
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
File: cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json)
Hash identifier: q4Z0U2rjaYmUX4iUcYvovT/F/m6ReOcq5QWlY44jHLo=
Subject key identifier: 6C:4A:1F:01:07:F1:9C:3C:CD:99:10:E0:A2:9B:5E:76:F8:21:0A:F0
Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Certificate serial: 0CE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
Manifest number: 0CD2
Signing time: Sat 04 Apr 2026 18:14:06 +0000
Manifest this update: Sat 04 Apr 2026 18:14:06 +0000
Manifest next update: Sat 11 Apr 2026 18:14:06 +0000
Files and hashes: 1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: OFjVqlWar7Tu8t+0MQha7u3d974hj+RUAKIEyolq5w0=)
2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: 8tkkl6lhiYhqYdLO3UVOSM4D9OeTsXNmgBLsQxqUjjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Validity
Not Before: Apr 4 18:14:06 2026 GMT
Not After : Apr 11 18:14:06 2026 GMT
Subject: CN=69d154ee-0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:d6:5b:56:e2:b7:54:f5:91:f3:de:db:00:
ec:f7:9f:a9:6e:7c:dc:c4:d6:40:f0:40:8e:b8:e9:
f0:ed:d3:73:f4:20:e0:4c:f4:5f:2c:0f:81:9b:0b:
d8:6d:e9:37:5a:81:83:3f:b0:5b:8a:6c:36:47:58:
f7:cf:94:cb:dc:33:b4:2a:1d:4b:78:37:3f:21:df:
4c:00:82:89:53:32:5d:e1:f0:f3:e9:4c:a1:eb:45:
3b:1f:13:94:15:05:90:d9:1e:8b:c1:4f:00:b1:3e:
38:b1:4a:58:fe:d8:8f:7a:61:5d:36:39:0d:1c:9c:
85:48:7b:76:03:b8:e7:27:b6:be:6e:78:0e:ad:43:
87:69:aa:bf:e9:79:87:67:d8:b5:61:79:9a:97:2c:
fa:ae:1a:a3:06:6d:01:1d:7b:0d:95:67:a6:a0:da:
b3:c7:51:5b:8e:ca:ce:df:6d:f2:a0:00:cd:9d:0a:
02:f7:80:e3:45:22:a5:ea:0b:1a:ef:d5:0b:a5:89:
cf:00:34:cd:1b:a0:8b:a7:ec:32:5d:b3:2e:e7:25:
ec:ec:a4:02:68:ce:88:36:a4:88:1a:da:19:07:55:
c4:e7:e6:e8:5d:c9:67:d3:1e:41:a1:3c:5f:19:66:
e4:d1:5e:64:1d:6b:7b:d9:6e:ba:ff:46:7d:78:ee:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:1F:01:07:F1:9C:3C:CD:99:10:E0:A2:9B:5E:76:F8:21:0A:F0
X509v3 Authority Key Identifier:
keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:56:e6:e4:95:bf:24:92:21:9a:a3:01:8f:10:32:e8:9f:
50:79:ad:73:bf:67:c3:86:3d:e5:61:36:a1:05:e0:1f:29:40:
a7:6e:23:e6:77:4f:08:9b:e4:b1:db:49:91:26:16:7c:7e:c4:
2c:dd:72:38:cc:30:01:3b:42:93:b6:1f:4f:07:7e:f4:11:97:
20:d0:f5:0f:9a:dc:bb:a5:f9:9e:39:51:51:b6:cd:ac:23:e9:
9a:8e:32:f6:5c:19:1a:c6:3a:10:20:e9:bc:a0:55:cd:de:83:
e3:54:a0:97:e6:13:85:c3:a4:97:c5:5f:e2:7b:ba:dd:6c:8a:
98:17:1e:72:f1:bd:69:6d:40:e4:a9:7c:58:02:6a:8e:4c:0e:
5f:3e:d0:5f:7a:e8:74:0b:6e:c6:e7:cf:14:ba:f2:7e:1d:d8:
04:a2:e9:ae:03:83:11:c1:b3:57:bd:ce:cd:65:41:71:40:85:
4f:c3:89:0a:40:52:59:ee:5d:1e:67:46:bf:a3:38:1f:33:b5:
ba:2e:d1:d6:90:1d:d1:0e:a6:9a:11:bb:c8:45:30:7b:fd:be:
fb:41:fa:76:33:3f:1b:13:1d:6f:0e:3f:ad:bf:bf:01:6c:29:
44:e4:c0:6c:6b:af:1a:8c:f4:f9:55:66:5b:d4:b6:f4:99:c3:
73:81:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:23 2026 by rpki-client