
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: 347KPmdi/bRaXRDxzQbeB4yMRSGNdrkLaDKrqYji2vI=
Subject key identifier: 62:66:F1:C4:D7:9F:F6:1F:9A:26:C1:65:93:19:37:12:09:3E:BB:09
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 0194
Signing time: Sat 21 Mar 2026 03:39:53 +0000
Manifest this update: Sat 21 Mar 2026 03:39:53 +0000
Manifest next update: Sat 28 Mar 2026 03:39:53 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: E0jMbHOxq7f5NT/QwIkwKhsSxWqVyBFBvbB1w/R+RJ8=)
2: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: 69VjdrreL7j6MQXGXH1spgGTbaEO3hjgR032vB7O5e8=)
3: B2F952F624D411F1AA718F4CAB833773.roa (hash: uzrNk/ttRA0V5QFMV/D2N3f4BnOOXaAYpx7DnAlMrV0=)
4: DB21824E24D411F1AAE44A56AB833773.roa (hash: sd7eWbgQLT8mF/ebnKb4PSaZd/04vpDcBO1zje9d/YI=)
5: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: hkREO2rJxk9zu25VhNr6Vq8tiIR0z+nxnfZpEJOP+I8=)
6: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: BvVm+cdTU27eoQKqsYV8ea/BQUXoFb6HaNPZQI3tKQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Mar 21 03:39:53 2026 GMT
Not After : Mar 28 03:39:53 2026 GMT
Subject: CN=69be1309-0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:23:74:a3:01:15:29:98:df:ee:17:a1:1a:
73:84:e6:49:28:b5:d8:94:13:8f:db:00:fd:0c:15:
3b:0f:52:bd:5e:58:e3:57:5f:4e:b1:16:ab:ce:ab:
e1:2d:30:0b:e0:ea:ee:22:8c:9b:89:ee:f9:c8:20:
c8:07:2e:de:f1:1e:53:35:d0:cc:37:5f:bc:e4:f7:
4b:31:3a:e2:43:e5:34:ac:19:03:dc:e6:71:ac:1a:
ff:45:b4:b0:fe:bb:66:90:63:7f:54:32:5c:a2:71:
b8:6a:a2:21:06:86:ac:3d:e3:6c:17:a8:be:3d:69:
5b:bb:fb:7b:b0:63:c2:69:5f:85:d3:45:5a:e9:d9:
75:ab:7a:e0:55:a3:d6:95:13:35:19:0c:6a:ef:fa:
12:ab:77:40:54:f7:77:f7:24:b9:c1:80:20:1e:e1:
af:7c:2c:27:72:fc:4b:59:25:b2:49:f3:e7:16:89:
ae:b9:ea:e5:2f:64:86:ae:7b:7d:48:2f:0d:b6:3e:
fc:b7:63:0f:89:90:59:5c:95:c0:97:c0:6a:ec:12:
b2:54:2d:37:fc:af:17:0c:50:66:f0:24:22:9f:b1:
68:3e:d9:5c:9f:b1:da:b0:55:d2:03:ed:14:bc:e7:
05:a7:2f:c8:f9:56:fe:35:10:ab:f3:77:cc:b1:d2:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:F1:C4:D7:9F:F6:1F:9A:26:C1:65:93:19:37:12:09:3E:BB:09
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1f:e0:79:28:b4:33:84:5b:3a:c1:63:36:84:f8:cb:0c:d3:
9d:36:b2:d8:b3:ed:25:bf:2f:82:bb:ce:43:a9:b1:50:41:a7:
1a:a0:17:3c:e3:87:76:99:30:fd:7a:8d:8c:52:1d:d4:f7:0e:
fa:79:4f:09:6a:d0:fb:08:56:73:e6:43:e9:4a:b0:64:1c:45:
a7:a6:d5:64:c3:8e:1a:d6:ab:f3:b3:45:df:ca:e6:2c:37:5a:
bf:d8:07:ef:82:d4:1c:1d:a3:b2:d2:db:bf:f0:b5:33:e6:f4:
8a:7f:9b:5b:a0:df:84:ab:e1:79:24:ab:1f:d0:32:54:17:f9:
27:65:d3:12:9f:06:ec:c8:d4:0c:ae:5c:8d:08:df:36:e4:f8:
71:fb:dd:4a:33:a9:fa:6c:10:c5:62:d9:13:58:6d:ad:3f:1c:
38:b7:99:60:8b:fb:a6:e7:fd:37:ba:fa:a0:02:8e:fd:f2:ca:
22:ef:87:9b:65:c7:7e:cd:ee:6f:07:48:9a:56:4f:2f:00:cd:
04:06:5e:07:6f:ab:6d:7a:e9:90:d0:78:28:fb:5d:cf:a6:7d:
0c:a4:ac:b5:c9:b1:f7:2c:1c:f9:c8:03:18:87:0e:61:73:e4:
43:8e:05:e4:93:55:ce:71:bf:c0:37:f2:eb:c4:80:f2:fc:19:
11:11:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:11:21 2026 by rpki-client