
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: WvUOXQ6OIe2bGBgHn50cqZVeEV/bEESjbLm7lrAgm/s=
Subject key identifier: 83:A3:35:B8:F8:EE:30:82:1A:9A:89:94:02:68:01:EC:34:C1:CF:AB
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 011F
Signing time: Sun 05 Apr 2026 05:14:58 +0000
Manifest this update: Sun 05 Apr 2026 05:14:57 +0000
Manifest next update: Sun 12 Apr 2026 05:14:57 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: +9lU4sbiSk/Yq5pzv6M9P0HZ3xr86jNJN85zgYcAYt8=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Apr 5 05:14:57 2026 GMT
Not After : Apr 12 05:14:57 2026 GMT
Subject: CN=69d1efd2-0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:2e:d5:57:82:18:e8:1c:39:98:31:19:da:
81:31:1a:c2:c4:ec:d6:31:58:4d:7c:0c:09:b4:d0:
20:9a:62:f5:fa:b5:a7:b2:63:0d:87:76:7e:8b:42:
e0:6f:47:99:ad:ea:24:a7:bb:0d:31:d8:ab:06:cb:
01:dc:76:4b:f3:b3:ff:a9:18:c0:91:56:09:d8:72:
e9:5e:88:8a:84:d7:ee:8b:eb:44:f7:4e:51:23:8c:
e0:31:60:ec:e6:96:d6:2b:be:4c:c4:7a:d7:e3:b7:
c4:d0:3e:36:e9:e4:28:d2:09:ba:53:e6:4b:e0:db:
e9:74:55:a3:17:01:0d:75:ca:93:0b:4a:c4:5d:db:
09:8b:0f:88:94:17:57:1e:bd:20:95:26:87:13:c1:
a7:ea:18:2a:a9:c8:58:04:8c:73:b4:f8:9f:0c:b4:
7d:1c:c3:f5:d3:da:9b:2e:cb:83:ba:48:22:46:58:
6e:1b:05:c2:f8:81:99:42:3d:20:8e:a4:fd:55:de:
eb:ed:28:b1:d4:22:f8:31:a6:1c:0b:f9:a0:d4:e2:
6a:a6:b4:e8:55:77:6e:49:2a:87:96:5b:19:a0:f7:
ba:47:a0:d9:77:a1:1c:8b:d8:51:2f:72:4b:cc:56:
14:5e:09:bc:77:5e:a0:92:c3:96:ba:71:c2:8b:d1:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:35:B8:F8:EE:30:82:1A:9A:89:94:02:68:01:EC:34:C1:CF:AB
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:34:42:99:72:18:85:25:b0:21:30:fa:37:ec:c9:7d:5e:
4d:b0:70:5d:f8:7e:5b:2a:59:57:cd:fb:52:de:a1:67:f7:b0:
91:4f:0f:e9:42:ef:cd:ba:00:63:15:61:8f:29:ab:1c:e3:ec:
e6:07:05:44:63:e6:da:5c:a9:a7:8f:2b:5b:c6:1a:f0:d2:74:
6e:9e:c0:28:14:cd:f4:56:22:90:a7:04:ad:7f:b6:ad:8a:e2:
77:7e:95:fc:d4:b2:df:b8:49:84:80:fd:6d:eb:d9:c6:9a:e1:
8c:49:6b:96:c0:38:93:fe:a8:7c:08:e6:ed:a5:48:5a:c4:69:
99:2c:a2:1c:a5:93:22:e2:b4:14:52:93:b5:13:46:c7:ce:78:
e0:fb:26:76:ca:7e:5c:5c:c0:90:ab:74:6b:ea:09:cf:59:dc:
37:e7:a9:78:96:db:7e:89:80:bd:be:75:95:ab:e5:b7:8f:5d:
74:df:91:e5:42:99:cd:91:8b:89:71:aa:13:22:41:a8:ed:96:
92:99:03:41:60:27:9c:1f:13:a8:95:76:65:47:47:21:89:ae:
7f:29:b6:bb:5f:5e:a5:75:db:8b:48:b6:5a:e8:39:da:bf:fb:
f8:63:70:49:40:d7:bd:cb:ec:14:b8:51:cc:da:57:d0:ad:24:
da:13:c0:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy
NjBCOTk1RTYwHhcNMjYwNDA1MDUxNDU3WhcNMjYwNDEyMDUxNDU3WjAYMRYwFAYD
VQQDEw02OWQxZWZkMi0wZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlFcu1VeCGOgcOZgxGdqBMRrCxOzWMVhNfAwJtNAgmmL1+rWnsmMNh3Z+i0Lg
b0eZreokp7sNMdirBssB3HZL87P/qRjAkVYJ2HLpXoiKhNfui+tE905RI4zgMWDs
5pbWK75MxHrX47fE0D426eQo0gm6U+ZL4NvpdFWjFwENdcqTC0rEXdsJiw+IlBdX
Hr0glSaHE8Gn6hgqqchYBIxztPifDLR9HMP109qbLsuDukgiRlhuGwXC+IGZQj0g
jqT9Vd7r7Six1CL4MaYcC/mg1OJqprToVXduSSqHllsZoPe6R6DZd6Eci9hRL3JL
zFYUXgm8d16gksOWunHCi9FR1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOjNbj4
7jCCGpqJlAJoAew0wc+rMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2
RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS
SDhXdHVFQTNpU3NtQzVsZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYLU0QplyGIUlsCEw+jfsyX1eTbBwXfh+WypZV837Ut6hZ/ewkU8P6ULvzboA
YxVhjymrHOPs5gcFRGPm2lypp48rW8Ya8NJ0bp7AKBTN9FYikKcErX+2rYrid36V
/NSy37hJhID9bevZxprhjElrlsA4k/6ofAjm7aVIWsRpmSyiHKWTIuK0FFKTtRNG
x8544Psmdsp+XFzAkKt0a+oJz1ncN+epeJbbfomAvb51lavlt49ddN+R5UKZzZGL
iXGqEyJBqO2WkpkDQWAnnB8TqJV2ZUdHIYmufym2u19epXXbi0i2Wug52r/7+GNw
SUDXvcvsFLhRzNpX0K0k2hPAfg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 20:57:16 2026 by rpki-client