
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json)
Hash identifier: HULBh8NoVd20jagUvdMV41KMmrL6X2CLpDq3Gecwsgc=
Subject key identifier: E1:89:8D:4F:95:5C:28:C3:14:D4:59:04:C9:25:58:AD:0D:81:04:96
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial: 0408
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
Manifest number: 03DD
Signing time: Fri 17 Apr 2026 00:34:02 +0000
Manifest this update: Fri 17 Apr 2026 00:34:01 +0000
Manifest next update: Fri 24 Apr 2026 00:34:01 +0000
Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: RRVa4IFId9sfT7AqGDb80HgQZ03BH9+jpCOnqKzzD2I=)
2: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: +WUBdF5XyO/0Wp7ZryTUO15zQkPiK5sz2M+4YcvCha0=)
3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: 5zeqwGlKCUkKFFb5d6eyW+n3zsHpsql0ypZ0tDe7Yy4=)
4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: XsJlFtW7AMF8YKuGGdCfnCgWvsYV7NaDNJQq5ucrcwQ=)
5: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: KfF+sdY15wScqVXeMPonUzAOtF219x8HRR+57slUS1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Validity
Not Before: Apr 17 00:34:01 2026 GMT
Not After : Apr 24 00:34:01 2026 GMT
Subject: CN=69e17ff9-4681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:73:e2:0e:38:9c:ed:28:f6:63:f6:57:6b:
d9:34:ab:88:a9:0a:21:c7:b0:69:99:78:c5:69:06:
1b:51:02:3e:ac:1f:8d:8f:92:80:cb:c0:31:ab:54:
f3:65:7d:99:a2:c9:ac:be:a6:94:4d:26:32:13:20:
72:52:60:ea:7b:85:7d:a6:28:df:84:04:c0:f7:eb:
02:bc:a4:ce:ab:bc:a1:78:e9:e1:f1:97:1e:3d:81:
03:be:5e:7b:a5:46:a2:58:64:85:73:14:34:6a:f8:
c0:4a:35:39:0a:d5:64:33:65:96:90:e4:56:42:61:
4f:ab:d6:a6:e9:29:fb:88:93:0f:9c:c9:b9:a8:56:
e3:88:f4:8e:17:b3:90:e2:82:c2:3e:89:b9:ab:e6:
44:a0:14:8f:3a:99:01:a2:00:a5:84:3a:8f:9d:fc:
9d:a2:7c:3c:67:c3:2f:19:c7:6f:f6:cc:a0:cb:21:
58:4d:5b:b8:7b:35:07:b4:33:0b:55:52:1a:c7:87:
c2:ad:49:ff:76:23:f9:b8:ef:e3:97:7a:a5:f7:6e:
ba:35:89:ad:3c:20:58:ac:c4:68:3e:2b:53:fa:84:
f6:20:f1:3a:1e:ac:7f:87:39:74:bc:b1:8d:91:1e:
62:fe:18:ba:48:f1:21:81:00:13:6b:dc:60:0d:6d:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:8D:4F:95:5C:28:C3:14:D4:59:04:C9:25:58:AD:0D:81:04:96
X509v3 Authority Key Identifier:
keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:74:41:7a:5c:f2:9f:c6:ac:e5:ee:d4:39:78:2a:2f:45:
bd:37:86:a7:c5:53:15:28:75:e7:30:d1:d6:d4:6a:94:b6:7f:
34:8e:f2:6a:92:89:bb:43:95:b7:68:59:d9:c1:6d:7c:e7:d3:
a5:75:a6:04:18:5a:a7:5c:bc:50:14:1d:f8:ab:2f:e4:bb:f2:
28:ac:37:f3:67:cb:8e:0e:3d:30:e9:6f:cd:de:83:b9:ce:c3:
68:5b:a5:9f:e0:c6:bd:af:88:c2:0b:24:c9:db:c5:03:41:47:
d9:4b:12:36:fc:5f:6b:d2:22:23:0b:9b:54:91:97:1c:31:73:
c2:7a:1b:18:44:47:0a:8a:0b:91:8e:06:02:a0:fe:81:1a:db:
78:24:80:b2:62:49:5e:3e:97:63:92:87:c7:f7:9d:85:dc:69:
f1:53:1a:ce:80:2e:4d:24:e0:9e:c6:8c:c1:a1:d2:49:08:fc:
f3:36:d3:bf:15:c6:c7:e1:10:b4:b5:20:43:36:39:78:26:1a:
2a:d1:f5:f7:82:06:44:79:16:21:62:8f:9c:72:4a:65:69:ea:
10:35:38:1d:55:50:1f:99:43:11:c9:6f:2e:58:da:15:58:d9:
4c:5c:f4:19:2b:96:fb:a4:dc:2e:7d:ba:a2:d4:50:f2:f1:79:
c3:9f:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:40 2026 by rpki-client