
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier: RS9NU5C4YKUiQGyYuTktpU/2ymmmt8dHDHgDCV4qzSE=
Subject key identifier: B4:FA:13:85:ED:65:DE:AE:7B:CD:41:1C:48:02:17:AA:82:09:75:F8
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number: 05C8
Signing time: Thu 16 Apr 2026 23:03:09 +0000
Manifest this update: Thu 16 Apr 2026 23:03:09 +0000
Manifest next update: Thu 23 Apr 2026 23:03:09 +0000
Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: aljXZTZESzW5UgRoKyMrxLvwHSdhs7UoH0Z6AR+obdY=)
2: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=)
3: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=)
4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Apr 16 23:03:09 2026 GMT
Not After : Apr 23 23:03:09 2026 GMT
Subject: CN=69e16aad-30ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:33:93:68:08:58:30:ec:5d:3f:64:3f:66:
79:50:6f:bd:d2:e0:80:bb:92:34:79:ab:8f:2a:f4:
44:23:37:ab:76:04:d8:f5:51:17:5f:b1:e3:a7:85:
53:6d:84:34:36:a6:29:04:99:4f:2f:f5:4f:68:7a:
5a:db:8f:dd:3d:96:41:6e:71:99:3e:f8:bb:50:a7:
04:93:ba:48:2e:b2:d0:3b:c8:8a:ab:90:06:75:d6:
7b:7b:e7:bd:78:7a:71:f4:36:81:7b:33:24:0d:b3:
38:68:22:a0:72:e2:2a:1b:2b:41:3a:86:92:0b:55:
5e:9f:da:b2:b0:5a:65:87:cc:19:9e:d1:8a:ac:c0:
d6:9f:2b:81:25:e7:f7:47:cd:af:c3:f3:3a:b2:07:
18:73:7e:43:5c:22:14:94:94:7e:1f:15:7e:e0:4d:
9e:76:9c:36:aa:2d:db:58:8c:92:a0:c0:cd:f8:f1:
78:15:45:33:8b:51:28:92:80:47:ae:2a:5a:06:b3:
59:24:aa:35:5a:a2:00:b5:1b:0b:87:03:79:ef:ae:
56:95:dd:dd:e5:0b:37:94:92:3d:dc:45:71:e9:83:
2f:76:3b:98:7f:b8:60:25:5b:02:a5:4f:30:6c:f1:
6e:ba:2a:01:96:05:b7:8b:5e:ff:84:c0:4b:9f:f7:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:13:85:ED:65:DE:AE:7B:CD:41:1C:48:02:17:AA:82:09:75:F8
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:41:58:af:d1:6a:a0:0c:12:65:80:a4:92:a0:64:12:bb:
c1:3f:7b:87:ea:36:e5:c4:e0:b6:61:e4:29:4e:97:c0:d7:ab:
f7:43:be:03:d7:5c:da:af:84:de:00:cf:95:c9:44:a3:7a:d7:
71:69:d7:15:fb:ac:e5:bf:3c:b4:1c:5c:32:ea:7a:ed:2b:23:
f9:b4:c5:71:02:b6:44:40:7b:4f:9e:71:1c:f4:57:8f:05:59:
9c:30:59:be:0d:c4:23:15:08:e4:96:8f:1a:64:ea:94:5a:c9:
94:b1:c9:43:0e:08:e2:c8:b6:a6:5e:3f:f9:21:19:ae:4b:93:
de:f8:22:e2:9b:8e:09:c4:f8:59:d9:4b:15:34:f4:94:c6:d0:
ac:6e:10:6e:a6:95:bd:e6:c1:8b:03:9e:d5:26:32:e2:ae:fd:
c4:7a:17:e5:c3:0b:90:6a:5b:58:8e:b3:d5:1b:56:b0:96:14:
f6:a3:de:85:95:39:61:23:13:b2:a3:e9:b5:7d:ad:22:72:15:
07:b2:f2:29:a4:ae:8b:4d:ab:28:26:10:d2:47:14:b0:3d:00:
50:97:58:43:81:f0:24:b2:02:68:72:a4:37:2f:62:cc:2e:1e:
0a:db:ec:98:39:46:7a:03:33:81:11:83:2b:be:a7:80:86:44:
82:da:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:59 2026 by rpki-client