
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier: vhTBzTzI4au10bLN5KBJ4r3fnGCRKjG23iADbcMeUZs=
Subject key identifier: 93:BC:46:6B:8A:92:98:E1:5D:FB:07:7B:DF:43:0F:54:1D:74:29:F5
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 0385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number: 0376
Signing time: Sun 05 Apr 2026 00:39:22 +0000
Manifest this update: Sun 05 Apr 2026 00:39:21 +0000
Manifest next update: Sun 12 Apr 2026 00:39:21 +0000
Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: JRxL1VH9sPzYfVputcV7tquu+sXF8xD+R13nUlTCsGI=)
2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: 7PiA24amlQbC4xMzeCaUVcFYdwUhnQswXY5VT6j4qP0=)
3: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: iucFsGa6sBYZzutnis8jK4YsBoNemyskNEeO7TgdCQ4=)
4: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 0wO7M/9BCooRsmuwMIusd2er4KtWGT09E2By+oSoPjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Apr 5 00:39:21 2026 GMT
Not After : Apr 12 00:39:21 2026 GMT
Subject: CN=69d1af39-4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:e6:42:d5:cd:57:a7:70:c1:9a:db:3c:1f:
3d:1b:56:df:9d:0b:05:28:d9:fe:50:4c:e2:74:12:
34:00:35:9d:85:59:36:09:59:1a:40:d8:e1:05:b9:
c3:5c:7a:58:44:51:7d:42:12:26:13:ed:79:51:6b:
d1:36:48:9c:67:4c:76:25:6f:fe:cd:a0:e4:b8:11:
68:c6:4a:71:f6:65:1e:0e:6b:32:63:25:db:fd:98:
d6:ae:95:3c:e9:c1:cf:3e:da:99:55:11:6f:50:23:
ed:41:71:b9:18:7f:86:20:6e:73:d5:66:74:43:c7:
27:50:3c:ff:fe:6e:b6:5f:63:51:e2:70:6c:e2:9d:
12:d4:15:7a:9f:25:65:48:9e:70:ca:70:35:e1:87:
7e:d5:a1:ec:71:83:b2:88:68:a4:ec:24:e9:62:2a:
13:91:61:87:4a:a3:c1:41:9a:dc:43:d3:f2:7f:48:
f4:6e:18:a5:5d:1b:cb:0d:00:84:45:54:fb:d3:84:
05:c2:42:15:15:a8:32:ef:de:a5:26:d7:f7:4c:6b:
85:08:00:4a:ce:fc:4d:7c:6e:e7:8c:92:6e:ec:2b:
51:1b:b4:d4:22:2b:33:b5:ce:43:8e:e4:91:36:d4:
23:b9:e7:8c:49:9c:b8:58:85:05:fb:78:97:70:21:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:46:6B:8A:92:98:E1:5D:FB:07:7B:DF:43:0F:54:1D:74:29:F5
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:00:bf:0b:c0:bb:72:f3:c0:fa:02:72:73:02:ab:76:5a:78:
35:4e:06:a6:1e:4d:88:81:f5:9f:4b:73:92:9a:6a:7a:42:1f:
dd:66:2b:b3:dd:b9:92:5a:cc:e6:8f:a6:bd:51:d9:6d:16:10:
a5:d0:8b:e6:6a:24:5b:77:23:cd:d9:2b:16:bb:2f:21:9c:45:
df:9a:05:76:28:c6:50:d7:bd:7a:be:ec:7b:2f:ca:65:8b:c7:
52:d0:24:c8:46:a6:4f:70:f0:a3:36:43:f9:fc:82:ff:41:98:
76:5d:b8:4b:7d:1c:3d:eb:82:31:82:f8:28:62:61:f4:1b:cd:
26:a6:92:da:75:6b:bf:cd:17:e4:c0:0b:63:37:90:a3:6a:01:
32:ac:06:0d:9e:b8:f7:8e:e9:0a:c0:4b:a6:7f:6d:10:d0:73:
58:10:06:5d:23:4b:f4:bc:d4:fb:c7:b4:ab:d1:3b:60:43:73:
18:30:a6:78:bd:82:69:d6:f9:d2:c1:33:dc:99:07:ba:84:cd:
54:13:85:d4:8d:d7:29:f7:6f:67:96:fb:70:4c:4e:c8:f2:5d:
2e:fa:fc:15:e4:09:b8:c1:42:8c:6a:1a:b9:60:a3:ee:c9:73:
61:f3:b1:37:fc:a6:dc:cf:88:d1:84:ae:fb:b4:49:91:0b:9c:
a5:96:01:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx
QzgxMzJERjEwHhcNMjYwNDA1MDAzOTIxWhcNMjYwNDEyMDAzOTIxWjAYMRYwFAYD
VQQDEw02OWQxYWYzOS00ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7fmQtXNV6dwwZrbPB89G1bfnQsFKNn+UEzidBI0ADWdhVk2CVkaQNjhBbnD
XHpYRFF9QhImE+15UWvRNkicZ0x2JW/+zaDkuBFoxkpx9mUeDmsyYyXb/ZjWrpU8
6cHPPtqZVRFvUCPtQXG5GH+GIG5z1WZ0Q8cnUDz//m62X2NR4nBs4p0S1BV6nyVl
SJ5wynA14Yd+1aHscYOyiGik7CTpYioTkWGHSqPBQZrcQ9Pyf0j0bhilXRvLDQCE
RVT704QFwkIVFagy796lJtf3TGuFCABKzvxNfG7njJJu7CtRG7TUIisztc5DjuSR
NtQjueeMSZy4WIUF+3iXcCGmwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO8RmuK
kpjhXfsHe99DD1QddCn1MB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw
NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU
dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAC/C8C7cvPA+gJycwKrdlp4NU4Gph5NiIH1n0tzkppqekIf3WYrs925klrM
5o+mvVHZbRYQpdCL5mokW3cjzdkrFrsvIZxF35oFdijGUNe9er7sey/KZYvHUtAk
yEamT3DwozZD+fyC/0GYdl24S30cPeuCMYL4KGJh9BvNJqaS2nVrv80X5MALYzeQ
o2oBMqwGDZ64947pCsBLpn9tENBzWBAGXSNL9LzU+8e0q9E7YENzGDCmeL2Cadb5
0sEz3JkHuoTNVBOF1I3XKfdvZ5b7cExOyPJdLvr8FeQJuMFCjGoauWCj7slzYfOx
N/ym3M+I0YSu+7RJkQucpZYBYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:04:28 2026 by rpki-client