
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier: eST8fyGPJdosM8U3G5qiOYHh2iVwSoBeYgPV+Rds4NU=
Subject key identifier: 22:B5:EE:EF:38:C8:17:47:74:91:D6:50:35:6D:76:D8:7C:A8:24:1B
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial: 05CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number: 05C0
Signing time: Sat 04 Apr 2026 22:53:39 +0000
Manifest this update: Sat 04 Apr 2026 22:53:38 +0000
Manifest next update: Sat 11 Apr 2026 22:53:38 +0000
Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: K0/EtzjlFEAWPyruxTNr4k97Cp90Qb9wS89ZwJ/gSKw=)
2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: FhhQyHeWyKOZmuPQHPKmrZdEe/8rcAsfsUV6nBHHPzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Validity
Not Before: Apr 4 22:53:38 2026 GMT
Not After : Apr 11 22:53:38 2026 GMT
Subject: CN=69d19673-6d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:64:c8:ed:c8:76:48:23:d5:3a:a1:55:f5:
94:5d:73:f2:f5:3e:94:42:d0:46:7c:31:f8:b5:2c:
13:c5:01:1a:63:e4:4a:69:8b:66:94:d0:da:4f:a1:
20:e7:c8:85:08:2f:8a:b5:50:55:46:a8:f9:29:09:
a2:38:1f:87:72:c1:7f:9c:98:c2:d2:d3:23:40:29:
46:60:71:de:c4:41:cf:75:74:cc:bf:f3:21:0b:34:
0b:90:0e:69:f5:03:f9:35:ef:74:f6:c4:ae:62:76:
14:89:7e:09:f9:39:0f:ae:2a:fe:f6:68:63:e7:f2:
5b:99:12:92:0c:9e:82:11:95:2c:ca:00:93:d3:91:
1f:f7:4d:b5:b5:be:92:9f:d4:ba:e0:6b:d3:12:a1:
25:d9:3d:f0:c9:22:32:30:83:da:c0:31:d1:9c:df:
6c:ad:bd:69:ac:c6:4c:c2:8c:1c:0c:6d:1f:82:5b:
eb:62:3a:34:c6:94:c2:f8:25:83:e1:ed:4b:95:e8:
71:f2:0e:40:1a:dc:65:f8:6a:6c:29:b6:32:51:58:
ce:16:5d:cb:30:06:c9:19:be:9f:fe:3d:b4:4b:07:
79:91:10:6c:c0:04:f1:e6:1d:ee:95:fe:f7:4e:7d:
ff:88:86:a9:09:6c:3b:62:15:5c:24:e0:00:ac:40:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:EE:EF:38:C8:17:47:74:91:D6:50:35:6D:76:D8:7C:A8:24:1B
X509v3 Authority Key Identifier:
keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:c3:a9:92:59:34:6b:06:37:34:0b:e6:a0:f7:90:4e:4d:
b3:c1:79:2d:aa:c9:28:80:ca:3b:60:72:98:b6:bd:53:5a:26:
df:3a:a1:9b:f6:32:04:d7:dd:ce:b4:9f:bd:db:e9:d9:8a:cd:
5f:72:5e:a9:5c:07:4c:c1:c8:95:d4:98:bc:8f:94:cd:c1:d7:
79:95:c9:f0:dd:1e:bf:96:ca:bb:d5:73:f4:57:6f:58:a7:33:
60:c8:bb:1e:14:b6:7b:fb:a2:1e:ca:f2:f7:21:21:43:25:e1:
27:6d:f2:35:4f:27:3f:aa:52:87:ac:3d:0d:58:20:41:6d:4f:
b6:d1:8c:a7:37:7d:30:91:5e:7a:35:d0:cb:dd:4c:0a:52:6c:
11:07:3d:0b:54:9f:52:0b:eb:81:d5:88:19:c9:ae:97:dd:5a:
0a:26:8d:82:31:2e:53:6b:e1:8a:c4:3e:5f:ec:6a:f4:35:36:
d1:59:b0:bf:33:56:74:e5:1a:b4:e6:81:a1:d0:dc:20:37:b9:
0f:fb:40:d1:5e:8b:7a:38:b4:7f:03:cc:eb:8c:cd:20:34:6d:
48:cb:b8:bd:b6:3f:6a:9c:2f:1f:e2:2b:e7:ab:c3:80:42:e0:
90:0b:61:44:65:97:54:d3:f1:e0:ce:cb:70:b3:d2:c6:e0:7a:
26:6b:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:00 2026 by rpki-client