
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: EYbxt8+bdjvMeVnQSCKwywJjTuKsvTccvuwAeRw601Y=
Subject key identifier: D1:E4:03:43:EC:62:78:50:F6:90:B5:C4:CA:61:F9:5A:BB:27:41:89
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 0384
Signing time: Tue 21 Apr 2026 00:43:08 +0000
Manifest this update: Tue 21 Apr 2026 00:43:08 +0000
Manifest next update: Tue 28 Apr 2026 00:43:08 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: VJrv6tPEl3YwFJtiHLRh4KYuKJ+8qOCLwZIM/d6gguA=)
2: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
3: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 00:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: Apr 21 00:43:08 2026 GMT
Not After : Apr 28 00:43:08 2026 GMT
Subject: CN=69e6c81c-3f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:2b:95:45:96:c0:a9:47:dc:d8:60:b2:a3:
9a:d1:e7:36:fb:f2:ba:88:fc:26:e0:47:80:96:73:
87:55:ca:35:16:2a:b7:11:07:f7:cb:8d:b8:a1:8d:
6c:cf:41:2f:6a:74:1e:e5:c1:7e:9e:92:50:98:a7:
c0:bf:ba:fb:6d:7c:19:fd:c5:06:71:1d:7c:0e:77:
1e:38:99:a8:d2:05:10:da:58:c1:90:44:00:92:d9:
f3:6b:cf:0f:b2:42:2e:9e:a5:be:df:f1:fd:ed:20:
15:d4:7d:82:9b:1e:83:38:1c:57:8d:d9:a9:08:56:
78:a8:2e:c5:1b:cb:b3:f1:28:3c:87:80:fc:29:47:
a4:b6:37:aa:5c:7c:58:01:df:d5:38:c6:de:1d:be:
9d:7f:89:9f:d7:de:29:59:94:1f:37:23:30:20:d2:
ba:d6:36:4d:4e:c8:bc:f5:5e:f0:95:b0:7f:c9:aa:
39:56:3f:61:72:e3:4d:84:0f:c3:6d:d4:65:42:bd:
68:0a:e4:b1:c8:74:28:c8:af:1a:43:48:56:19:a9:
20:a3:77:0b:d3:ba:15:03:73:39:27:1e:3c:f8:62:
a2:3b:f5:7e:5a:19:6d:24:24:1c:8e:fa:18:b1:6b:
a3:74:0a:a7:69:b3:33:5c:80:54:53:77:11:c1:7f:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:03:43:EC:62:78:50:F6:90:B5:C4:CA:61:F9:5A:BB:27:41:89
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:11:49:f6:76:be:15:f9:69:42:72:ad:21:3e:43:dc:88:
4f:ce:da:41:e3:e9:79:d3:09:e5:56:d3:d2:e4:21:37:61:2c:
6e:13:24:9b:69:f8:2c:37:57:06:ae:6a:6e:47:bf:bf:82:b5:
d6:df:41:f3:b2:81:dd:bb:f8:af:f3:df:d3:f8:ca:d2:01:91:
18:5e:74:71:f9:2e:d9:e1:4a:57:1e:93:66:81:49:f1:38:db:
37:82:ba:e8:a7:67:60:56:55:f7:89:59:10:89:56:30:36:a2:
ee:8b:07:f9:d4:4e:eb:b5:54:2e:dc:56:6a:73:95:2d:03:27:
cb:8a:e3:35:1e:ff:9e:4a:22:24:8b:d7:b6:ac:6f:ec:c2:4d:
9a:7c:93:ec:3c:26:69:f2:da:ed:f1:7b:8f:ec:77:a9:a3:ee:
25:2c:f4:b1:69:6d:c6:b4:50:c3:9b:21:48:fc:ff:d3:0a:c1:
bf:26:28:53:39:3c:3f:be:ee:15:31:3d:61:fd:47:49:8d:32:
83:3d:fe:57:ad:74:bb:de:df:87:cf:c3:99:d4:6a:c8:8a:4e:
d0:aa:43:c5:b5:5e:81:17:fd:19:49:c8:d8:17:46:31:fb:de:
ff:fb:7c:d8:82:3e:89:a3:64:e2:34:b6:f5:e4:7c:01:c7:09:
ff:49:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:15:07 2026 by rpki-client