
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: DjUT5eQVoDxkKXYmoEkSF7YKFl1ChoUtTOH/IK87b0A=
Subject key identifier: D2:55:04:E7:46:F5:8D:EE:6D:34:CB:23:58:A8:4D:49:9A:BB:66:2C
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 0210
Signing time: Wed 15 Apr 2026 02:45:06 +0000
Manifest this update: Wed 15 Apr 2026 02:45:06 +0000
Manifest next update: Wed 22 Apr 2026 02:45:06 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: i+LyM+m/MdnKuFrEuB4GbvzAciLb6ls8CVQHTvEkk3A=)
2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 02:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Apr 15 02:45:06 2026 GMT
Not After : Apr 22 02:45:06 2026 GMT
Subject: CN=69defbb2-b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:50:35:3d:89:34:e5:c1:6d:aa:8b:8e:29:
46:e5:76:d9:45:bb:23:5a:27:fa:06:1b:48:d7:97:
7a:eb:14:04:74:45:f1:5b:bc:e8:ee:c7:52:11:d8:
45:6b:80:ef:2f:d0:e2:73:0f:1c:cc:c2:fa:25:93:
df:26:8f:db:38:7d:b5:10:c3:70:68:fb:be:f3:25:
7b:30:7b:88:9e:ad:7f:32:a3:16:50:20:c5:85:53:
67:33:80:0d:60:43:1f:92:ac:c1:50:59:9a:9e:45:
0b:77:84:aa:ab:de:7e:ee:a8:2c:7f:01:38:1f:cc:
f4:80:00:10:49:43:3b:2d:6e:14:2a:0f:5e:bb:11:
b9:bd:f3:4f:39:a5:c8:8e:50:61:ab:7f:cf:98:33:
5f:7a:af:e4:9b:a6:7b:2f:48:96:12:d6:95:d8:f9:
95:21:3c:0f:39:d2:9a:5d:88:0d:a7:2f:db:e9:ca:
83:b3:b1:6c:b9:20:75:74:d9:a6:28:b1:90:e2:a3:
f5:dc:8e:16:44:c6:40:9a:e2:b5:f8:ae:25:b7:d2:
bf:4d:53:fb:58:9c:ba:1d:c6:54:d5:34:75:48:37:
d5:eb:0b:51:d5:65:1a:71:1b:77:ca:05:b8:b9:fd:
b7:3f:65:87:9d:6c:4c:e4:32:54:68:db:81:55:d9:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:04:E7:46:F5:8D:EE:6D:34:CB:23:58:A8:4D:49:9A:BB:66:2C
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:18:cf:7f:5f:b7:15:e1:f4:d4:2b:ba:6f:2a:81:03:81:7d:
0a:39:f2:64:d3:d5:80:2c:9b:3d:03:74:4a:bf:ba:cb:0c:a5:
b5:47:dd:52:38:1d:33:2c:e8:fe:bf:24:30:05:7c:7d:a7:21:
82:04:bc:d0:9e:b4:c7:1f:66:23:e0:b6:73:d9:89:64:6f:33:
e1:ee:03:f4:ff:4d:9a:f3:d3:85:6b:42:46:2d:8b:d9:83:0d:
99:9f:40:72:47:a5:12:f1:4d:bf:8b:e1:20:2f:e3:03:70:ea:
80:42:e4:e1:f6:ef:c0:72:a8:32:66:b9:c3:71:9d:d5:59:9a:
c7:88:61:c5:5f:2f:33:eb:29:3d:e8:b9:e7:ab:53:76:8b:69:
fb:09:a5:bf:f9:68:8e:8b:0b:f8:b8:82:a8:f7:46:78:0c:37:
a6:42:b8:e0:de:90:19:e2:e2:1d:fa:87:f5:3e:24:d6:fb:4f:
02:7b:44:5f:cb:c9:18:b6:9f:e8:d5:2d:e0:56:60:38:02:b2:
14:34:08:86:c1:e9:68:1f:17:36:86:f0:86:ee:24:c3:93:96:
2b:a2:6a:36:6f:c6:e6:00:b0:01:b9:0b:78:f1:36:eb:84:c5:
84:ea:93:62:e6:7b:33:e7:0b:98:3b:3c:08:e7:78:72:84:33:
27:82:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:39 2026 by rpki-client