
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: epWG7LGDGgS03j6XRL3dIlwrVtMD3QxFNgEi2eaGVCc=
Subject key identifier: 8A:27:04:07:60:6F:3D:B2:A6:E9:4B:EB:3B:C1:33:81:D8:26:86:A4
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 01D5
Signing time: Fri 17 Apr 2026 03:18:44 +0000
Manifest this update: Fri 17 Apr 2026 03:18:44 +0000
Manifest next update: Fri 24 Apr 2026 03:18:44 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: e6vBGT3qDlufS24xK0oe5hGCpUvARYrX9s7oJZGVj6A=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uq1kihQpsHqPtfnJKhqjRrtt4j4NKFgy3qB8nhVLYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: Apr 17 03:18:44 2026 GMT
Not After : Apr 24 03:18:44 2026 GMT
Subject: CN=69e1a694-b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:5f:31:85:9e:f4:1d:aa:2b:f0:98:09:3a:
e4:a5:3a:f0:3a:d1:c0:30:86:92:ce:3c:a9:bf:a4:
3e:c7:6b:fc:56:1c:61:43:79:e3:f9:3b:34:0a:32:
f4:c4:af:7d:9c:03:33:1a:76:79:10:87:fb:55:47:
e1:8d:4a:e1:3f:5d:99:d7:bb:46:7d:a4:73:80:d7:
ee:56:db:20:54:80:e3:b5:41:09:bd:00:2d:0a:3b:
72:39:ce:21:9c:87:cc:0b:41:6e:5e:63:52:18:df:
4c:3c:fb:bf:0e:05:63:d6:b6:20:d7:46:9f:99:cc:
4d:87:dd:4b:22:56:9f:cf:5f:bb:e3:4b:5d:ce:12:
f2:17:0d:ea:f8:50:85:86:c9:e5:06:33:64:e8:95:
7b:08:20:cf:4a:b8:48:31:97:54:20:9f:00:2e:53:
0d:aa:3c:db:15:c3:66:15:76:a6:d2:88:a4:c4:35:
5d:a7:16:b7:e5:10:66:59:98:93:cb:c2:7f:69:74:
2d:ff:f9:8f:bb:70:13:83:c6:8e:48:c0:81:95:68:
c5:8c:16:32:32:30:f6:9a:34:fe:b5:33:c3:a7:db:
ce:02:28:11:f3:dc:06:95:72:40:cd:52:ab:50:fd:
03:5c:82:53:65:d9:17:4d:c2:f3:62:ce:28:a2:e0:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:04:07:60:6F:3D:B2:A6:E9:4B:EB:3B:C1:33:81:D8:26:86:A4
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:34:d7:01:ba:07:70:59:7b:47:de:68:66:51:ce:79:db:
03:6f:0c:dc:ad:42:17:4d:d3:9f:53:4f:a5:0b:24:52:67:d9:
37:91:e7:48:da:52:38:6f:b9:d4:c9:fc:a4:4a:14:5d:2c:3f:
49:db:db:f7:15:05:c7:94:e4:1f:7e:55:5c:21:a3:88:c2:4b:
4a:23:8f:b8:ec:cb:c9:fc:5f:29:21:07:00:30:35:38:2a:e9:
5d:a6:93:cf:12:0c:05:67:07:e3:53:0a:56:51:9e:d9:c7:6d:
b2:58:3b:cc:dc:9f:2e:c7:4b:52:ae:a1:8e:68:71:51:5e:8d:
a9:a9:21:a3:f0:e9:73:08:78:09:b5:b8:8f:93:7d:e1:c3:e8:
67:9c:99:be:78:b2:0f:7e:6b:1c:50:dd:7b:bc:9c:ea:11:2f:
30:da:89:b1:7c:5c:1e:e4:db:68:8c:54:4e:f4:9a:a8:b4:25:
34:ba:15:e2:4f:80:09:f3:65:2d:f6:dc:5b:59:62:e1:f8:97:
c0:25:c4:35:9c:05:e2:b4:bc:36:f5:aa:8f:b6:c7:bd:53:5f:
d2:d2:17:d3:58:fd:f1:65:c7:92:69:8e:50:27:25:c1:9c:b5:
f4:be:c2:cb:13:94:78:4f:9e:99:52:73:20:e4:1c:db:f5:be:
13:63:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:59 2026 by rpki-client