
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File: RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier: /rc0r1TubguT3hPJFzIQucarSSVWVYzntCqP5THuuFQ=
Subject key identifier: 3C:10:BC:94:77:C9:38:10:95:3E:F1:AE:24:ED:CF:95:62:B3:10:4D
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer: /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number: 020C
Signing time: Fri 17 Apr 2026 02:45:22 +0000
Manifest this update: Fri 17 Apr 2026 02:45:22 +0000
Manifest next update: Fri 24 Apr 2026 02:45:22 +0000
Files and hashes: 1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: iMUyS91Od+Ir0sVchvD08kzoWARhwzC2FDRarOtXPRk=)
2: 2C08945405B311F1930B3931093D8C67.roa (hash: Ux4o9vfUKYwo/QJewb/lu71Yp9nHgW9svS2rRsxIwOs=)
3: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: NX5PxK7Y9VoE1yV/s7rq72vigWqNYrYKi8Gii2x6mj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Validity
Not Before: Apr 17 02:45:22 2026 GMT
Not After : Apr 24 02:45:22 2026 GMT
Subject: CN=69e19ec2-38d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:f0:80:6c:27:df:df:ff:96:aa:cf:bd:da:
f5:f5:7c:e5:d8:82:4b:fe:63:b7:c5:bc:02:c7:be:
d9:70:6d:db:18:5f:07:8d:4d:16:4e:40:66:84:e4:
d0:a1:da:3a:cc:b4:51:17:3b:0e:0f:14:b3:13:2a:
02:44:97:af:4d:57:7a:b1:6b:45:98:b1:c8:07:38:
93:25:e7:b1:f7:33:df:5b:a5:dd:65:f1:01:8c:c4:
a0:18:9a:b1:66:d5:cf:b4:81:70:b4:40:90:29:c0:
be:1c:41:ba:dd:46:fd:d0:07:a1:6f:0f:81:00:9f:
b4:58:00:ec:9f:a6:f7:a1:33:99:62:a4:84:cb:e9:
b3:c5:bd:d9:f0:2d:ac:37:d6:6a:4b:c0:50:e6:97:
e7:95:d8:94:55:7f:2a:63:12:ef:24:93:b1:2e:ce:
03:37:88:51:80:7c:8a:63:4c:16:ca:39:b2:1b:4c:
d3:40:b8:39:6c:3d:72:4e:9d:41:bd:d3:27:d9:85:
4b:1a:2e:ca:13:00:e6:7a:22:86:08:0e:1c:f2:0a:
93:4c:4e:64:6f:b0:0b:70:0a:a2:fd:20:a2:f2:9c:
34:a3:42:ee:62:ec:90:7d:f4:ae:43:f7:e0:e4:20:
3d:a7:5e:a5:55:4d:a5:aa:55:77:b7:f3:24:aa:83:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:BC:94:77:C9:38:10:95:3E:F1:AE:24:ED:CF:95:62:B3:10:4D
X509v3 Authority Key Identifier:
keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:58:a0:96:34:17:48:e2:1d:cb:51:2e:11:6e:88:0e:af:
ed:fd:d7:19:e2:c5:e6:27:0a:5c:de:0d:7f:19:16:55:15:4e:
4e:3e:16:64:90:09:41:2d:92:2f:12:d0:7c:47:28:0b:80:97:
1f:f7:7a:6a:4d:8e:46:c3:d8:02:18:af:e9:ca:5d:46:4b:84:
0b:95:0c:de:ac:dd:d0:65:9e:55:7d:b9:61:52:5c:0d:15:21:
b2:20:35:82:bd:8e:47:e8:bd:cc:c0:4d:4d:0a:bd:a6:38:f1:
ca:39:f7:62:dc:5a:a8:ca:d7:a7:45:8e:83:e2:42:a7:12:7c:
05:bd:06:03:bc:4a:de:e7:ed:80:9a:b1:44:48:8f:c7:c1:a6:
64:80:87:f0:6f:ce:a3:e1:7a:1b:c8:15:8f:24:83:ad:a7:53:
68:bc:7d:bf:f9:a7:fc:44:02:09:73:31:3a:f8:db:db:de:ab:
d0:c5:81:49:09:00:92:a4:e2:27:f7:4a:74:63:73:d0:72:2d:
ad:6c:bd:f7:76:3b:ea:f0:17:8e:93:ba:e4:8f:c0:97:96:98:
1a:d8:04:fd:3a:8e:73:6c:10:bd:d3:62:52:21:7f:68:d0:c2:
47:0d:d8:d6:fb:01:67:9e:87:26:df:bd:32:65:6b:3a:27:79:
7e:fa:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:08 2026 by rpki-client