
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File: a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier: wwGVjVF9PRz9M7URGxiG4tVK/sS6BdQ2Ey26GLOmZhk=
Subject key identifier: 87:D9:31:D1:B2:7C:FB:67:B8:85:77:45:67:77:00:E1:E3:ED:4A:6F
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer: /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number: 11
Signing time: Sun 05 Apr 2026 08:23:08 +0000
Manifest this update: Sun 05 Apr 2026 08:23:08 +0000
Manifest next update: Sun 12 Apr 2026 08:23:08 +0000
Files and hashes: 1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: cJ2qcUSJV3O6lmYKVclD2bd+hWPJ7gYWNMhlscBloDU=)
2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Validity
Not Before: Apr 5 08:23:08 2026 GMT
Not After : Apr 12 08:23:08 2026 GMT
Subject: CN=69d21bec-3bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:9e:b9:08:58:b7:18:58:b3:77:f4:fb:e2:
15:67:5c:70:bb:8f:b2:9f:ff:bf:c1:f9:2e:b8:0d:
32:9f:a5:e7:6a:ae:48:7b:3c:4b:cd:21:79:2e:80:
a8:c3:58:8b:8d:3b:0f:af:95:8a:f2:cb:a9:32:f7:
0e:b2:1c:27:12:15:4f:41:ae:05:bc:26:9c:7c:28:
f1:04:1f:a2:d9:ce:00:b3:d2:c6:7a:35:47:2a:ee:
49:d3:cd:96:89:64:32:a4:4c:27:62:df:20:0c:a4:
4e:50:77:26:f8:80:f3:20:a6:3c:7a:64:4f:60:84:
63:22:02:7c:1d:93:05:96:ae:65:f3:59:0e:0e:d0:
72:3d:0d:b6:46:47:46:82:03:b9:ac:ee:15:b3:80:
ca:dc:c1:36:09:fb:74:e6:19:f3:a4:8f:fb:22:03:
34:78:ac:be:68:24:6f:c9:8e:c6:91:9f:c7:c2:19:
52:2a:a6:e7:3f:62:74:0a:5e:9e:39:61:d7:25:df:
99:f9:8f:fd:19:46:6e:3d:2e:5d:f1:d6:82:ab:3c:
5e:bf:ef:d5:98:58:e1:d3:98:23:e2:07:61:7c:87:
a2:3a:2b:03:a6:ca:73:06:60:a4:a5:67:13:fb:3d:
9e:e8:3f:c9:5a:42:b9:3d:11:5d:e2:f7:e1:10:55:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:31:D1:B2:7C:FB:67:B8:85:77:45:67:77:00:E1:E3:ED:4A:6F
X509v3 Authority Key Identifier:
keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:02:d2:81:73:8f:f4:60:f7:d4:06:2f:88:41:f5:92:1a:
30:31:7f:42:5d:d5:ea:f8:06:bc:82:32:6a:3d:75:ed:97:b0:
2f:13:68:f5:60:d5:fd:c8:74:1d:5d:f1:92:45:f7:aa:b9:d5:
51:66:bc:e7:f6:f3:be:db:dd:45:88:c0:9d:75:55:f9:7b:53:
42:a2:5a:53:82:d1:ae:24:7a:5a:6a:8f:9d:ad:96:d0:53:07:
00:55:13:8f:8f:de:03:11:a9:4b:1e:85:95:e8:13:c7:2e:25:
0b:25:33:d1:c5:2c:44:f1:f9:65:2c:aa:d2:ca:a2:1a:af:0a:
bb:00:3e:bb:1f:3f:6a:d4:19:9f:24:bf:ca:ae:0b:61:fc:b6:
1e:cb:ac:2b:a9:1b:46:15:59:7e:c8:9f:a4:f2:36:e3:ef:42:
fa:67:3f:b7:c2:51:32:f2:fe:0b:62:cf:5a:d7:d1:69:6f:2f:
72:d0:90:3c:96:99:d0:f0:09:56:9b:89:84:15:49:43:57:ff:
e2:31:d7:ac:5c:9d:79:0d:7d:4d:44:1d:4f:72:41:08:f0:d3:
c8:75:07:e5:35:e0:16:cb:97:be:ed:4a:f3:7a:b5:fc:25:2d:
d7:ee:91:da:36:25:22:e4:82:4f:f9:8e:13:62:bf:d8:90:fd:
e3:9a:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:37:11 2026 by rpki-client