
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier: W46CsJ1wqCwvPI608Uvsa8RPb9WxLnb4QN9xwdKa/50=
Subject key identifier: D2:A5:5F:F5:86:AA:C1:68:38:E7:56:A3:1C:1A:05:98:BA:13:9F:E6
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number: 0124
Signing time: Fri 17 Apr 2026 05:22:42 +0000
Manifest this update: Fri 17 Apr 2026 05:22:41 +0000
Manifest next update: Fri 24 Apr 2026 05:22:41 +0000
Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: YE0+eZ5ER6iURahtO2jByEfjZoqHfpMFeGHmFDwktz0=)
2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Validity
Not Before: Apr 17 05:22:41 2026 GMT
Not After : Apr 24 05:22:41 2026 GMT
Subject: CN=69e1c3a2-06f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:15:a1:56:16:52:bf:5f:24:e7:fb:86:75:
a8:ce:08:1b:5c:9e:5d:cb:12:ec:49:6c:a2:62:90:
51:3b:30:c1:89:8a:e2:01:b5:9c:41:64:bb:b4:22:
f0:11:75:0c:f1:c3:4b:55:77:35:7f:9e:2c:07:8b:
39:47:8e:03:b2:89:ea:bf:eb:27:17:44:81:30:db:
a3:39:8e:77:82:a0:4f:d8:68:cf:b6:fc:5b:67:b6:
c1:8f:36:d9:a2:71:89:a0:0e:27:89:f0:71:de:33:
77:be:1e:ca:af:f6:2b:c9:ed:4d:74:b9:b1:47:64:
97:4f:d7:17:d9:56:22:7c:2e:ac:d0:79:10:a2:a0:
c8:3b:e9:2a:e5:55:82:a4:6d:71:90:9f:56:3f:2e:
93:aa:7e:43:df:99:f0:9b:bb:cd:41:06:a7:3b:7f:
34:f7:d0:e9:9e:9e:8e:19:e3:05:38:66:86:63:a4:
a2:a7:fe:d1:55:da:a7:b8:c3:9d:c0:c9:20:07:36:
20:8e:73:3a:cb:4a:a1:e8:d3:fb:de:90:07:f5:1b:
91:1d:56:3d:ee:6b:64:89:86:8d:9f:4b:39:15:2d:
60:07:09:6f:eb:5e:71:7d:74:c5:f4:46:48:20:60:
ac:60:cd:a0:e5:53:11:b4:5a:51:4e:4e:10:8c:d5:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:5F:F5:86:AA:C1:68:38:E7:56:A3:1C:1A:05:98:BA:13:9F:E6
X509v3 Authority Key Identifier:
keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c6:f5:1e:9f:4f:c6:ac:e2:ae:53:bd:7c:77:2d:55:80:b2:
8a:41:b8:ee:40:d2:6f:28:26:2d:da:53:f2:53:c7:78:77:44:
a9:91:ed:e5:04:09:22:71:cb:df:44:3c:27:7b:c0:dc:b3:f9:
9d:61:d8:78:ee:54:40:67:4f:41:72:78:eb:d3:93:66:12:0e:
12:bf:64:7e:3f:6e:b4:25:65:44:18:0d:99:53:1c:95:51:8e:
b2:91:1d:df:01:dd:a9:75:13:58:32:90:12:fe:58:11:b1:bd:
7e:14:bf:87:ec:f8:13:46:ef:0c:03:6c:24:bf:e3:ba:31:ea:
94:4e:ac:92:a9:e3:be:0d:47:85:71:eb:2d:e8:38:0c:96:e4:
c5:b9:85:9c:b3:6f:49:51:a6:3b:43:36:d0:7c:6f:ec:9f:0d:
65:2e:75:e3:7f:2a:7c:0e:1e:7b:a3:17:68:a8:24:a9:4e:03:
ab:31:e4:de:28:d9:f5:1d:b8:0f:09:5c:da:04:72:16:a5:69:
8a:52:b3:c4:f6:d2:f9:1a:4a:8d:0e:a7:b6:05:47:2f:aa:4d:
ae:be:ae:0e:fb:05:5a:6e:48:4a:a4:b8:22:bd:56:c5:35:59:
17:a2:c8:04:f1:73:32:f8:0b:6f:16:eb:e7:30:b2:00:7b:9f:
a0:1f:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:25 2026 by rpki-client