
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier: nrfpjsRB2FGSc04h2lvBezRqSpPQT5w6lRUQVRR3s8c=
Subject key identifier: 09:AB:B2:9F:C9:F9:38:62:EC:8C:10:AA:DA:04:E8:2B:24:38:55:3E
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number: 0632
Signing time: Sat 04 Apr 2026 22:41:29 +0000
Manifest this update: Sat 04 Apr 2026 22:41:29 +0000
Manifest next update: Sat 11 Apr 2026 22:41:29 +0000
Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: AxFx8/Nh9hakVrUERSeS36twNb6VgUdUVkBHFgwfrHQ=)
2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: leZ0cCoOlR1k5yKepuZNpVBVHzz4KHAcvcnF8Cllio0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Apr 4 22:41:29 2026 GMT
Not After : Apr 11 22:41:29 2026 GMT
Subject: CN=69d19399-d566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:fe:a9:73:fc:c4:ec:dc:2d:4b:80:31:da:
9c:18:f8:c9:f4:e1:77:0b:0c:33:70:8f:b2:e9:b1:
05:27:7c:8c:6a:80:25:79:a1:ca:37:68:5b:0b:34:
6b:49:68:db:b6:35:b6:39:e8:17:5a:0b:22:c7:81:
d4:6a:aa:63:50:bc:33:63:38:b8:ba:23:22:05:c7:
51:60:a5:81:9a:df:fc:31:7e:b3:7d:c5:2d:b0:12:
6a:85:6b:43:db:09:d0:11:2a:7a:9f:13:53:1a:2e:
c9:d6:7a:a0:f3:40:aa:cf:08:67:cc:96:ee:ba:73:
89:e2:e4:fe:10:78:32:40:59:49:64:95:50:d0:66:
83:04:c7:8d:34:43:c6:8f:98:9e:37:43:e1:44:6d:
d0:30:85:02:b4:ce:d8:69:84:b8:43:66:c2:0b:45:
a8:42:28:a7:6f:7f:e6:3e:b8:97:2a:12:4b:4f:ab:
b1:a3:6a:74:b1:27:d9:5a:8e:45:af:62:c0:b4:9a:
fc:3f:f2:0b:a6:aa:d6:a8:fd:f6:2a:b3:fa:7b:94:
60:4c:47:fe:1f:f5:23:71:47:5d:ce:41:14:f2:bb:
da:41:30:33:fe:29:7c:d7:e6:18:72:83:95:4e:fa:
58:1f:9b:e1:17:ac:09:42:60:cc:9b:9c:99:91:3c:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:B2:9F:C9:F9:38:62:EC:8C:10:AA:DA:04:E8:2B:24:38:55:3E
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:2a:f7:f8:4b:0e:e9:c0:8b:8f:6f:7a:e2:63:11:ee:2e:c8:
bc:c5:ef:26:bb:de:53:ea:f9:7a:d3:55:63:f6:d7:aa:a5:98:
ec:79:70:41:5a:60:f8:79:0b:88:63:95:20:ed:20:bf:c8:1e:
c6:f6:6d:a6:7a:f5:95:b0:cf:3a:b2:83:f4:18:32:62:89:8a:
5d:9f:70:62:72:6c:e3:bd:29:f3:70:60:78:d4:b5:78:86:f7:
b7:73:15:e9:ab:0d:fb:2c:11:be:eb:34:10:df:c7:7c:73:3f:
af:ce:e1:44:b3:9f:6a:e2:bc:e1:c1:6e:9b:8c:28:a1:4a:af:
be:ff:62:fa:6e:62:55:6b:e1:de:02:cc:2d:18:f1:e7:be:85:
47:95:33:35:9f:99:9c:dd:03:12:0c:8b:12:d2:74:21:cc:54:
6c:b2:d4:c5:4a:3e:ff:63:3d:ea:a4:cd:6c:c9:19:53:14:76:
20:b7:28:1b:eb:4e:7d:69:57:26:88:79:f2:69:a1:a2:cd:06:
28:79:49:14:86:fb:f5:4d:9b:98:df:ed:18:bf:75:72:29:a0:
ca:b0:71:73:cc:71:33:ee:c5:b9:55:ca:89:d3:fb:ec:83:b6:
da:8c:ae:15:63:95:9f:6d:ac:33:0d:74:a8:0e:7e:15:03:49:
dd:91:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:12 2026 by rpki-client