
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: vvB+UEKzN3oWpTHWyzYi5tp87+otR2UgPvho0QHGnvA=
Subject key identifier: 8C:43:2B:7A:3D:C7:DE:FB:76:E9:B9:90:D6:0D:D6:57:2D:CF:B2:E8
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 01CE
Signing time: Sun 05 Apr 2026 03:14:47 +0000
Manifest this update: Sun 05 Apr 2026 03:14:47 +0000
Manifest next update: Sun 12 Apr 2026 03:14:47 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: uyCb0+wbmjg5el8Juzgo0BR7vgOJQ4K/y0uqv2qmnYU=)
2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: oIvNDV0kKg8+q3urTzdMBjxhKk7FfiR/yZ0iZHzMy9A=)
3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Apr 5 03:14:47 2026 GMT
Not After : Apr 12 03:14:47 2026 GMT
Subject: CN=69d1d3a7-9ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:e5:17:7d:9a:fb:5b:53:9e:87:f7:50:c6:
45:5a:41:56:2a:13:3d:30:58:8a:69:99:45:e2:d2:
58:44:ef:57:6e:44:15:dd:a0:f2:d6:5f:81:60:ac:
1b:dd:93:cf:c0:1a:25:09:1e:69:62:d9:90:10:b4:
ca:7c:ed:1b:09:75:10:e6:ba:16:a2:ff:37:ce:f5:
4d:93:0c:a1:c4:24:aa:d9:2c:38:a5:c5:85:19:d8:
28:31:29:c1:1e:62:e0:ce:63:50:d9:ed:22:01:7c:
60:e1:c4:2e:46:13:ae:45:e3:a7:1c:b4:c1:14:61:
bc:18:dc:23:15:0b:90:ee:f6:44:79:d8:d4:cd:20:
b3:89:d3:3f:63:af:bf:a3:6b:69:25:bb:82:24:a7:
cd:02:06:bd:7d:aa:07:0a:30:3d:11:6f:3d:34:86:
53:24:14:5c:15:8d:06:1c:04:6c:74:af:ba:89:84:
14:86:c6:b8:e4:d5:67:a6:c1:4f:76:60:44:3f:5c:
9e:a1:a3:e7:9c:b8:07:82:94:96:4a:47:00:75:1f:
4d:96:af:52:ef:1f:87:0d:9e:ad:c2:1c:61:a4:df:
27:81:fb:3e:5d:0d:b1:0c:d8:84:a1:f5:ae:e3:98:
80:72:f4:39:a4:08:97:9b:ad:b0:40:5e:bf:1a:2c:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:2B:7A:3D:C7:DE:FB:76:E9:B9:90:D6:0D:D6:57:2D:CF:B2:E8
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:20:a4:52:f3:21:84:cc:6b:be:bb:2c:ca:ed:39:5e:d3:c3:
f9:37:2a:a7:89:80:0a:13:0f:cc:e3:ce:88:f1:f9:e4:a8:a6:
a0:89:88:ff:5c:52:14:62:2b:66:34:de:4e:22:95:53:ea:bb:
30:f0:76:6c:ce:04:a0:04:b3:07:20:b7:15:82:8e:4e:74:3b:
ef:fe:21:e3:19:a9:30:6a:29:ab:f6:88:1b:7b:01:06:91:be:
bc:43:37:ca:04:8c:a5:59:35:8a:e9:2c:e4:99:c8:e5:c2:f3:
ec:3c:ef:f6:6d:bf:e6:34:e5:32:bd:43:c8:df:f7:34:80:08:
15:fd:88:b8:6b:73:06:89:e0:ac:a4:0c:15:a8:47:5a:25:11:
eb:f1:4e:66:81:f4:e7:2f:ef:0a:65:f6:2b:64:d0:52:d9:43:
24:a9:81:7d:1e:ca:20:c2:ad:ea:1f:da:f5:12:32:d1:fd:be:
ce:99:40:54:e6:9e:05:21:19:49:0f:c3:8f:7c:4f:ff:98:63:
d4:c8:53:84:49:ac:97:cb:65:5b:ed:c9:7b:ab:89:72:37:8b:
b4:c1:4f:a2:da:38:0e:bb:9f:6d:ca:a0:09:72:00:ac:68:f3:
e7:2e:d6:7e:1e:fd:a9:47:b3:90:5d:f4:65:d9:1f:97:6b:79:
39:1d:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:15 2026 by rpki-client