
$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
File: UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json)
Hash identifier: 39TlRsMn2kgncktVzVjQ3JsGGqAWVkm+yivpGUCUdbQ=
Subject key identifier: 9B:FE:39:7F:3D:E1:7F:BE:B3:E1:4E:7B:BB:44:08:17:1E:35:8F:13
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
Manifest number: 01E8
Signing time: Sun 19 Apr 2026 03:05:43 +0000
Manifest this update: Sun 19 Apr 2026 03:05:42 +0000
Manifest next update: Sun 26 Apr 2026 03:05:42 +0000
Files and hashes: 1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: MfzWmZIow1hbRYmp6MDGB9TqVnzVc40hZX7XTYLGESU=)
2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 9NOvh4xlPVRSfSWTuNbA/nSCtcSOmekA1WPpJANxarM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Validity
Not Before: Apr 19 03:05:42 2026 GMT
Not After : Apr 26 03:05:42 2026 GMT
Subject: CN=69e44686-6030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:4f:07:b7:52:63:80:b5:ff:01:4e:f8:57:
a5:24:29:8a:7f:90:66:f1:95:2a:0a:a2:cc:b1:5c:
de:48:db:eb:87:4f:fb:1f:d1:11:af:eb:f0:94:9d:
d4:54:ae:61:bc:52:1d:3b:8d:3c:22:82:87:4d:37:
7a:2d:71:12:60:33:3a:ca:21:5f:b3:ab:dc:e5:79:
84:52:8c:c9:dd:32:4c:9a:4b:03:00:ae:70:57:b3:
d4:57:f9:cf:dc:d1:0c:ab:6c:55:db:f3:96:78:73:
ec:f4:b3:b7:f7:37:b3:d2:81:44:64:b5:eb:8d:dc:
8b:6f:19:81:d3:b7:9e:33:2d:de:19:90:71:38:9c:
d4:59:da:50:59:5d:bb:2d:19:1e:2b:09:c2:d4:9a:
8c:9e:8f:c6:23:87:13:e8:d6:a3:49:e8:ff:1b:39:
48:47:d3:56:c5:cb:3c:cf:07:94:c1:ea:fa:10:9d:
40:06:f1:f2:c9:88:b3:6b:98:b0:d9:22:38:9f:ee:
14:f9:e9:ba:11:f4:55:cf:d4:6e:b4:1a:bf:42:7e:
fb:f6:c7:5c:bf:e1:5c:a6:56:26:a5:6b:0c:ab:2f:
b6:62:50:af:24:19:26:63:ca:37:0a:24:6b:c3:b0:
ab:e5:80:07:7f:ee:58:aa:7b:2e:b6:23:3a:09:4e:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:39:7F:3D:E1:7F:BE:B3:E1:4E:7B:BB:44:08:17:1E:35:8F:13
X509v3 Authority Key Identifier:
keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:82:b9:ba:fd:7b:d5:91:76:e8:04:1d:93:af:43:8b:9f:
3d:9a:5c:ba:36:ab:fe:98:e7:0b:93:c4:ea:df:39:6f:58:59:
8b:fc:97:93:f1:da:a4:55:98:dc:2e:27:f6:16:64:4d:db:1a:
ec:91:6a:5f:37:d9:bf:14:d6:53:4d:45:71:0d:50:90:41:8a:
d9:b7:31:42:ed:8d:82:9c:50:b1:8f:49:71:4c:1e:c2:a5:62:
63:ef:70:e6:84:40:f2:d4:64:bb:1c:52:0a:d8:80:ec:4f:16:
c2:21:18:f9:29:ce:75:0f:96:9d:41:2f:47:e6:19:e7:e7:5c:
6f:ad:a1:c8:02:6a:4b:eb:e3:22:ba:d1:20:6d:6c:f3:10:d4:
bb:81:29:27:27:83:9c:5a:47:1a:41:74:78:97:e3:9f:52:3e:
2b:d9:12:1f:7d:49:e9:fe:27:3f:68:35:52:0a:bc:f0:93:34:
f1:2a:02:19:89:21:78:0a:b3:0b:c0:3f:1f:c9:ff:19:00:31:
eb:72:82:1f:ff:48:21:67:d3:9b:4e:de:70:a7:a9:78:8f:a1:
a8:6d:fa:a1:3d:c4:cb:73:59:e7:31:aa:0d:cb:dd:47:ec:f2:
ba:6e:f5:c7:d6:39:77:96:0b:33:e5:8b:fc:76:c5:7e:16:6c:
96:63:1b:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjYwNDE5MDMwNTQyWhcNMjYwNDI2MDMwNTQyWjAYMRYwFAYD
VQQDEw02OWU0NDY4Ni02MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnpPB7dSY4C1/wFO+FelJCmKf5Bm8ZUqCqLMsVzeSNvrh0/7H9ERr+vwlJ3U
VK5hvFIdO408IoKHTTd6LXESYDM6yiFfs6vc5XmEUozJ3TJMmksDAK5wV7PUV/nP
3NEMq2xV2/OWeHPs9LO39zez0oFEZLXrjdyLbxmB07eeMy3eGZBxOJzUWdpQWV27
LRkeKwnC1JqMno/GI4cT6NajSej/GzlIR9NWxcs8zweUwer6EJ1ABvHyyYiza5iw
2SI4n+4U+em6EfRVz9RutBq/Qn779sdcv+FcplYmpWsMqy+2YlCvJBkmY8o3CiRr
w7Cr5YAHf+5YqnsutiM6CU70wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJv+OX89
4X++s+FOe7tECBceNY8TMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1
MjI2VExxaUdpZHdRMWN6SzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVTSCubr9e9WRdugEHZOvQ4ufPZpcujar/pjnC5PE6t85b1hZi/yXk/HapFWY
3C4n9hZkTdsa7JFqXzfZvxTWU01FcQ1QkEGK2bcxQu2NgpxQsY9JcUwewqViY+9w
5oRA8tRkuxxSCtiA7E8WwiEY+SnOdQ+WnUEvR+YZ5+dcb62hyAJqS+vjIrrRIG1s
8xDUu4EpJyeDnFpHGkF0eJfjn1I+K9kSH31J6f4nP2g1Ugq88JM08SoCGYkheAqz
C8A/H8n/GQAx63KCH/9IIWfTm07ecKepeI+hqG36oT3Ey3NZ5zGqDcvdR+zyum71
x9Y5d5YLM+WL/HbFfhZslmMb1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:54 2026 by rpki-client