
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier: L1dtASUE5oFMaZ/xBmcc0ZrSzO44OMPe8vrDGnjCmfs=
Subject key identifier: B6:CF:27:25:D5:19:B4:5F:8B:F4:08:07:DA:BA:D5:F3:46:4F:DC:C3
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial: 090F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number: 0905
Signing time: Thu 16 Apr 2026 20:13:14 +0000
Manifest this update: Thu 16 Apr 2026 20:13:14 +0000
Manifest next update: Thu 23 Apr 2026 20:13:14 +0000
Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: 51TuOS0TGS/kjRtQQpwfOoeNEDEVhc2a3NdaMyNm7Ig=)
2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319 (0x90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Validity
Not Before: Apr 16 20:13:14 2026 GMT
Not After : Apr 23 20:13:14 2026 GMT
Subject: CN=69e142da-4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:21:da:e8:a9:00:58:fc:16:b4:e4:4a:3a:
07:20:d4:d7:0b:21:1d:e1:15:84:ff:cc:da:8f:f8:
66:63:f4:ad:e9:d8:8b:12:3c:7b:97:ae:d5:fb:b2:
59:62:12:57:da:a7:42:94:0d:13:69:06:ec:13:c4:
bd:a7:e9:72:b7:a7:a3:25:7a:e4:f8:48:85:83:fd:
35:5d:a1:7b:3e:e9:c1:2e:45:90:92:d6:d0:78:14:
51:15:ef:78:a8:c8:36:bf:d6:05:3b:06:9f:1e:82:
4a:cd:54:54:00:2e:bc:8f:04:5c:a9:1b:29:56:9a:
b1:5f:11:a0:5c:70:24:83:96:f9:98:32:5b:cd:75:
a7:e2:c6:6f:c8:a6:55:2a:a2:70:40:69:57:3a:8f:
de:12:a5:c2:8b:d8:8a:0d:3a:d8:a9:53:0b:73:32:
0d:a9:3c:75:85:a2:44:b2:e9:7c:62:e0:35:ad:82:
48:d1:24:03:71:4f:3f:4c:c0:7d:86:7d:6c:7d:f2:
f7:b9:46:99:6b:4a:21:00:45:2d:c0:c3:c7:f2:a7:
b9:4f:ea:63:41:ff:0a:f0:14:44:c4:07:4f:a4:9c:
6b:61:a1:ec:16:f2:a8:d1:e0:a1:74:6f:2c:a7:57:
5e:75:a8:fe:4a:c3:52:c5:33:3c:0f:21:43:1e:01:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:27:25:D5:19:B4:5F:8B:F4:08:07:DA:BA:D5:F3:46:4F:DC:C3
X509v3 Authority Key Identifier:
keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:3e:d3:0c:52:cd:0e:47:c7:92:71:4f:0a:60:01:cf:0c:
eb:6d:b4:d3:c0:39:66:c0:be:b2:9d:50:3d:bc:dc:58:3d:a1:
8b:be:ba:53:ce:96:41:95:79:90:78:28:20:e3:03:97:1e:11:
87:02:a5:39:b9:a5:6e:ff:67:ba:89:e5:d1:80:c9:51:92:7b:
4a:fb:e3:85:31:ba:1b:8b:5f:bb:8a:25:7c:f4:3d:9a:1a:20:
16:b9:6f:51:0a:db:57:27:36:68:80:93:28:36:89:de:00:f2:
ef:b8:92:81:a8:60:9a:e0:15:79:f2:6a:51:79:c8:c1:dd:f5:
c9:4c:f9:f3:f7:93:b6:24:13:01:76:e8:b4:6a:02:19:f3:c0:
47:20:5d:95:5c:c9:3d:3a:af:b6:f9:33:41:a5:67:94:52:a7:
10:56:c1:5d:08:05:87:d6:0f:24:b3:1d:a6:a7:ed:1b:58:ce:
48:1c:7e:58:68:3f:6c:ad:be:0e:23:dc:8d:6f:ee:ee:3d:42:
5c:9e:38:8e:9d:0b:76:79:c1:90:c8:0a:52:42:4e:31:6b:d0:
25:f6:d5:2f:e6:f6:e1:9b:2a:99:2d:b0:d1:bd:35:43:92:d4:
f4:35:e3:6f:fb:32:4d:02:3f:e0:91:dc:01:b3:1e:72:df:73:
b1:1e:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:19 2026 by rpki-client