
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json)
Hash identifier: 4XeXAuk7Zocypls2SmqdUcJTj2L74PnfoWaDZoCzecg=
Subject key identifier: 83:A6:F1:10:F4:97:5C:4E:6D:F5:70:4A:E1:7C:E9:89:DF:EA:9C:E8
Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
Manifest number: 01BC
Signing time: Fri 17 Apr 2026 03:36:21 +0000
Manifest this update: Fri 17 Apr 2026 03:36:21 +0000
Manifest next update: Fri 24 Apr 2026 03:36:21 +0000
Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: p1eUxZtUs9PomkvfGPkvk3KmeIZKJg6xdOtwWeRVNm4=)
2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: GnVfU1KqQLS+VBxAiVzN8zaxN7MEl32b3mp04P6RPD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Validity
Not Before: Apr 17 03:36:21 2026 GMT
Not After : Apr 24 03:36:21 2026 GMT
Subject: CN=69e1aab5-e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:03:fe:7d:4f:69:fa:02:f4:d8:79:48:de:
bf:2e:e6:7c:f4:98:f2:e9:b1:5b:2a:20:e1:ce:26:
4f:76:60:5e:e8:85:ea:b9:f2:79:bf:97:50:58:a7:
37:18:f8:a1:17:8c:cd:2c:0e:a7:57:c4:7c:91:05:
4e:7d:86:67:62:89:15:f0:d4:f1:79:50:09:83:c2:
cb:66:a4:66:58:98:f2:91:e3:5f:a5:ce:ff:d7:30:
70:42:81:26:51:a6:ba:45:ee:bf:8b:56:d1:7e:ea:
e3:13:cd:25:fd:16:f9:0a:f8:5e:20:f4:3c:8b:f1:
0f:d1:1d:51:fe:d8:ba:b0:6c:79:8f:ef:5e:54:3e:
13:45:9b:86:d3:69:f5:47:8c:65:f5:6e:54:be:19:
69:31:c4:7b:78:d1:d5:58:a9:f7:b6:54:9f:06:66:
7c:a3:23:1d:27:cb:ff:89:fd:54:78:d3:b0:f2:b6:
06:f6:37:b6:c4:0b:b5:5f:1b:b9:b8:e6:e1:04:3e:
95:cf:d3:cc:ec:3c:e9:7a:4d:72:ae:58:61:2d:2c:
4f:7d:5a:49:ba:54:2f:63:de:d6:35:f5:57:fe:76:
15:e4:07:bd:17:18:f6:8c:1b:da:d1:5a:30:8f:30:
19:b2:13:d8:bb:7c:19:43:79:58:49:10:91:fb:11:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A6:F1:10:F4:97:5C:4E:6D:F5:70:4A:E1:7C:E9:89:DF:EA:9C:E8
X509v3 Authority Key Identifier:
keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:36:09:67:f9:8a:da:92:16:42:d9:16:06:37:c9:18:f2:
e7:fd:8f:8d:d3:26:b5:e3:4a:4a:68:2e:f6:5c:c2:e9:c4:a9:
d1:c6:1c:c1:9d:ac:37:32:4e:ff:e2:45:bd:8c:e7:d5:1e:77:
a6:fd:28:7d:33:92:af:4a:8b:86:a5:fb:b5:15:78:3b:ee:d9:
50:a5:20:1a:a3:2f:4b:a0:0e:37:ad:35:84:ce:be:f3:24:ca:
d5:70:28:1d:e5:54:3d:ad:5c:d3:26:67:46:de:72:3e:e3:84:
09:71:8c:6d:0e:06:ee:ab:88:b0:f1:2c:5f:4b:58:ed:3b:60:
c0:0d:05:0b:27:66:6f:be:80:7f:74:39:67:98:77:f7:ce:6a:
b6:cf:82:ff:c9:6f:08:9d:f1:15:08:e1:cb:3e:e7:45:24:40:
3b:fa:66:74:8c:73:c2:14:27:e3:6c:72:12:0f:7c:68:54:1d:
76:e9:a3:2e:63:d2:90:1e:0a:20:31:5d:60:44:6b:81:b4:15:
bf:2d:57:4b:d1:29:2b:45:c7:ea:ae:a4:6b:84:86:b9:f8:69:
e0:bb:01:dd:46:1f:43:2a:31:be:df:9e:1b:e7:3a:d9:58:a2:
45:4c:bf:67:c0:d9:53:f8:41:ee:86:8b:cf:15:7c:d1:c8:d9:
93:af:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:14 2026 by rpki-client