
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier: iSLCIAeiKzpucI/zfAj0FNJ1F/LVQ+hHzjMA4ePR5kY=
Subject key identifier: 3F:E4:56:12:E2:5D:CF:59:90:27:ED:45:33:9E:F3:B0:0C:A4:3A:EF
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number: F7
Signing time: Sun 19 Apr 2026 05:55:21 +0000
Manifest this update: Sun 19 Apr 2026 05:55:21 +0000
Manifest next update: Sun 26 Apr 2026 05:55:21 +0000
Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: iOb2092o074RGlBOPYxIMh7g9MgJswwaB71mvivm6r0=)
2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Validity
Not Before: Apr 19 05:55:21 2026 GMT
Not After : Apr 26 05:55:21 2026 GMT
Subject: CN=69e46e49-437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:76:e9:a1:a2:bf:fe:30:8d:50:a0:b6:71:
7a:9a:96:b8:18:f6:54:b0:08:f7:59:4c:63:3b:af:
b6:06:7b:8c:07:3b:03:53:b5:57:ce:ee:26:c1:9a:
82:51:b0:4e:b5:f2:22:14:79:ae:44:b9:2a:89:ce:
66:af:ac:40:51:8c:5f:e2:03:96:0d:25:22:65:58:
e8:fb:56:6d:2c:4f:f2:bf:83:c5:e1:7d:51:f6:e8:
d1:7a:50:fb:c0:66:72:77:07:4b:49:75:d6:da:15:
e2:f7:63:66:bc:62:ba:b7:a9:90:5a:07:0a:23:cd:
b8:69:d2:e5:ae:cf:d1:03:dc:75:ad:68:8a:56:e4:
ba:b0:70:01:7e:32:94:3a:e9:ef:7d:1c:69:50:7e:
0b:6e:d8:f4:02:5e:3c:d7:f4:05:bb:e1:be:ff:79:
0c:8e:3e:2f:2b:a3:f2:40:cc:d4:ba:ba:bb:48:76:
45:ab:f9:de:c9:e1:15:95:27:42:fc:59:f7:ba:db:
d7:0b:1c:a4:e3:13:d3:33:58:b3:0f:0b:cc:e5:5b:
94:be:62:f3:37:8b:ae:4a:5b:3b:36:cf:59:84:bc:
b4:2a:6c:be:7b:a8:5a:e4:0e:11:20:0d:b7:c5:ee:
4e:43:60:72:c8:97:28:8c:41:cc:d5:d4:24:f5:38:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:56:12:E2:5D:CF:59:90:27:ED:45:33:9E:F3:B0:0C:A4:3A:EF
X509v3 Authority Key Identifier:
keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:62:1d:50:62:55:3f:d2:70:19:04:05:24:46:b7:fc:7f:37:
c2:e1:f9:59:50:75:de:81:a3:60:7a:4a:74:8d:4d:d2:79:8a:
53:49:0b:64:4d:97:3b:ea:3e:33:3f:b2:63:5e:93:eb:68:a6:
20:76:33:2e:56:6f:31:1d:4a:5c:9e:4e:ae:63:fe:7d:85:12:
88:f1:49:56:8c:7b:60:f3:02:e0:c0:31:29:29:d8:61:8f:27:
65:2a:b3:5c:d4:4e:f4:dd:19:65:30:24:6c:e4:e6:91:c7:b1:
27:ee:8a:4e:d7:a6:6a:bf:73:a3:d5:7c:0c:80:36:7e:1b:f2:
a5:24:9c:d1:3d:df:8d:0a:df:fb:be:e4:f7:a0:b0:52:49:f5:
bd:65:88:6e:69:7d:f9:b4:47:e9:8f:49:53:c1:aa:56:d6:75:
f9:72:dd:70:ea:82:1f:1e:8a:90:67:26:91:a7:9a:4b:8f:f5:
66:ad:c4:af:90:3e:62:dd:66:fc:05:40:c6:a3:f1:1c:54:e3:
aa:9b:0d:40:a0:27:6a:85:81:38:38:51:46:06:6b:33:e2:64:
db:f5:37:08:e0:bc:e2:8f:8e:0f:6d:ed:ed:b4:a0:bd:d0:e3:
1d:82:68:f7:27:5a:73:3f:a1:6f:95:63:e4:07:80:75:a4:3a:
27:47:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:42 2026 by rpki-client