
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier: umZYEiBoQ4pyeAjV+mLPYpNDU8fXSDoWOZkTRtJE/UI=
Subject key identifier: B5:6B:1C:E1:73:EA:04:16:62:5C:5A:36:4D:9E:18:E4:FF:16:37:12
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial: 0CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number: 0CD8
Signing time: Sat 04 Apr 2026 18:10:40 +0000
Manifest this update: Sat 04 Apr 2026 18:10:40 +0000
Manifest next update: Sat 11 Apr 2026 18:10:40 +0000
Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: JjMKGYbfulCVyBsCMs3fjf/z981db+M5Bzkxd/GWeD8=)
2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Validity
Not Before: Apr 4 18:10:40 2026 GMT
Not After : Apr 11 18:10:40 2026 GMT
Subject: CN=69d15420-56b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:99:78:dc:d5:e5:d7:dd:61:a6:05:97:dd:
5a:77:dc:ab:59:ee:dc:89:61:97:1d:48:e2:d1:42:
65:f7:36:4e:8f:cb:bc:49:26:95:66:e3:32:16:f5:
66:eb:4c:6e:30:9b:9f:f9:0d:4d:01:0d:18:c0:44:
13:ce:e2:e3:26:4a:ba:27:68:93:8f:76:22:81:55:
41:05:1f:a4:32:ba:41:0f:23:23:f9:2a:12:6a:e4:
e3:25:e5:ef:9b:8d:b2:c2:64:f8:bc:e6:05:fe:02:
2d:cb:d0:ee:b4:ce:1a:37:fa:8a:d3:c0:9a:f4:16:
bd:8c:03:89:07:58:df:14:0e:5a:c9:50:9d:cd:8f:
85:77:b8:5d:a5:3e:2d:71:0d:26:d0:64:c8:16:a7:
38:4d:60:8e:7d:58:1b:01:f6:06:45:c0:8b:a2:08:
9d:fc:cd:41:33:a5:72:bf:c6:a1:f8:f9:63:fb:c3:
1d:ce:48:3f:c8:67:0c:85:59:51:f5:5a:0e:a2:81:
42:19:d9:f4:22:b1:bc:92:6c:1a:08:1e:c3:cc:fc:
17:18:3e:10:f1:7c:bd:a1:58:ec:cf:bd:79:74:ab:
a9:9a:68:85:1a:68:ab:ba:1c:1b:d1:f7:c3:37:1c:
c7:f8:d1:9d:57:69:14:c0:02:fa:a4:ad:73:a7:cb:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:1C:E1:73:EA:04:16:62:5C:5A:36:4D:9E:18:E4:FF:16:37:12
X509v3 Authority Key Identifier:
keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:5f:08:c7:4e:84:8c:75:02:b3:9e:3f:18:5e:96:d6:7b:aa:
4a:93:b5:e6:30:ab:a0:ad:b2:4e:41:5f:11:24:92:ef:c8:90:
01:0c:bf:24:33:05:57:0c:e0:44:2d:62:4a:c0:78:57:2c:6e:
cc:7f:7b:f9:33:91:c8:d7:f4:ef:d4:c8:a0:07:75:b5:7c:05:
ca:f0:5c:b9:62:00:07:dc:25:28:4d:a5:dc:33:15:ee:b7:27:
5f:cf:d0:9e:02:03:d0:05:fa:c7:df:f8:d6:60:f3:a5:1a:2e:
38:b8:b9:73:54:d6:2a:e3:d5:0c:06:fa:fd:38:28:c6:bf:85:
11:e7:31:e0:b5:ee:41:d9:dd:a9:98:51:77:de:a6:3c:4d:20:
bf:6e:70:5c:62:a1:54:a3:45:92:75:14:46:d3:bb:6c:cc:4b:
4a:90:2f:27:43:47:5d:9d:f3:4e:e5:99:83:12:ea:a4:53:57:
4a:d5:43:9f:da:6f:21:50:b0:57:84:69:df:aa:ca:91:81:4d:
b9:e2:f6:6a:7d:7d:fa:e3:80:a2:4c:a1:44:18:ae:e6:63:44:
f2:29:b9:ae:95:9d:fc:06:48:99:b1:e3:91:18:53:be:02:51:
ef:16:20:ba:60:12:0b:e7:fe:0f:14:e7:7b:9f:a5:32:bb:62:
17:8f:8d:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2
NTZBNUUwOEQwHhcNMjYwNDA0MTgxMDQwWhcNMjYwNDExMTgxMDQwWjAYMRYwFAYD
VQQDEw02OWQxNTQyMC01NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHCZeNzV5dfdYaYFl91ad9yrWe7ciWGXHUji0UJl9zZOj8u8SSaVZuMyFvVm
60xuMJuf+Q1NAQ0YwEQTzuLjJkq6J2iTj3YigVVBBR+kMrpBDyMj+SoSauTjJeXv
m42ywmT4vOYF/gIty9DutM4aN/qK08Ca9Ba9jAOJB1jfFA5ayVCdzY+Fd7hdpT4t
cQ0m0GTIFqc4TWCOfVgbAfYGRcCLogid/M1BM6Vyv8ah+Plj+8Mdzkg/yGcMhVlR
9VoOooFCGdn0IrG8kmwaCB7DzPwXGD4Q8Xy9oVjsz715dKupmmiFGmiruhwb0ffD
NxzH+NGdV2kUwAL6pK1zp8tJmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVrHOFz
6gQWYlxaNk2eGOT/FjcSMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3
RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x
VVVQUXllVkpBeWhsYWw0STAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4F8Ix06EjHUCs54/GF6W1nuqSpO15jCroK2yTkFfESSS78iQAQy/JDMFVwzg
RC1iSsB4VyxuzH97+TORyNf079TIoAd1tXwFyvBcuWIAB9wlKE2l3DMV7rcnX8/Q
ngID0AX6x9/41mDzpRouOLi5c1TWKuPVDAb6/Tgoxr+FEecx4LXuQdndqZhRd96m
PE0gv25wXGKhVKNFknUURtO7bMxLSpAvJ0NHXZ3zTuWZgxLqpFNXStVDn9pvIVCw
V4Rp36rKkYFNueL2an19+uOAokyhRBiu5mNE8im5rpWd/AZImbHjkRhTvgJR7xYg
umASC+f+DxTne5+lMrtiF4+N2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:27 2026 by rpki-client