
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: qzhcG2DenRrTu0D96bKqwt9NmX9I9Xe01K1U/OCCvSA=
Subject key identifier: F3:AD:1F:E8:88:10:28:37:F8:EC:92:C4:87:14:BC:DC:1E:E2:FB:07
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 0856
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 084C
Signing time: Sat 04 Apr 2026 20:36:02 +0000
Manifest this update: Sat 04 Apr 2026 20:36:01 +0000
Manifest next update: Sat 11 Apr 2026 20:36:01 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: L45F8zLoFLL9ZxDZahmTq9w9WWzTJhokOs/RfOGTAsQ=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Apr 4 20:36:01 2026 GMT
Not After : Apr 11 20:36:01 2026 GMT
Subject: CN=69d17632-2564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:ce:13:2e:a1:9e:6e:8d:d2:32:90:a7:85:
b7:fc:64:8f:2d:2b:0f:bb:11:43:9c:39:e6:e0:56:
2a:54:91:f4:6d:e1:f5:46:e1:de:41:3c:1d:64:d2:
ae:3a:26:2d:5c:28:dd:de:0f:f1:09:8c:97:39:36:
3d:e4:76:1b:01:00:35:37:1d:0c:94:80:68:10:8a:
14:c7:2f:6d:be:8b:6e:8a:23:43:f8:cb:08:71:bf:
70:f2:13:48:9c:f7:ff:74:13:16:10:e2:8f:92:8d:
17:0d:b2:f8:84:3d:5d:f8:45:ff:25:1a:12:d4:30:
6f:53:a5:cd:65:0f:4c:3f:63:2c:39:6a:92:52:85:
86:8d:b3:64:08:94:8f:73:9e:c4:e9:ca:79:4c:e3:
a6:c0:19:ca:09:ba:e9:e4:ec:83:59:33:74:47:99:
26:7d:2a:5b:58:b3:7a:ac:9f:ef:96:20:6a:1f:6c:
c2:6f:2c:ef:38:79:34:f1:ba:c0:55:2b:1a:d6:94:
12:cb:0d:f1:18:ff:7f:be:1e:e2:a1:89:70:24:11:
5c:e2:62:93:f7:c9:40:3c:2a:92:14:08:a0:ac:8c:
cf:07:a0:ef:0a:96:77:7b:e3:61:9d:d9:51:2c:a6:
dd:59:06:99:56:e4:fe:f4:08:40:79:80:cb:ee:6e:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:1F:E8:88:10:28:37:F8:EC:92:C4:87:14:BC:DC:1E:E2:FB:07
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:a1:78:1d:a9:b3:59:9c:ce:63:9c:e7:6f:d6:ba:32:2c:
4c:9f:8d:da:bd:59:84:97:bd:2c:5c:4a:08:01:d2:1c:05:24:
e6:55:99:56:b4:00:e6:32:08:0d:d0:32:ea:da:14:e8:a0:99:
32:ba:7a:8d:4c:ca:85:a3:2e:b7:24:9e:22:47:d2:80:d4:cf:
5b:f7:89:f0:61:aa:21:a4:e3:50:7a:b9:30:98:c8:5d:d8:c8:
4c:75:bf:c5:fc:e3:24:72:5f:13:51:32:f2:74:04:ab:ed:dd:
47:b3:56:71:20:07:3b:52:11:d0:36:3f:85:4d:f2:21:0a:cc:
38:7a:dc:c4:e0:23:58:5f:97:26:1c:b7:19:35:29:30:5b:5b:
61:cd:1c:09:b7:0b:1b:56:fa:91:2e:64:a8:07:7e:35:d7:37:
04:66:a0:da:ab:79:de:83:17:8f:d8:77:55:83:44:e6:36:44:
69:2d:e2:51:db:7d:d2:d0:a8:e4:ed:42:e4:c2:17:1b:95:83:
0e:f1:0c:f0:7a:7a:a3:f4:4e:a0:3e:2c:17:b2:da:c5:9e:ae:
d6:22:32:bc:ad:f0:3f:5c:17:2b:d8:b8:3a:1a:1f:ea:a1:88:
ac:21:3a:ce:a5:12:6c:da:f2:63:a4:49:f4:f3:db:b3:1d:f0:
93:30:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:00 2026 by rpki-client