
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: xwVzW0HD7HkHLejKcc1lKu3Z1LJYLIM0vCsiEbJtxmw=
Subject key identifier: FE:BF:82:64:81:63:BC:1B:1F:14:EC:87:81:15:B4:B9:B4:95:60:00
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 06D2
Signing time: Sun 26 Apr 2026 22:14:23 +0000
Manifest this update: Sun 26 Apr 2026 22:14:23 +0000
Manifest next update: Sun 03 May 2026 22:14:23 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: cv0RblaoOL+7nZxkjcZqEnmjtajSTXCzreg+lLIyIzI=)
2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
3: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
4: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Apr 26 22:14:23 2026 GMT
Not After : May 3 22:14:23 2026 GMT
Subject: CN=69ee8e3f-8891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:2c:6e:fc:06:40:74:6a:69:b0:ea:cc:d1:
80:04:d4:65:8e:b9:55:16:92:9d:b4:98:7a:fe:bf:
a3:e3:73:c7:05:81:b5:c5:d1:04:bb:18:0a:19:67:
9e:a6:38:f5:fd:db:ad:06:9d:57:94:68:82:4c:22:
de:20:27:97:ca:18:01:68:e7:7e:9f:de:e5:ef:fc:
82:8f:d6:2b:98:9d:dc:27:c3:2d:cc:b0:fc:9e:e4:
e3:9f:25:bb:b8:9e:cf:d2:d0:d6:c7:a3:80:7f:a5:
d8:d0:75:3b:ab:a7:4d:b2:66:e3:8d:22:91:a8:46:
11:18:b3:d4:a8:b7:93:4c:4c:d8:fc:7f:19:48:aa:
fe:bd:3c:a7:ad:73:32:30:5d:e0:02:99:c3:06:9b:
b9:51:3d:ad:dc:7f:e9:db:05:ea:17:c0:4f:91:9d:
8d:46:4f:41:e2:94:f6:8e:e1:fb:a8:33:30:35:79:
f2:d9:31:b4:49:71:1e:19:7c:53:2f:85:16:83:8b:
9c:48:ad:91:6e:47:38:97:cc:63:9b:e5:3c:15:a7:
b5:1f:a4:31:52:5b:5f:ac:ef:a3:b7:d0:ab:de:c4:
7e:b6:ce:ae:38:85:c1:e6:9c:76:25:f6:76:3c:c1:
0f:c2:b5:b8:ae:b4:ab:8a:65:d9:40:39:a4:0d:61:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:82:64:81:63:BC:1B:1F:14:EC:87:81:15:B4:B9:B4:95:60:00
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:57:15:ce:ea:8e:d3:7b:b4:66:09:5a:c6:f0:33:e8:7e:93:
55:f6:61:a4:9b:ed:ca:ea:96:b1:a6:48:32:ed:53:6c:7c:a1:
ec:ea:0d:0d:52:c7:cd:9e:5f:56:9c:b2:19:db:6c:de:ac:c0:
b3:c8:01:ef:7e:fa:d8:0d:7b:83:06:fe:c7:3e:d4:cd:61:33:
7d:72:9e:42:2e:b4:97:4a:16:82:31:f3:93:50:57:f7:c7:f9:
b2:bc:f2:b7:90:8b:aa:5c:d7:eb:a7:3c:78:0a:24:f6:b5:91:
ee:b0:ed:fd:8d:8a:20:0d:27:8f:13:73:62:eb:fa:f1:b3:4c:
81:63:7c:60:d4:3c:ac:87:e1:48:13:40:50:a2:f1:d5:8f:8e:
49:d2:ce:65:3b:62:2c:90:55:9f:e9:61:0a:ee:bb:d1:28:13:
b5:e6:75:65:da:26:a2:ac:c4:88:3d:5c:6c:c5:d2:60:a8:2d:
9d:77:49:7d:a8:f5:dd:db:e8:47:50:63:f5:b2:63:d1:2d:ea:
63:26:00:76:67:91:61:46:90:8b:01:10:b4:bc:f5:b2:95:39:
f5:6b:a9:62:7e:13:a6:c7:28:37:ff:6b:b2:27:0d:29:09:72:
13:f2:dc:df:69:e7:96:b6:9b:15:ac:b5:d2:b4:d1:83:04:02:
92:e6:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:42:12 2026 by rpki-client