
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier: jIQ4ladZ0EwGI47gOgDv3TXsZdtNfrm1RMJbAPJ6YfY=
Subject key identifier: 57:B3:17:EE:00:C4:BD:A1:36:48:0E:ED:A0:CD:43:22:E0:C1:82:98
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial: 0CEF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number: 0CDF
Signing time: Thu 16 Apr 2026 18:16:56 +0000
Manifest this update: Thu 16 Apr 2026 18:16:55 +0000
Manifest next update: Thu 23 Apr 2026 18:16:55 +0000
Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: Vknl4ApkcwTF0iac2Dg8E6oQW3EGxkycww84UYBleb4=)
2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: 2fjs3YMIAVa6BF/a2VEcOFGf36xSPqP+aDoUX8wEwvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Validity
Not Before: Apr 16 18:16:55 2026 GMT
Not After : Apr 23 18:16:55 2026 GMT
Subject: CN=69e12797-dba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:2b:5b:b2:ee:70:99:a8:a6:28:81:1c:ed:
2f:fe:1f:c4:97:0a:1f:ec:7b:67:f5:1c:15:b8:0b:
bf:02:77:33:d4:5b:04:b6:e5:56:42:70:3d:d5:ae:
aa:b4:b1:b2:ee:1c:11:96:78:42:39:9b:25:dc:75:
ab:f3:a1:a5:e9:dd:8c:b0:79:8b:ca:35:62:30:98:
ca:2e:49:10:f9:87:6c:79:2d:9a:42:22:36:67:b7:
bb:49:58:26:83:00:07:8d:97:36:2c:95:62:42:da:
7f:ef:bc:30:75:a6:aa:3a:58:f3:fe:81:34:5c:6d:
4c:a9:b2:95:ef:8d:2b:06:b9:62:1a:56:d1:0f:28:
cd:4e:ae:78:52:9a:a4:f5:35:25:b1:65:65:22:9c:
a5:53:3e:e4:48:6e:d4:62:19:93:e8:34:39:0f:48:
51:7c:2b:76:d9:bc:e8:38:2e:65:26:e0:d6:47:31:
cd:97:cb:35:6a:39:7a:94:3e:6d:76:d7:5f:8c:64:
aa:1c:fc:34:ef:4b:d8:6b:f2:c9:4f:69:38:8f:36:
31:63:0e:c1:70:de:0b:d7:24:91:47:75:3d:55:28:
fe:e7:54:35:00:14:7c:cd:54:81:c8:d0:4c:fe:e7:
74:70:65:51:af:18:66:8c:96:5e:b5:9a:d5:1a:84:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:17:EE:00:C4:BD:A1:36:48:0E:ED:A0:CD:43:22:E0:C1:82:98
X509v3 Authority Key Identifier:
keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a7:94:89:38:9d:70:8a:cb:96:86:6a:c8:9a:de:bb:bc:f7:
d0:0a:47:e2:b3:9b:07:b1:0d:90:13:63:96:03:70:00:c8:8e:
68:d5:9a:b4:1b:07:1b:79:4d:12:3e:83:2a:d4:a0:8d:40:65:
e2:19:0f:f9:b3:f7:ad:b4:e5:88:22:32:05:b3:00:f2:0a:d1:
af:46:fe:cd:6c:0e:22:31:59:82:e7:57:b7:a9:37:e8:6b:33:
04:ae:d7:9d:96:bf:e7:1f:6d:cc:d7:7e:7d:74:eb:e6:fb:37:
ec:e9:f7:79:98:8f:a0:05:04:da:50:e8:93:54:33:99:2e:0d:
16:34:c9:10:81:47:87:13:ba:09:9e:7a:bd:04:fe:47:82:3f:
c3:e0:33:49:bd:57:c9:da:1b:a9:f0:87:ef:20:4f:03:ac:29:
2f:23:bf:a7:97:cf:65:7f:83:9e:df:98:ce:89:17:e8:ec:24:
af:84:0b:89:02:90:96:05:c5:1a:5e:b5:87:ce:a5:18:71:d3:
a0:a5:16:51:f2:12:8d:bd:fd:1c:ca:76:f0:ab:ce:88:30:c7:
25:ac:07:40:e7:16:63:6c:a3:4a:0c:06:d1:ae:36:f0:e9:4c:
c0:07:29:2e:07:4c:3d:a1:3a:43:07:ba:0a:3a:60:96:28:22:
b2:02:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:21 2026 by rpki-client