
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier: 37cE2qgWptXstAXtFsT87Wyyf8l6zLAIOVWdvHQPq9I=
Subject key identifier: F6:D0:E2:DF:2B:EA:E7:F4:7D:BA:EB:A8:39:0F:84:49:FF:A9:9A:60
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number: 0206
Signing time: Fri 17 Apr 2026 02:53:28 +0000
Manifest this update: Fri 17 Apr 2026 02:53:28 +0000
Manifest next update: Fri 24 Apr 2026 02:53:28 +0000
Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: aia2RB9hV6YtNu7/OCFgW8aT/uELLtgqW8li0Bwx67c=)
2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: 7qtTMrlJ+v5el8z+vHfrMcFg6dLXSpVi2HhEvJvP10s=)
3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: gcy8Fq5tVijcJKVaFyBlkLcenhJ0nLFXzBAhm0P+3TU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Apr 17 02:53:28 2026 GMT
Not After : Apr 24 02:53:28 2026 GMT
Subject: CN=69e1a0a8-c4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:a0:75:0e:26:99:ce:0c:3a:45:e8:65:dd:
f3:29:9f:1c:af:4c:73:97:cf:0b:d7:cb:dc:ee:31:
0e:4f:7e:6f:41:6b:0c:8a:f3:4a:61:27:03:53:e4:
7e:f8:75:e4:d6:fc:89:bc:6d:f0:c6:b9:54:32:4a:
a7:3b:3e:70:80:d4:b5:98:10:b1:e2:fe:b3:c9:b1:
6e:83:65:ee:9d:4b:74:1b:ae:28:cb:c7:af:25:0b:
0b:22:85:05:e2:ff:be:9e:bd:ab:20:fb:87:3e:3d:
33:20:ed:0b:55:d9:81:13:c3:2d:c5:55:9c:37:03:
44:00:71:f8:f7:f6:70:5d:f9:3a:f4:43:37:47:90:
ec:86:b4:02:67:99:16:c1:3a:e0:9a:c1:02:06:f5:
46:cb:ae:7f:3e:99:e3:07:d9:35:7b:ba:9d:b5:45:
94:e2:94:20:da:0c:c8:25:00:83:1e:61:84:5f:6e:
81:62:7e:fb:f3:55:3a:2d:14:21:ca:8e:8e:1c:8d:
67:17:42:40:75:62:08:f9:c8:a9:a1:f0:59:42:4c:
e0:46:ec:71:0a:ff:b3:c5:3f:e9:2f:76:fa:45:91:
27:ea:80:6e:b2:9b:3a:80:c2:58:ea:04:97:28:ba:
6f:64:49:00:61:4b:fa:cf:83:92:64:42:1f:3f:eb:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:E2:DF:2B:EA:E7:F4:7D:BA:EB:A8:39:0F:84:49:FF:A9:9A:60
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:b8:f7:73:81:99:e6:35:e7:a1:94:a5:af:1d:94:01:08:
3b:0f:b8:9c:aa:e7:d2:4d:41:a8:b8:c2:24:47:e3:ac:67:a8:
10:19:1b:e3:8a:9f:7b:b9:04:c2:94:94:c1:ff:d9:b7:59:88:
7d:86:1d:d7:d8:16:4d:76:0c:5b:a4:f0:e7:35:18:20:5a:76:
cd:7a:96:09:24:e4:aa:bb:b1:4e:ad:c1:b7:87:41:52:35:9f:
1b:11:2e:ed:b6:d5:35:11:1a:59:55:47:49:cf:7c:dd:fa:58:
20:95:03:24:eb:70:4a:99:f0:a6:85:2a:c6:3d:53:50:e5:fe:
70:a6:59:af:68:7c:e7:3e:d6:f5:91:a8:6c:13:db:0b:40:c8:
aa:50:26:6e:2d:63:72:cf:0a:3b:1c:13:b0:70:8a:ff:ee:d2:
77:2e:8c:c5:e0:7a:ec:43:da:38:07:2e:21:57:ba:97:5e:12:
0b:7e:5c:25:56:e5:3d:1f:05:1e:46:9c:53:17:1b:ed:b2:15:
15:03:d8:89:50:7e:8a:95:04:b9:8c:61:05:d6:47:4d:5d:12:
b2:26:59:51:06:15:b1:4c:fa:94:2e:f9:02:36:92:44:8c:d5:
ca:40:c9:fb:d5:28:70:08:c4:8b:79:09:1d:d4:38:82:22:5b:
73:ff:d8:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy
NEJBRDdCNDkwHhcNMjYwNDE3MDI1MzI4WhcNMjYwNDI0MDI1MzI4WjAYMRYwFAYD
VQQDEw02OWUxYTBhOC1jNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt42gdQ4mmc4MOkXoZd3zKZ8cr0xzl88L18vc7jEOT35vQWsMivNKYScDU+R+
+HXk1vyJvG3wxrlUMkqnOz5wgNS1mBCx4v6zybFug2XunUt0G64oy8evJQsLIoUF
4v++nr2rIPuHPj0zIO0LVdmBE8MtxVWcNwNEAHH49/ZwXfk69EM3R5DshrQCZ5kW
wTrgmsECBvVGy65/PpnjB9k1e7qdtUWU4pQg2gzIJQCDHmGEX26BYn7781U6LRQh
yo6OHI1nF0JAdWII+cipofBZQkzgRuxxCv+zxT/pL3b6RZEn6oBusps6gMJY6gSX
KLpvZEkAYUv6z4OSZEIfP+uuZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbQ4t8r
6uf0fbrrqDkPhEn/qZpgMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy
OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj
SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAc6493OBmeY156GUpa8dlAEIOw+4nKrn0k1BqLjCJEfjrGeoEBkb44qfe7kE
wpSUwf/Zt1mIfYYd19gWTXYMW6Tw5zUYIFp2zXqWCSTkqruxTq3Bt4dBUjWfGxEu
7bbVNREaWVVHSc983fpYIJUDJOtwSpnwpoUqxj1TUOX+cKZZr2h85z7W9ZGobBPb
C0DIqlAmbi1jcs8KOxwTsHCK/+7Sdy6MxeB67EPaOAcuIVe6l14SC35cJVblPR8F
HkacUxcb7bIVFQPYiVB+ipUEuYxhBdZHTV0SsiZZUQYVsUz6lC75AjaSRIzVykDJ
+9UocAjEi3kJHdQ4giJbc//YoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:11 2026 by rpki-client