
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier: 4PFXREk5fVdLArHX2HRumIFX1PfOM3a7jLhVRq8aVl4=
Subject key identifier: C3:60:55:B6:E5:B6:5C:01:10:17:6D:82:F7:60:11:D1:F3:1A:69:F9
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial: 0717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number: 070F
Signing time: Sat 04 Apr 2026 21:42:53 +0000
Manifest this update: Sat 04 Apr 2026 21:42:52 +0000
Manifest next update: Sat 11 Apr 2026 21:42:52 +0000
Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: HIKalOnXyMdbVBuDvg0V42P3M+eXUCW2az1luTOO18k=)
2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Validity
Not Before: Apr 4 21:42:52 2026 GMT
Not After : Apr 11 21:42:52 2026 GMT
Subject: CN=69d185dd-dcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:c2:07:73:4a:3b:be:7d:5d:9b:60:92:3a:
ea:16:ee:48:f1:11:b4:9a:fd:ba:8e:b1:e7:f4:f6:
06:dd:68:7a:df:05:a5:92:80:bd:fe:91:4d:48:bf:
0b:6d:4e:d7:c4:69:73:7d:a6:2a:69:e3:f2:97:86:
84:ef:91:c8:31:19:ad:af:5c:20:67:a7:84:df:31:
40:d0:d1:b2:b9:5c:31:06:70:e4:98:6c:39:14:f9:
b1:75:23:f5:ce:44:b5:c5:4d:c0:ef:96:de:c4:cf:
05:6e:67:f3:0e:81:07:7a:74:28:10:97:f3:bf:2a:
0b:b8:59:7a:a2:95:e8:7a:4f:c9:50:a4:07:8a:05:
2f:77:10:5e:c8:9a:f0:9c:de:6e:04:b6:cd:25:00:
6c:f0:90:8a:6d:9f:34:07:6d:12:30:57:79:3b:73:
af:a4:c3:41:ef:6b:b7:70:99:4e:47:3a:26:a6:4b:
f8:99:61:5f:1c:1e:74:d8:d8:87:f3:92:7c:2b:96:
76:dd:d1:1a:6c:48:7c:10:76:59:f3:2e:a1:08:58:
f1:8c:5f:3c:b9:3b:93:b7:85:96:f4:55:d8:7c:79:
fa:19:da:25:ab:3b:3a:e3:51:7e:02:ce:93:73:35:
40:8e:46:5e:b5:6f:2a:f7:fe:85:ca:0a:d7:6d:e9:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:55:B6:E5:B6:5C:01:10:17:6D:82:F7:60:11:D1:F3:1A:69:F9
X509v3 Authority Key Identifier:
keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:65:5c:c9:29:f9:1b:73:5d:39:82:fa:4c:96:3f:58:6f:52:
bf:4f:87:2b:ac:50:9e:83:ad:21:4d:e0:9d:67:04:2f:66:8e:
73:a5:3b:a4:66:44:ea:53:88:74:c8:10:44:0e:dc:b2:d7:67:
54:a4:cc:75:cb:91:3a:a2:f1:7c:b9:9e:eb:5f:bb:7c:e6:4d:
84:1c:d5:aa:9b:d1:0a:48:68:5a:47:29:1d:83:e7:15:4d:da:
47:50:49:35:29:27:d6:20:62:6a:92:0d:53:60:28:7a:fa:cb:
3b:f8:fb:f2:ab:e5:f7:4b:39:4c:60:9a:31:82:49:c0:cf:cb:
67:19:8f:3a:2c:5f:e8:e6:bd:5f:71:30:83:82:5f:f7:9f:de:
58:f1:7a:47:c6:a6:aa:ad:47:0c:64:ce:5c:31:fa:a8:f1:c3:
20:72:6c:c9:74:61:a8:69:50:d5:d4:22:eb:e4:ac:48:b3:2b:
9c:77:01:6e:c4:27:f2:14:4e:30:17:c9:ef:c6:71:51:a7:05:
13:74:48:8d:2e:ce:ce:f0:50:2e:3b:bc:3a:13:bf:3e:5c:36:
4d:f5:8c:96:d1:37:b9:f2:36:81:3b:3a:88:fd:67:6b:39:e6:
c9:53:78:1f:cd:9e:6a:68:51:b3:99:f6:08:aa:4c:9f:f6:28:
14:66:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:34 2026 by rpki-client