
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json)
Hash identifier: y7VB75yg1H1SF6louceRmrZdWhNPjN46w4i9Sxt0MXE=
Subject key identifier: D1:02:9D:ED:54:57:0A:8F:F1:84:18:4A:08:15:65:80:57:C9:C6:0B
Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
Manifest number: 63
Signing time: Fri 17 Apr 2026 07:41:45 +0000
Manifest this update: Fri 17 Apr 2026 07:41:44 +0000
Manifest next update: Fri 24 Apr 2026 07:41:44 +0000
Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: +Er5XKS861yMb9gUlwbiyvUdCbEyCHtb4Tg9xlWzklY=)
2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Validity
Not Before: Apr 17 07:41:44 2026 GMT
Not After : Apr 24 07:41:44 2026 GMT
Subject: CN=69e1e438-349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:fd:44:95:a2:b8:da:ac:d8:67:a4:b6:a4:
83:2b:8c:d7:d1:aa:26:ff:f5:b6:06:60:f5:b1:b5:
19:1a:4f:4c:1f:f3:df:7c:a6:dc:0e:ea:3b:61:8b:
1a:c2:0b:1f:ae:ca:18:36:b5:0b:00:ec:15:4f:93:
d7:ce:b2:10:75:8c:59:40:7a:9a:1d:7c:f0:19:68:
1c:b0:2c:62:39:d0:cb:41:71:e6:3d:da:9a:a9:f4:
16:98:98:33:0c:1c:57:fa:80:24:3a:ba:31:62:47:
29:f4:1e:a4:92:5c:62:97:51:f4:98:79:97:23:8c:
2c:4d:2b:e0:97:54:47:a9:d4:61:28:c7:33:76:39:
05:a0:46:0d:a4:c2:1f:f9:59:32:a5:9e:28:12:13:
85:6c:f6:2b:1d:11:f3:36:eb:2f:e3:d7:cd:bb:c9:
b6:aa:f0:78:4b:a3:5d:e7:4d:0c:33:2d:8a:ce:63:
77:98:ce:ae:99:f6:76:99:9a:ae:51:39:b7:98:1d:
3d:eb:71:8f:b8:a0:51:4c:cd:be:5b:2c:84:d8:9b:
ac:be:82:0f:a6:ec:ac:02:23:a3:c0:ad:80:ab:a1:
c9:b3:55:7a:c5:50:f3:d8:28:33:14:c4:95:7a:8c:
20:f7:20:12:45:76:78:6e:f9:ff:a8:c3:43:39:83:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:9D:ED:54:57:0A:8F:F1:84:18:4A:08:15:65:80:57:C9:C6:0B
X509v3 Authority Key Identifier:
keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4b:5c:63:e8:a4:35:0f:13:98:b4:f0:00:1f:da:2b:86:a8:
7a:6b:0d:df:b8:4b:0e:7c:f2:da:6c:13:0f:eb:0b:73:91:df:
48:9a:7a:af:d8:fa:b5:1c:8e:ae:38:6a:22:39:ea:f9:56:96:
b7:44:6e:eb:27:6e:9e:2b:71:a5:4e:77:08:bf:fb:05:13:f2:
de:93:a0:bf:3f:43:ff:fc:cf:f9:ec:d1:67:05:95:99:8f:96:
a3:42:42:18:3c:ac:9f:cd:01:aa:93:c2:76:43:3d:71:46:c8:
a6:2d:00:77:e6:b5:e3:1a:d7:be:74:73:60:16:42:15:fc:ff:
8c:f3:d2:55:43:e4:65:1c:7b:ef:3c:17:ca:bc:65:a2:b6:51:
fb:dc:1e:08:93:e0:24:50:3f:8f:bc:9b:ad:8f:93:9d:68:62:
9d:da:53:b6:4c:7c:bf:68:05:0b:a3:81:92:40:da:7d:7a:92:
c0:1b:1d:ea:ca:5d:d3:c7:83:23:da:53:43:96:83:9e:01:df:
c1:0e:b4:43:c7:76:40:1c:f5:d9:30:55:f9:fc:ba:44:36:e6:
25:3a:8f:25:4b:b9:0c:3e:2f:3c:44:14:55:ff:a2:f1:22:bb:
f6:5f:9d:d3:36:96:6f:b5:5a:bf:f7:5a:15:4e:2b:f5:16:c7:
61:c8:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:55 2026 by rpki-client