
$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json)
Hash identifier: BDdOZlq5VE7p39wIfQndeJKdVMZFnyLzAi+QRKRUvMg=
Subject key identifier: 84:F5:27:0C:16:7D:47:45:5E:D0:B8:6A:2F:5F:8D:32:6D:1B:AB:F8
Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
Manifest number: 0272
Signing time: Mon 27 Apr 2026 01:54:11 +0000
Manifest this update: Mon 27 Apr 2026 01:54:10 +0000
Manifest next update: Mon 04 May 2026 01:54:10 +0000
Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: PcPxGmYP2mw9R9U+LRPHarexKrMlR8gOfQ8E1zgCbnI=)
2: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: N1EuDA/H1b+aKfv07j358tw2r8s6Ntwxnui6Zw/IAWc=)
3: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: Fb1xzXA0N8kLKjAHbkG0rnvKJoUR3GKUs1zEAFSrTAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Validity
Not Before: Apr 27 01:54:10 2026 GMT
Not After : May 4 01:54:10 2026 GMT
Subject: CN=69eec1c2-4118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:68:d9:da:b3:b7:7a:3d:5f:79:e8:e0:0c:
14:e2:ac:31:8b:59:50:7e:51:12:99:bd:9f:f9:44:
d3:e7:26:61:da:c9:0e:ae:97:7f:6b:5e:17:b1:c8:
fc:5a:a8:64:08:7c:3f:69:c5:f4:b5:a6:64:8a:cb:
cf:55:e8:21:8e:31:98:9d:78:6a:66:90:8d:7c:aa:
da:67:87:fe:cf:b2:c4:ac:18:f1:19:3c:ed:7f:ff:
5b:2e:22:ed:7a:58:ed:33:16:ff:3e:61:04:c5:a1:
40:b0:8e:c4:00:4b:4e:4e:f9:44:d9:d5:e2:a4:08:
8c:eb:58:d5:3e:3e:a6:71:0d:4b:62:8e:e7:46:e6:
e7:3e:e3:23:4a:b6:0c:5f:c2:9b:1e:53:7a:6b:d3:
bb:42:69:b2:80:f8:ac:3f:a3:0c:fc:69:08:5e:9a:
67:45:2b:c5:74:2f:dc:63:33:54:90:49:f7:3e:6f:
d0:a8:a3:33:9d:cd:4f:ce:76:fe:83:6a:ec:24:2f:
6a:b7:ea:34:18:e4:e2:81:ae:ad:cb:63:42:03:37:
c4:05:6c:60:2a:9b:46:44:2b:bc:7a:40:29:4b:07:
b4:34:1e:8e:e5:8e:d2:c0:d0:87:92:2f:bd:48:89:
cb:7f:69:b3:a6:3c:d9:04:4e:13:a5:1b:23:eb:3e:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:27:0C:16:7D:47:45:5E:D0:B8:6A:2F:5F:8D:32:6D:1B:AB:F8
X509v3 Authority Key Identifier:
keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:82:76:34:61:9e:8b:1d:3a:fc:e0:36:c4:99:ef:37:60:bf:
c2:f3:78:5b:e2:4c:dc:72:09:c6:69:e1:9f:f5:6e:b8:3b:d7:
ad:b6:6d:ec:f1:a9:f6:da:f8:fa:5e:a7:41:fe:aa:be:ad:bf:
b1:b0:3d:23:c5:cf:be:1d:39:af:3e:68:11:a6:80:5f:34:32:
2e:58:ae:6f:97:a0:58:1f:0c:34:a7:eb:0d:7f:99:89:50:5b:
ec:b5:8d:4c:a5:8c:80:16:45:43:67:09:1c:04:20:4c:09:2c:
0b:d2:39:b1:f6:96:22:8c:b6:0d:67:c1:ea:3f:a3:8d:9a:dc:
22:bf:65:b0:db:84:41:1a:22:0b:bc:50:48:cf:20:a1:c7:dc:
a9:6a:be:0e:3c:de:15:68:04:7c:3b:1d:86:d2:46:03:0e:40:
bb:36:bb:a9:bb:9e:af:3b:64:d2:8f:e9:92:20:f0:8e:a6:ec:
a7:e8:81:ee:a8:f3:60:05:a4:22:2e:1a:a3:f9:89:98:3f:00:
1b:2b:89:b9:ef:4f:01:d1:09:82:c8:5b:88:26:ac:cb:e5:26:
fb:22:41:e1:e4:99:24:b0:c9:3b:ca:7d:83:bc:32:02:4d:3b:
fd:a2:4a:dc:9f:4d:49:b4:a0:8b:de:cf:f0:95:62:55:4d:65:
a6:c6:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:23:44 2026 by rpki-client