
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: AHUqknolfoWVTaZK09Egjaq2wes3boCS4MtbSN9eJO0=
Subject key identifier: A3:A8:B7:5D:94:B5:5C:6D:FC:68:F4:65:62:B8:59:87:11:46:65:4F
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 0893
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 0868
Signing time: Mon 04 May 2026 20:45:45 +0000
Manifest this update: Mon 04 May 2026 20:45:44 +0000
Manifest next update: Mon 11 May 2026 20:45:44 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: Mtw+B6OGDA+2zmb2zMUbD8Y4hpNgT5V3zbnPlRf/FvQ=)
2: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=)
3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=)
4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=)
5: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=)
6: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: May 4 20:45:44 2026 GMT
Not After : May 11 20:45:44 2026 GMT
Subject: CN=69f90579-a346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:6b:74:76:9f:11:5a:78:12:d2:c1:cd:3c:
de:4f:3d:dd:2f:ac:f1:17:1c:ca:e3:1f:01:01:2d:
e1:f2:dd:63:32:7b:bb:e3:8c:8d:1e:fe:da:a7:2f:
99:64:f0:5b:5e:ab:d8:04:90:df:e0:d5:20:e3:ef:
df:2a:44:b9:e0:c3:ee:9b:3b:ec:52:82:c6:bc:0d:
3b:f1:f2:13:21:bc:92:43:41:dd:85:c5:36:78:1d:
94:6d:d3:f5:8b:f5:ca:b6:d7:bb:05:23:b7:db:40:
2e:83:80:2a:d8:3d:75:83:0f:b8:b3:90:05:11:9a:
e3:3b:c1:1a:63:3b:16:9d:7f:f5:a9:a9:ed:27:e1:
57:a6:35:bd:d1:1f:62:5b:1d:43:4e:81:e5:ab:44:
c2:68:ba:b2:40:21:5a:35:8a:d6:1c:4b:3e:bd:9e:
8d:ff:cc:ad:af:54:29:b0:3d:71:2b:61:aa:fe:00:
33:2f:34:9d:67:42:6d:c0:a6:46:31:70:63:65:81:
7c:5c:5f:7f:3f:3d:2a:cc:3f:71:02:ff:a0:1c:78:
b3:e5:1c:55:34:26:f1:04:98:e8:f6:4c:03:65:73:
73:8d:3c:27:6c:3f:fb:4f:70:68:4d:3c:e8:0a:bc:
ff:dd:e0:42:8c:ba:79:a5:b5:4c:0f:69:9b:0e:e9:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:B7:5D:94:B5:5C:6D:FC:68:F4:65:62:B8:59:87:11:46:65:4F
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:81:23:d1:3c:67:17:fd:43:67:7e:3f:8f:d4:a6:6f:d3:99:
2c:d7:cf:de:3e:f9:dc:80:e1:1b:c5:f1:f5:82:2a:81:17:42:
d1:da:ae:ef:4d:b7:19:3e:1b:63:0c:6b:96:ad:b8:e2:bc:f3:
64:6b:69:c7:95:4d:ab:26:27:66:b0:8b:9d:19:d9:4a:a7:45:
31:f8:0a:54:6b:98:e1:7c:b0:82:c7:e5:b9:ef:e7:8c:ea:07:
cc:b6:7d:f8:77:57:fc:61:11:af:bb:a9:c4:38:02:41:bc:71:
e2:1b:7a:70:91:eb:5e:37:c7:82:63:e0:03:f4:ff:a4:f8:13:
2a:42:8c:e3:d8:3d:19:e8:3d:da:9a:96:f5:42:7d:01:4d:f8:
02:d4:00:5e:d3:92:4c:a2:f0:7f:cf:a4:96:7f:42:1d:8b:57:
9e:00:c1:42:b2:81:df:c5:50:35:28:fa:ba:44:60:28:32:b4:
66:7d:41:f0:dd:54:ed:b0:6c:4d:df:7b:5b:40:88:b7:76:81:
6d:22:48:5d:38:61:10:3c:e7:e2:6c:c7:89:c3:b0:75:be:b1:
d4:05:ec:b1:a3:db:eb:5c:41:52:2a:af:b1:13:be:a6:90:9d:
58:57:ac:f4:d2:89:57:66:80:69:2a:7e:86:3a:af:84:e6:e6:
fb:35:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 14:03:43 2026 by rpki-client