70:73:fd:bf:6b:45:d2:0e:3b:8b:cd:
7f:b8:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:32 2026 by rpki-client