
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier: dUAY8UYu7uCSQUd5xNOOJOKN6CGUye0R50BTq5nXnj0=
Subject key identifier: A7:7A:B1:B3:63:9D:9D:A0:99:10:DD:0A:B2:61:D2:3D:80:FF:D8:A5
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number: 022A
Signing time: Sun 05 Apr 2026 02:15:31 +0000
Manifest this update: Sun 05 Apr 2026 02:15:31 +0000
Manifest next update: Sun 12 Apr 2026 02:15:31 +0000
Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: 9BVMQGQmn2Cmk3Y/NI5RMUVu8HbHzZf88hXI5Jpmg+E=)
2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: ozB4qSn60KTh14UkkZIERrYPZDHp9uoJD36BdQCwa/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Apr 5 02:15:31 2026 GMT
Not After : Apr 12 02:15:31 2026 GMT
Subject: CN=69d1c5c3-7898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:70:93:8d:32:cb:9c:5b:38:6c:fa:e9:77:
b4:87:51:1b:a0:07:a8:ab:1b:7d:3a:cc:2a:f5:e7:
a3:09:48:c8:45:0c:a5:7b:6c:9a:4b:ed:9f:8e:58:
68:55:d8:9c:0c:27:98:21:11:9b:56:de:6c:60:57:
a0:10:cd:9e:01:72:9a:b7:c5:6f:23:26:05:56:c4:
a5:d0:dd:4e:9a:b6:94:92:f3:a9:39:5a:b1:ac:eb:
62:ec:bc:ce:88:2d:95:aa:2e:4c:f2:d8:cc:8d:14:
a8:74:18:c7:1d:72:56:d6:a4:eb:12:b9:0c:ab:d4:
23:37:93:cb:47:dc:02:37:63:a2:02:81:7a:dc:37:
6e:0e:ad:27:2a:93:3e:ed:7c:81:c2:07:bf:a5:5e:
9f:b8:4b:2c:f7:d5:12:a7:60:c1:d5:53:86:45:90:
d8:4b:06:b3:1b:00:5b:b1:1b:d4:96:58:29:f7:d2:
bb:2d:95:8a:17:cf:bd:85:20:b5:82:53:14:ea:1e:
66:f7:ab:f9:f8:c1:32:a5:c5:32:14:0e:82:de:4e:
f8:39:32:7a:91:ef:29:2c:12:54:c6:15:f1:cd:48:
eb:b0:31:06:a7:7d:5e:e8:9a:b7:e3:cd:f6:ae:9a:
3f:31:c9:10:90:c7:0b:67:79:56:81:26:02:2f:bf:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:B1:B3:63:9D:9D:A0:99:10:DD:0A:B2:61:D2:3D:80:FF:D8:A5
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f9:b9:ae:d0:2b:c3:8e:a2:7b:91:e8:2a:bd:a5:36:0c:97:
c9:88:2f:67:27:56:4a:47:e8:dd:d1:3b:6b:54:eb:4a:73:0b:
91:e7:82:a9:55:c0:8a:a6:5d:3e:d6:68:3f:d5:70:3e:66:9c:
d5:d8:9c:15:e1:96:0f:e0:70:9b:41:b9:29:b3:99:6c:e1:6f:
45:bb:ff:4e:71:53:a5:32:55:28:15:84:86:98:30:d5:9b:dd:
ae:ff:69:dd:a1:55:5d:d2:5d:7e:2e:a3:9b:47:71:60:73:d2:
a3:b2:b8:e7:f0:72:80:98:76:6c:6e:3a:ef:90:65:7a:e7:df:
d4:a2:7c:86:65:37:b1:ff:ea:52:c0:b7:2a:22:f4:61:76:ed:
dc:64:6d:ed:e8:4c:77:75:c7:e5:78:98:5a:47:57:4b:c4:b3:
bc:55:4d:32:5c:f7:ca:12:52:1e:8b:77:a0:22:49:8d:21:5c:
6a:aa:8d:2e:60:40:cd:72:df:be:f9:58:bb:82:b3:79:67:13:
aa:f0:7c:6d:8c:85:cb:ee:1d:63:fd:63:60:87:39:6f:d9:88:
7a:b8:71:1e:5b:41:17:d1:f2:43:c8:30:1d:86:a2:63:82:94:
9c:5b:aa:a7:c5:e1:c9:60:a2:67:4d:e0:13:9d:55:cd:2e:75:
fb:87:27:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw
RDMzMkFEMDEwHhcNMjYwNDA1MDIxNTMxWhcNMjYwNDEyMDIxNTMxWjAYMRYwFAYD
VQQDEw02OWQxYzVjMy03ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlKpwk40yy5xbOGz66Xe0h1EboAeoqxt9Oswq9eejCUjIRQyle2yaS+2fjlho
VdicDCeYIRGbVt5sYFegEM2eAXKat8VvIyYFVsSl0N1OmraUkvOpOVqxrOti7LzO
iC2Vqi5M8tjMjRSodBjHHXJW1qTrErkMq9QjN5PLR9wCN2OiAoF63DduDq0nKpM+
7XyBwge/pV6fuEss99USp2DB1VOGRZDYSwazGwBbsRvUllgp99K7LZWKF8+9hSC1
glMU6h5m96v5+MEypcUyFA6C3k74OTJ6ke8pLBJUxhXxzUjrsDEGp31e6Jq34832
rpo/MckQkMcLZ3lWgSYCL7/LCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKd6sbNj
nZ2gmRDdCrJh0j2A/9ilMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2
NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla
bGduRDZncFRIRm9OTXlyUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHPm5rtArw46ie5HoKr2lNgyXyYgvZydWSkfo3dE7a1TrSnMLkeeCqVXAiqZd
PtZoP9VwPmac1dicFeGWD+Bwm0G5KbOZbOFvRbv/TnFTpTJVKBWEhpgw1Zvdrv9p
3aFVXdJdfi6jm0dxYHPSo7K45/BygJh2bG4675Bleuff1KJ8hmU3sf/qUsC3KiL0
YXbt3GRt7ehMd3XH5XiYWkdXS8SzvFVNMlz3yhJSHot3oCJJjSFcaqqNLmBAzXLf
vvlYu4KzeWcTqvB8bYyFy+4dY/1jYIc5b9mIerhxHltBF9HyQ8gwHYaiY4KUnFuq
p8XhyWCiZ03gE51VzS51+4cn5A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:54 2026 by rpki-client