
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier: mvRq4X27Eb+lsruQSnmTlSO2PaTqeBHaWZUJKKaondc=
Subject key identifier: 69:4F:BE:23:17:7C:72:87:98:83:90:26:37:9F:BE:7D:42:89:7A:F4
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial: 0B58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number: 1467
Signing time: Thu 16 Apr 2026 19:06:05 +0000
Manifest this update: Thu 16 Apr 2026 19:06:04 +0000
Manifest next update: Thu 23 Apr 2026 19:06:04 +0000
Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: Bg3WEdqORtmnDhwImHNucyBM/sjYJ+oey8ypDr8KvM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Validity
Not Before: Apr 16 19:06:04 2026 GMT
Not After : Apr 23 19:06:04 2026 GMT
Subject: CN=69e1331d-5035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:49:fa:cd:03:61:33:88:7a:a1:38:e3:ce:
ef:8f:20:5e:6c:09:36:dd:f7:8c:12:26:ae:04:19:
10:ab:2b:0f:1b:40:07:59:af:b8:85:38:36:93:7e:
91:1a:55:10:ed:32:0e:7b:cc:85:a0:01:42:5d:9b:
63:d0:de:7a:d5:32:a9:8d:ed:ac:25:a9:36:ff:c8:
7f:e5:f9:22:7e:65:c5:95:82:9c:4c:fc:ce:11:a6:
69:af:a1:a9:d9:97:a2:f5:58:c5:e3:fd:7e:da:55:
9e:a8:58:b7:01:4e:92:7c:5a:83:d6:f4:7a:3a:43:
11:30:ce:32:04:e1:cb:b9:a9:19:86:a1:64:f0:76:
56:0c:40:58:f8:5c:c2:0a:4e:c6:eb:5f:de:33:70:
52:1d:a9:03:c2:20:82:28:f6:38:61:b0:01:99:ce:
30:62:c7:7a:68:35:13:42:b6:a4:2e:96:9b:fc:a2:
cf:36:92:9e:86:e9:51:0c:35:7a:1a:51:db:2a:a4:
04:78:2c:1d:ff:50:db:b4:1d:b8:4c:78:56:e1:6c:
9a:a4:5b:0e:9d:7b:5c:44:b8:0a:90:72:ca:62:fd:
84:ed:d0:9d:5d:3d:9d:af:38:9b:f9:4b:a8:d4:eb:
10:89:09:c7:90:ec:ea:70:85:de:70:89:30:26:05:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:BE:23:17:7C:72:87:98:83:90:26:37:9F:BE:7D:42:89:7A:F4
X509v3 Authority Key Identifier:
keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:2c:48:f7:e7:4e:28:e7:58:d9:9f:e0:3f:f5:c2:d0:2d:
b6:ef:e0:62:2d:9c:da:10:47:d7:4b:35:1a:87:12:9c:76:b3:
5e:fa:05:a7:9b:c8:eb:34:59:0d:74:52:92:20:d1:e3:9a:43:
89:a1:88:b3:e2:da:6a:c0:0e:b3:7a:a5:14:93:f2:c3:1e:b2:
60:3b:9f:1a:4c:91:e4:41:65:3f:b0:9e:ff:51:d4:bf:1d:16:
5d:7c:4d:d2:68:7e:f4:97:c5:a7:9e:cb:6b:4d:5f:20:1e:56:
21:42:ce:6c:70:bb:8b:80:59:f9:a3:3f:dd:d9:c9:45:de:71:
2e:23:4c:7b:3d:b0:d8:fe:5b:fc:fd:65:c9:8c:ab:e1:48:85:
4b:94:83:8e:07:ec:10:65:f5:cc:84:f6:9e:aa:44:dd:58:dc:
82:51:f0:98:38:fc:1f:c1:ee:c5:bd:26:0b:40:20:ca:18:60:
2d:d2:03:ab:78:b7:bb:67:01:5f:d5:c6:87:da:19:7f:f3:e7:
4f:e1:55:15:41:86:54:de:49:90:0b:9a:8b:bf:ae:c8:16:19:
7a:8d:69:1a:93:a5:52:40:a0:af:85:55:e4:63:3c:72:55:80:
d7:c7:a4:e9:4b:f7:d2:a2:b6:cb:be:2a:73:a3:44:b1:04:52:
6f:14:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:10 2026 by rpki-client