
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier: NXBUumjvhAXhkcRyRZXETyAG8E5k8zL7NBSRGcKzo7I=
Subject key identifier: B4:97:FB:85:6F:FB:E7:99:A2:F9:98:76:AD:53:8A:89:7B:B5:A0:D0
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number: F0
Signing time: Fri 17 Apr 2026 06:04:37 +0000
Manifest this update: Fri 17 Apr 2026 06:04:36 +0000
Manifest next update: Fri 24 Apr 2026 06:04:36 +0000
Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: 4rfgu5w3qzBJkjHXUVEfS+ZH4TT4YDHGNTxaidt71MQ=)
2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: VwphhGhSSxLYmxwzAbdpnMPMVv5nEltMnX3C48e6dF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Validity
Not Before: Apr 17 06:04:36 2026 GMT
Not After : Apr 24 06:04:36 2026 GMT
Subject: CN=69e1cd74-16c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:37:a1:95:87:f2:23:08:c3:ab:75:27:49:
b6:5c:31:47:f1:54:3d:88:ab:b2:36:91:96:85:e1:
ab:1c:5f:e6:43:33:32:c4:26:0f:6b:e0:ce:a2:f6:
f7:03:e0:8e:17:df:4a:13:10:0e:b2:69:8c:26:99:
4a:19:cd:5e:3a:5f:e3:10:98:b9:75:e5:73:2e:a8:
b2:d2:ef:2d:b2:bf:06:80:28:8c:c1:56:af:b8:79:
6f:73:cd:32:75:d2:41:84:c3:19:01:99:42:0e:0e:
03:14:ad:b3:e6:e1:e2:27:a3:62:c3:d7:47:94:8d:
bc:64:89:f0:34:e9:cc:43:d7:af:51:e9:8a:01:26:
7c:15:f8:bd:54:a8:7c:a9:9a:bc:ed:67:26:c3:47:
44:2c:d9:23:00:66:2e:8b:e2:46:1c:c7:99:0d:b6:
26:5c:a3:02:d2:e3:18:c2:40:e4:5f:94:ba:f7:36:
3d:b9:fd:fb:c8:04:41:34:4f:74:36:83:64:42:bd:
87:63:d8:1b:00:b3:b0:da:ea:c8:31:6b:36:eb:d6:
28:9b:e9:86:d2:cd:de:1e:20:5e:19:5c:96:5a:1f:
07:f3:d1:03:b5:dd:18:48:c6:d5:46:95:e1:34:da:
41:f3:0a:7f:bb:b0:96:3a:66:0a:8e:e2:7e:23:5e:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:FB:85:6F:FB:E7:99:A2:F9:98:76:AD:53:8A:89:7B:B5:A0:D0
X509v3 Authority Key Identifier:
keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:35:db:f3:1b:34:36:38:58:22:a5:fd:29:ef:d3:e7:78:
eb:3f:31:fb:c2:1a:98:c0:f4:cd:c0:7a:62:b6:cd:7d:cb:4c:
0a:3f:90:4e:f4:d0:8e:3c:f2:00:3a:19:27:72:bc:d6:23:fb:
b7:e8:22:f7:2b:14:29:a5:9a:48:d8:f8:a1:6e:3c:52:f2:c2:
76:b4:ca:20:c5:e3:b6:91:a8:88:d3:d8:7b:f1:95:11:bd:6e:
73:3b:51:93:55:77:34:0a:1d:fe:f5:a2:1c:62:eb:a2:ba:92:
ab:82:b8:70:16:66:b3:4c:8c:aa:6e:7a:93:00:78:d8:eb:82:
fd:a3:e0:28:76:e9:1a:70:8d:e2:dd:16:e3:29:04:c4:af:64:
c5:2e:62:36:4c:96:75:da:cd:b2:9e:24:f9:21:c3:13:cd:b5:
ae:29:65:a7:c9:93:bd:57:0a:a5:6e:18:78:e1:bb:6a:52:79:
b6:cb:ca:84:bb:1e:29:a8:e1:eb:8f:16:0a:11:75:af:8c:4e:
f2:c5:5c:a0:32:f5:ae:e9:49:de:d0:24:d0:f4:89:88:fa:11:
e3:a6:c0:00:2e:3d:a0:8a:ac:9f:47:36:c3:cb:03:2c:3e:ac:
84:21:81:d4:f2:53:02:36:d2:93:d1:98:4a:e4:54:cc:bb:52:
09:60:38:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjMxMTAvBgNVBAUTKEVCODNGNDg4MEYyMzU3NUU1NzUxNzg1QzZFMEFCMkJF
MEIyNDlCQzMwHhcNMjYwNDE3MDYwNDM2WhcNMjYwNDI0MDYwNDM2WjAYMRYwFAYD
VQQDEw02OWUxY2Q3NC0xNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsso3oZWH8iMIw6t1J0m2XDFH8VQ9iKuyNpGWheGrHF/mQzMyxCYPa+DOovb3
A+COF99KExAOsmmMJplKGc1eOl/jEJi5deVzLqiy0u8tsr8GgCiMwVavuHlvc80y
ddJBhMMZAZlCDg4DFK2z5uHiJ6Niw9dHlI28ZInwNOnMQ9evUemKASZ8Ffi9VKh8
qZq87Wcmw0dELNkjAGYui+JGHMeZDbYmXKMC0uMYwkDkX5S69zY9uf37yARBNE90
NoNkQr2HY9gbALOw2urIMWs269Yom+mG0s3eHiBeGVyWWh8H89EDtd0YSMbVRpXh
NNpB8wp/u7CWOmYKjuJ+I15zeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSX+4Vv
++eZovmYdq1Tiol7taDQMB8GA1UdIwQYMBaAFOuD9IgPI1deV1F4XG4Ksr4LJJvD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy81OEZFNzRBRUQw
QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYxNVhVWGhjYmdxeXZnc2tt
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGMy81OEZFNzRBRUQwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYx
NVhVWGhjYmdxeXZnc2ttOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR1A12/MbNDY4WCKl/Snv0+d46z8x+8IamMD0zcB6YrbNfctMCj+QTvTQjjzy
ADoZJ3K81iP7t+gi9ysUKaWaSNj4oW48UvLCdrTKIMXjtpGoiNPYe/GVEb1ucztR
k1V3NAod/vWiHGLrorqSq4K4cBZms0yMqm56kwB42OuC/aPgKHbpGnCN4t0W4ykE
xK9kxS5iNkyWddrNsp4k+SHDE821rillp8mTvVcKpW4YeOG7alJ5tsvKhLseKajh
648WChF1r4xO8sVcoDL1rulJ3tAk0PSJiPoR46bAAC49oIqsn0c2w8sDLD6shCGB
1PJTAjbSk9GYSuRUzLtSCWA4og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:22 2026 by rpki-client