
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier: 2GE/Tv/vTpsqJqa7CBI9Yh02KGLZv6AexITAo7cb1/4=
Subject key identifier: 96:F0:BC:4E:70:09:44:5A:5C:CD:82:79:E5:B0:8D:A7:C5:1E:43:49
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number: 0184
Signing time: Mon 27 Apr 2026 04:25:18 +0000
Manifest this update: Mon 27 Apr 2026 04:25:18 +0000
Manifest next update: Mon 04 May 2026 04:25:18 +0000
Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: kWCUydXFccG8RJdUNvvd0hSQgMFmcA3qmsM6ZuDaL5c=)
2: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=)
3: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 04:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Validity
Not Before: Apr 27 04:25:18 2026 GMT
Not After : May 4 04:25:18 2026 GMT
Subject: CN=69eee52e-7753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:5d:e2:29:93:de:fa:00:67:5b:e0:fb:77:
69:97:b6:6d:95:5c:67:5d:3f:65:ef:4c:db:62:8d:
71:a5:92:4e:11:0a:db:7c:6e:1b:b8:84:5d:58:b1:
28:65:5c:29:3e:f2:71:c1:cd:6f:01:c4:09:6f:30:
5f:d3:83:0a:b5:52:03:a4:f5:ee:bb:86:1e:e5:22:
1b:10:47:46:c7:40:5a:b1:10:d0:35:3c:13:e1:72:
79:2c:30:3b:4d:4f:ae:e7:18:08:09:bc:88:72:6e:
80:0e:0a:34:63:9d:61:1d:d2:8b:91:25:b3:1a:b1:
38:05:f9:dc:04:9b:03:31:e5:52:e3:e0:50:30:6b:
ec:d4:49:87:4f:cf:ed:b1:c2:3d:58:ac:d6:9a:fc:
0b:46:19:8d:12:43:8d:43:5f:04:14:7a:d5:3d:70:
08:ef:38:2f:ee:7a:f7:f9:f8:4f:dd:c6:09:41:37:
9f:8a:27:3c:3a:b9:af:31:ac:f7:96:6a:a9:0b:a1:
37:f6:83:f1:dd:fb:bb:e2:cf:9e:9f:0f:3f:fb:5a:
a7:5d:55:37:fc:c1:82:ec:ba:53:94:f1:24:2b:ad:
51:6c:a2:fe:bb:7d:25:53:0d:3a:80:93:2b:c8:ec:
17:94:57:36:e5:df:60:8b:3b:0c:20:ef:de:81:45:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:BC:4E:70:09:44:5A:5C:CD:82:79:E5:B0:8D:A7:C5:1E:43:49
X509v3 Authority Key Identifier:
keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:3e:40:d3:c4:6f:3a:31:94:53:3d:3d:27:39:32:06:22:
0d:d6:12:85:8c:1b:36:ec:3d:b8:19:77:65:99:7c:55:b7:4d:
31:c2:dc:0d:1a:d6:9a:49:c2:23:db:4f:ec:22:25:13:1d:9d:
19:68:44:ad:50:94:c9:60:63:c5:50:cc:e4:cc:33:dc:2d:a7:
b3:7c:43:bc:61:a1:e8:be:b5:c4:43:6d:74:52:5d:93:ec:3a:
06:00:2a:ac:fc:67:c9:e3:8d:20:a0:30:83:5d:bd:0d:13:b6:
7d:57:f3:75:db:c9:23:13:98:02:8c:4c:a6:38:15:0d:c2:c7:
5d:63:1d:ce:6c:ea:a9:c6:c3:2b:87:12:10:dd:5d:16:58:47:
87:58:13:c6:e3:c3:d1:d2:48:13:0f:f7:40:76:6d:6f:79:94:
ac:c8:ec:46:a5:1f:83:83:89:11:36:6c:b7:23:c9:ca:31:4e:
30:b7:5d:28:0d:92:5d:95:df:cd:25:10:61:82:60:33:48:09:
7a:73:bb:2d:e2:95:fb:1c:d2:90:0c:fe:ed:64:07:28:52:14:
b3:65:f2:a8:80:47:f4:29:20:d2:90:77:e4:a5:69:9e:35:1b:
66:6d:82:38:e5:43:42:09:42:a1:40:d7:a6:60:17:92:58:fd:
ef:af:60:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky
MUNERjQzOTIwHhcNMjYwNDI3MDQyNTE4WhcNMjYwNTA0MDQyNTE4WjAYMRYwFAYD
VQQDEw02OWVlZTUyZS03NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkpd4imT3voAZ1vg+3dpl7ZtlVxnXT9l70zbYo1xpZJOEQrbfG4buIRdWLEo
ZVwpPvJxwc1vAcQJbzBf04MKtVIDpPXuu4Ye5SIbEEdGx0BasRDQNTwT4XJ5LDA7
TU+u5xgICbyIcm6ADgo0Y51hHdKLkSWzGrE4BfncBJsDMeVS4+BQMGvs1EmHT8/t
scI9WKzWmvwLRhmNEkONQ18EFHrVPXAI7zgv7nr3+fhP3cYJQTefiic8OrmvMaz3
lmqpC6E39oPx3fu74s+enw8/+1qnXVU3/MGC7LpTlPEkK61RbKL+u30lUw06gJMr
yOwXlFc25d9gizsMIO/egUVkWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbwvE5w
CURaXM2CeeWwjafFHkNJMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC
RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI
VktVMVBWY0g1WGtoemZRNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUXE+QNPEbzoxlFM9PSc5MgYiDdYShYwbNuw9uBl3ZZl8VbdNMcLcDRrWmknC
I9tP7CIlEx2dGWhErVCUyWBjxVDM5Mwz3C2ns3xDvGGh6L61xENtdFJdk+w6BgAq
rPxnyeONIKAwg129DRO2fVfzddvJIxOYAoxMpjgVDcLHXWMdzmzqqcbDK4cSEN1d
FlhHh1gTxuPD0dJIEw/3QHZtb3mUrMjsRqUfg4OJETZstyPJyjFOMLddKA2SXZXf
zSUQYYJgM0gJenO7LeKV+xzSkAz+7WQHKFIUs2XyqIBH9Ckg0pB35KVpnjUbZm2C
OOVDQglCoUDXpmAXklj9769gBQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 07:22:32 2026 by rpki-client