
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: XnCZoGENVbC4VIzIfVVO/w/WuehQWYsbNg2w9UM3IzI=
Subject key identifier: EA:14:EE:92:70:52:90:B6:C1:0F:42:DC:9F:9D:EF:C4:1F:EB:3A:59
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 01E0
Signing time: Fri 17 Apr 2026 03:16:23 +0000
Manifest this update: Fri 17 Apr 2026 03:16:23 +0000
Manifest next update: Fri 24 Apr 2026 03:16:23 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: yQXSduThOfHEXnK9U/mscy+OWQ6kxzX81n11E2Hf6oY=)
2: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: z4T+vvI8T+5oc2mgkAo/obM6X1bNreFY1igmcwM5xYk=)
3: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: y6hlqSgvXAjWJY7Sel1hIYuvC0A3C+jNhr6PU7c820I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Apr 17 03:16:23 2026 GMT
Not After : Apr 24 03:16:23 2026 GMT
Subject: CN=69e1a607-dd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:fe:bd:b7:5a:e1:7d:34:f3:32:ff:1e:6c:
5d:31:e0:fa:b8:3e:fe:16:53:5e:a9:7c:7a:52:56:
9a:c4:d6:4d:f4:d8:47:7e:73:68:ad:57:b3:5f:9a:
b9:5c:5d:f4:b9:70:63:14:ae:9c:c6:e1:62:e2:df:
f4:50:99:9a:32:41:cb:67:e1:42:19:93:a4:6d:7d:
f2:63:e6:fe:a9:8c:48:d0:49:be:66:b9:1e:90:42:
cf:6b:4d:93:35:ed:b3:c5:30:3d:38:4c:70:65:a4:
b8:02:b3:df:18:70:28:7a:f0:57:21:ff:44:6b:60:
d1:a1:ac:b3:ac:e1:dc:c1:77:01:c0:05:a1:87:45:
7b:17:81:1a:63:33:20:42:bd:65:59:c2:41:dc:ac:
49:14:fc:6e:13:8b:21:39:81:85:31:12:30:00:51:
66:6d:d7:b7:17:bb:08:f5:41:6c:7e:2d:99:31:05:
87:ea:5d:7d:d0:5b:6f:bd:84:e2:6e:66:a2:99:ad:
91:a5:61:c8:ac:9f:b6:52:f5:86:87:e1:c9:58:06:
af:74:18:c4:e6:10:dd:ad:6e:4f:9f:27:ca:0f:51:
ed:52:73:b5:01:d5:cf:3d:56:a6:6e:b0:9a:6c:39:
a6:d6:31:49:4f:65:54:9c:06:db:1c:81:99:8a:87:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:EE:92:70:52:90:B6:C1:0F:42:DC:9F:9D:EF:C4:1F:EB:3A:59
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:c6:e9:e0:5f:f9:ea:e9:9b:8e:52:7c:5a:71:e1:c8:d0:
02:95:c7:b4:2f:51:5d:d2:6f:c5:0d:12:20:62:ac:b0:85:d3:
3f:8a:5e:0a:1a:7a:99:25:22:b0:50:07:8f:b7:fe:3d:9e:2b:
af:b4:0d:d8:c0:f2:1e:c6:f2:27:82:34:d6:3e:75:eb:d5:cb:
69:f6:e2:3d:07:e4:73:9d:d5:16:42:a4:24:78:08:78:26:d6:
fc:ae:56:32:40:60:2b:af:f4:a6:51:c2:84:f6:c0:f6:95:de:
56:70:4d:4b:89:73:55:0f:65:48:2e:10:6d:16:b5:8d:0f:a6:
b0:c2:c5:0c:72:f2:e5:f4:28:6e:77:8f:8b:87:c1:5f:62:ab:
61:d8:9b:d0:07:2c:55:2e:66:e4:75:53:cf:0d:bb:30:f2:a8:
dd:59:49:73:bc:0b:be:e4:bf:46:67:8b:18:be:fc:7e:de:a4:
ef:f8:13:e1:f6:38:72:87:5a:be:04:cb:4a:a0:6d:1e:86:78:
cf:ad:f2:4f:fe:51:88:19:78:f2:6d:7c:2c:be:23:d0:4e:22:
93:a5:5a:48:c9:0c:c4:34:0f:e2:12:22:f4:bc:c8:4e:04:e6:
e1:f3:5e:44:c0:90:57:87:a4:aa:72:70:78:40:1a:0a:6f:33:
34:9c:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:18 2026 by rpki-client