
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier: oW6KLi4h98Pnfyo9bJZPHFpdu8trlkxg1opmMV8K0/0=
Subject key identifier: 44:A4:6B:BD:12:73:73:73:A4:33:BE:22:3A:21:55:35:CC:B9:90:D1
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer: /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number: 36
Signing time: Sun 05 Apr 2026 07:56:10 +0000
Manifest this update: Sun 05 Apr 2026 07:56:10 +0000
Manifest next update: Sun 12 Apr 2026 07:56:10 +0000
Files and hashes: 1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: qighdyzajEFuiZYeqLCTUQcVSbPQwrNfdR+lxOLejCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Validity
Not Before: Apr 5 07:56:10 2026 GMT
Not After : Apr 12 07:56:10 2026 GMT
Subject: CN=69d2159a-d25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:30:08:8d:c8:fc:12:3d:5f:5e:32:34:88:
24:dc:5c:c8:ad:25:56:72:08:ca:b5:4e:d7:5f:93:
aa:75:2b:0e:6d:4f:72:e9:47:70:4a:12:70:3d:64:
3b:e6:fd:c1:3f:d9:e6:fb:fe:31:f9:f2:f4:b6:b6:
d6:8a:10:35:c4:0c:34:05:c8:b3:4a:25:13:8c:67:
99:8a:22:b6:3d:c1:d2:7f:52:68:a3:3f:48:a7:a5:
5f:c4:ee:6e:02:34:b7:ec:9b:d5:24:b0:ee:81:df:
f2:3b:fd:f8:a1:81:01:d7:6c:fa:34:af:26:9d:5f:
3d:e9:07:f9:b8:90:cd:d1:20:29:5e:f7:c7:4c:3f:
fb:e1:92:56:6b:01:fa:ae:e9:19:19:5f:39:b8:21:
d7:bc:f0:af:49:64:25:6a:94:a6:11:a1:f3:63:13:
20:36:d5:a3:e9:db:25:da:a1:0f:42:dc:9c:03:d0:
ea:a5:13:e2:f2:70:41:bc:50:b8:e6:c0:e9:ba:4e:
e8:2d:33:71:6b:6d:7e:96:0d:47:6e:23:96:05:d6:
05:a9:f7:97:66:56:85:d8:00:dd:ab:f7:4b:d0:f0:
ce:8b:f1:9f:db:49:ac:a5:d3:f4:87:6c:5a:4e:ed:
5b:2d:f4:29:a6:61:81:17:ad:75:ff:88:7e:f6:1f:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:6B:BD:12:73:73:73:A4:33:BE:22:3A:21:55:35:CC:B9:90:D1
X509v3 Authority Key Identifier:
keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:50:ad:e4:f4:39:87:3b:40:12:2a:cf:55:e9:73:f6:8a:
35:5f:d4:d1:fb:07:60:68:16:36:14:7a:75:58:93:25:28:c6:
81:8f:2b:80:7f:9f:65:3f:c4:34:1e:16:59:4d:4c:24:e3:b0:
95:71:4f:39:61:ab:8f:ef:0f:92:93:ac:37:95:7b:bc:e3:04:
43:65:81:af:07:c0:bb:c2:db:aa:32:fa:f3:61:fb:ed:b3:d9:
36:82:32:2f:5f:4f:9f:2b:b5:b5:a9:a4:45:60:68:f5:a5:20:
98:24:4d:6f:bd:41:05:fd:fc:c2:04:7c:73:48:7f:ba:0b:07:
64:47:93:3e:5b:70:b7:de:be:3f:a1:2b:fd:97:45:aa:70:3e:
44:f0:d6:70:22:37:6f:11:55:4e:2f:71:43:74:fc:30:24:9f:
49:e4:c2:07:cd:11:f2:b4:4a:7b:c8:3e:de:9f:06:cd:97:31:
a5:e1:55:16:af:46:3a:a9:dd:e4:18:63:7a:94:48:0e:8f:ee:
3d:99:e0:49:a8:da:84:5f:c2:a8:42:31:cf:64:88:0e:fc:3a:
91:44:d7:98:f1:64:fb:9a:b3:ac:57:7e:0c:97:d4:5d:dd:f2:
8b:83:4e:d7:62:72:1a:de:29:76:77:50:09:89:2f:11:90:a7:
6f:6e:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client