
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File: rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier: 046MUBjGIFGpo/dK6DaOIUUlI/yUjAc82PFEv9dn7ps=
Subject key identifier: 04:0E:A2:80:84:D6:09:90:7D:0E:72:EE:9B:9A:49:11:87:48:75:5D
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number: BE
Signing time: Fri 17 Apr 2026 06:42:11 +0000
Manifest this update: Fri 17 Apr 2026 06:42:11 +0000
Manifest next update: Fri 24 Apr 2026 06:42:11 +0000
Files and hashes: 1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: nJ3SlJjYGfGmL45732XuGHbRJhlF1AOsnTI/dKrI9yw=)
2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: //fCANZMUH8xgoi27pDocS10NmhDbhWBB2uRGDJADwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Validity
Not Before: Apr 17 06:42:11 2026 GMT
Not After : Apr 24 06:42:11 2026 GMT
Subject: CN=69e1d643-6260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:d6:df:16:c0:fb:50:eb:10:06:44:10:01:
96:e5:92:47:f9:50:c6:2f:ca:ae:c7:25:26:16:23:
a9:79:63:3e:43:0f:15:75:f4:14:71:8e:dc:cc:32:
d4:ca:47:3d:e5:24:59:87:2b:e1:7d:e9:67:ab:15:
5b:1d:ed:45:1b:62:67:34:8b:18:a3:1c:fa:aa:66:
a0:bf:53:bc:32:5f:a6:9d:3a:8a:48:02:0c:fd:f1:
d7:99:a3:72:c6:ad:1d:11:f7:b8:89:3f:55:af:07:
14:17:11:2c:cb:09:e9:ce:b1:90:e2:1c:94:98:29:
66:0e:1f:96:ae:bf:53:7c:a8:9f:61:76:91:f0:f9:
82:ca:65:11:09:0f:bf:0b:97:d4:ba:49:98:13:53:
95:65:f1:c3:7e:53:d1:1e:c8:68:76:8c:11:bc:33:
08:68:6c:e7:7c:54:1d:5b:7d:cb:61:1c:84:45:38:
f3:38:15:87:de:0d:1d:f1:dc:47:4c:59:29:75:86:
05:9a:a8:ab:e2:d1:af:67:b4:82:04:f0:9d:8b:8e:
78:95:84:1c:f3:72:bc:22:a2:b9:6c:90:28:de:7c:
24:63:d4:ba:d6:90:bf:c1:7f:c6:ab:77:8d:99:54:
27:8a:47:ec:61:8f:54:97:2e:fd:fc:06:38:70:4d:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:A2:80:84:D6:09:90:7D:0E:72:EE:9B:9A:49:11:87:48:75:5D
X509v3 Authority Key Identifier:
keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:24:2a:b2:f6:4c:6c:7a:62:37:46:06:68:63:e6:9a:a3:33:
83:47:ad:9e:c1:46:76:70:c5:0a:6b:7f:64:32:02:3c:bb:3b:
9d:c3:4f:cd:c0:67:d7:b8:3b:e6:26:93:b8:e4:09:25:b3:ca:
f9:d9:9e:19:7f:26:29:67:78:0d:71:d9:1e:21:28:b5:8b:40:
ee:21:1f:f0:22:0a:da:e5:a6:b3:d3:3e:3e:ba:65:02:a2:c4:
25:d1:9a:8c:1c:11:86:e6:f5:6d:e7:b9:98:e7:6b:bd:6a:6b:
20:7c:5d:a8:78:12:bd:11:8e:95:18:83:66:03:95:74:53:03:
ba:75:09:a5:35:07:45:aa:e9:fc:d0:61:78:7e:9f:d2:aa:35:
44:c9:0e:00:c5:bb:3c:02:18:a2:f0:ef:97:17:d3:9c:14:d8:
de:06:f6:4b:a4:ae:0e:78:c0:a5:da:98:2f:2d:25:4f:e2:dd:
e1:22:52:31:ee:d5:ad:62:b2:44:80:ab:ff:b5:89:4e:f0:1b:
fe:95:d0:7b:8f:fc:72:ba:5e:72:39:e2:aa:a7:66:a1:08:bc:
36:e4:d1:46:63:4b:26:2d:4c:dd:15:1c:7b:66:bb:3f:49:46:
31:aa:2b:b7:89:7b:7b:62:7b:f8:ac:69:8a:3c:5f:45:a8:08:
4e:b7:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:16 2026 by rpki-client