
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File: ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier: 2dfEGCm4gQ66UmPhO7gDHxdFhPRAXrUdDoP3GrcjE0E=
Subject key identifier: 88:0A:8B:5B:53:71:D0:D8:C5:3F:FC:C3:4F:48:6C:C5:F9:4C:44:E9
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number: 0CE3
Signing time: Thu 16 Apr 2026 18:13:20 +0000
Manifest this update: Thu 16 Apr 2026 18:13:19 +0000
Manifest next update: Thu 23 Apr 2026 18:13:19 +0000
Files and hashes: 1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: KAZprCQXJl6MwJPvJ4wNfgZ74gB3345+tYPQuYVofKY=)
2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: GoD97528jtePCu2xsNtV1pmBZnT8NxMWHUx8lRVvZMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Validity
Not Before: Apr 16 18:13:19 2026 GMT
Not After : Apr 23 18:13:19 2026 GMT
Subject: CN=69e126c0-1da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:5b:42:1d:78:41:aa:6f:5d:bb:9d:a0:b0:
a0:b0:9c:b9:ad:4c:0f:12:7e:21:c7:2b:01:00:80:
38:63:18:46:3a:6c:52:cd:b9:54:c8:06:df:53:8b:
e1:09:c9:f2:74:58:4a:6f:27:aa:ce:a6:49:52:05:
b8:21:51:87:21:70:02:c8:a9:e1:42:8a:88:9a:42:
c6:45:5c:14:b1:c1:c9:74:4d:52:42:f0:0d:ed:77:
27:06:90:fc:1d:53:31:ec:8d:c8:b6:8a:b3:b5:7b:
94:46:63:91:d1:a3:8a:b6:d0:7f:63:3b:d5:4c:e5:
cf:06:05:81:90:22:03:8a:b6:b0:74:ba:6b:83:e0:
8d:43:80:dc:09:27:12:03:e1:c5:8d:b9:e7:b7:23:
5b:0d:04:6e:8d:ca:dc:e0:b0:c1:e4:fd:96:38:07:
ce:ef:87:8a:d0:1a:14:93:d7:f0:51:d2:84:05:38:
3c:2f:9d:74:d3:8b:26:ff:8e:76:68:4d:0a:4d:44:
8b:67:0e:76:70:fd:b3:bf:f6:e5:9d:a8:c4:4f:c5:
18:57:25:a9:8c:ba:d9:b6:bf:ca:46:70:4d:28:bf:
6d:d7:d4:1a:7d:dc:0a:b1:f8:0b:ab:ff:85:ea:8d:
7f:36:e4:2a:06:f2:5f:cc:67:b5:49:66:b3:8a:6b:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:8B:5B:53:71:D0:D8:C5:3F:FC:C3:4F:48:6C:C5:F9:4C:44:E9
X509v3 Authority Key Identifier:
keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2f:43:ba:35:18:79:dc:09:79:82:31:f1:73:8b:c3:99:8a:
00:ed:43:51:be:d5:9f:11:ce:39:51:54:78:0a:ef:88:63:e7:
d3:c5:8c:c1:d8:f1:78:42:2e:01:70:fb:39:fa:5e:1c:6a:63:
48:81:5f:d2:73:3d:49:a8:e1:da:3b:66:1c:cd:f4:64:66:61:
de:b7:2b:ed:89:1d:93:21:3e:86:b2:a8:d6:47:b6:df:dd:da:
e9:e4:6f:e3:81:28:e6:b0:de:62:d4:1a:0e:74:29:20:54:9a:
af:5b:3e:8d:6f:a5:ff:04:48:c2:43:1b:cf:04:08:6c:6d:93:
9c:f5:23:9e:94:78:ae:f0:55:bb:08:bf:63:6b:a9:57:a7:97:
7e:e4:b6:9d:01:44:91:2c:13:24:07:0f:42:1b:ef:05:a0:ad:
31:7b:b9:51:f4:53:00:89:68:60:1e:09:60:a7:3d:a0:19:1c:
db:b8:17:2f:17:5a:c2:ee:09:3a:b2:7f:0b:cb:27:77:8d:3e:
4b:1a:af:83:af:4b:d6:29:fc:2d:24:e6:98:c0:94:ab:04:ca:
82:7f:c4:a8:fd:04:49:fe:f4:f3:33:81:11:f4:69:44:26:6e:
68:1c:20:fd:bf:4b:9a:89:b8:4f:22:00:4a:63:c0:bc:e3:59:
34:18:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:32 2026 by rpki-client