
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json)
Hash identifier: LHty6l0kkQ7wDIzfQILJhzlXBeW0zJFW5t+OTu0xxoA=
Subject key identifier: F2:24:FD:F1:0B:22:2A:7C:3D:F2:1D:FA:E9:0D:FE:B9:60:85:19:D0
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
Manifest number: 0B5E
Signing time: Sat 04 Apr 2026 22:14:39 +0000
Manifest this update: Sat 04 Apr 2026 22:14:38 +0000
Manifest next update: Sat 11 Apr 2026 22:14:38 +0000
Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: m9wAdvFvWTmsTzNNPQNroZP0YJlfTfgJFVddD0MEONs=)
2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: HHH8uEe6y2kjn0kzwNQmOzrbreBTDdJ2h1RgssK/xT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Validity
Not Before: Apr 4 22:14:38 2026 GMT
Not After : Apr 11 22:14:38 2026 GMT
Subject: CN=69d18d4f-625d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:45:59:3c:f5:35:7e:5a:b6:79:47:66:11:
7f:fb:84:fd:dc:cf:a5:d6:bf:a3:b1:94:5e:49:3f:
92:20:fa:eb:a5:02:27:d4:0d:28:20:9c:80:de:28:
15:29:c2:ec:7f:ce:f5:ca:70:0f:c1:98:54:43:64:
4b:e9:a2:12:8a:83:61:61:45:82:3d:39:eb:57:2a:
64:2d:96:5c:b8:92:97:4a:f8:50:fe:f7:72:f5:55:
9f:cc:e0:26:20:63:6b:6d:d1:7a:d2:2d:8c:b7:41:
85:f8:f2:f9:a7:b5:b4:ef:c7:46:fb:65:28:45:bb:
ae:89:26:fd:c8:fc:bf:1f:b3:6e:bc:7b:40:89:1b:
6f:30:ee:9f:e0:60:b2:c3:91:7d:93:c5:5e:b7:db:
0d:06:cd:fe:1c:91:e9:61:70:c6:c5:10:18:8f:7a:
66:69:cf:d9:cf:c4:90:45:b6:a2:df:85:73:94:e3:
c1:c3:57:ce:c7:dc:a3:ec:d0:bb:83:a4:08:18:e6:
4b:1e:0a:71:10:87:f6:c8:d1:d3:d5:a4:3b:f4:86:
34:38:88:6a:5b:e9:94:81:eb:0f:86:31:65:20:06:
76:15:f9:01:d0:e9:96:8a:0e:52:d8:2c:db:12:c5:
a3:43:a3:81:4d:47:0d:5e:e4:78:04:ed:2c:31:d7:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:FD:F1:0B:22:2A:7C:3D:F2:1D:FA:E9:0D:FE:B9:60:85:19:D0
X509v3 Authority Key Identifier:
keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:8d:a2:f7:86:32:6c:81:76:67:61:2b:aa:15:03:4d:c0:
ac:e9:05:39:53:08:ce:ba:64:39:b5:4a:19:30:1f:d7:1e:ea:
c4:21:b8:77:31:03:e4:88:1b:2b:7f:41:db:a3:e6:89:0e:4f:
52:9f:ad:e5:b4:53:6b:1b:8a:ff:d1:df:97:76:d8:42:70:94:
1f:c8:db:a1:60:82:c0:2f:60:89:ec:90:c9:af:d5:60:58:63:
00:fd:59:27:8a:8c:04:2b:80:e9:cb:ab:13:8e:45:f5:34:af:
82:de:81:fe:82:ae:a4:d9:3d:cc:6a:87:ac:05:31:6f:ae:db:
37:95:9b:d1:5f:e6:0d:13:71:21:9b:87:03:9c:24:1b:3b:de:
0e:b1:6b:36:bb:50:69:e4:b2:33:60:0a:bb:fb:df:15:94:0f:
06:0d:b1:6d:ab:cf:be:a3:63:14:66:7a:f9:39:45:21:68:6a:
39:f5:5e:d2:ac:c8:b0:73:3d:d8:ce:b8:58:eb:d6:00:88:90:
ee:4e:dc:c9:a4:01:22:70:ba:0b:fc:75:30:80:98:87:8e:d0:
7d:08:7a:62:1c:38:42:4d:05:c5:67:0b:5e:17:04:bf:6d:d4:
db:2d:b9:2e:c9:08:01:6f:3b:af:75:3d:56:56:92:c3:d1:50:
cf:e1:8e:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKEE3NkUwNUI4MzQ1NEVEMUEyMDkwMjVFODNENzVFNDA1
NzkxODkyQzEwHhcNMjYwNDA0MjIxNDM4WhcNMjYwNDExMjIxNDM4WjAYMRYwFAYD
VQQDEw02OWQxOGQ0Zi02MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobxFWTz1NX5atnlHZhF/+4T93M+l1r+jsZReST+SIPrrpQIn1A0oIJyA3igV
KcLsf871ynAPwZhUQ2RL6aISioNhYUWCPTnrVypkLZZcuJKXSvhQ/vdy9VWfzOAm
IGNrbdF60i2Mt0GF+PL5p7W078dG+2UoRbuuiSb9yPy/H7NuvHtAiRtvMO6f4GCy
w5F9k8Vet9sNBs3+HJHpYXDGxRAYj3pmac/Zz8SQRbai34VzlOPBw1fOx9yj7NC7
g6QIGOZLHgpxEIf2yNHT1aQ79IY0OIhqW+mUgesPhjFlIAZ2FfkB0OmWig5S2Czb
EsWjQ6OBTUcNXuR4BO0sMddyDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIk/fEL
Iip8PfId+ukN/rlghRnQMB8GA1UdIwQYMBaAFKduBbg0VO0aIJAl6D115AV5GJLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9wMjRGdURSVTdSb2drQ1hvUFhYa0JYa1lr
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9wMjRGdURSVTdS
b2drQ1hvUFhYa0JYa1lrc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFoyNoveGMmyBdmdhK6oVA03ArOkFOVMIzrpkObVKGTAf1x7qxCG4dzED5Igb
K39B26PmiQ5PUp+t5bRTaxuK/9Hfl3bYQnCUH8jboWCCwC9gieyQya/VYFhjAP1Z
J4qMBCuA6curE45F9TSvgt6B/oKupNk9zGqHrAUxb67bN5Wb0V/mDRNxIZuHA5wk
GzveDrFrNrtQaeSyM2AKu/vfFZQPBg2xbavPvqNjFGZ6+TlFIWhqOfVe0qzIsHM9
2M64WOvWAIiQ7k7cyaQBInC6C/x1MICYh47QfQh6Yhw4Qk0FxWcLXhcEv23U2y25
LskIAW87r3U9VlaSw9FQz+GOjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client