
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: OtO++9I7cXRhWn+qf6WVqZsbmnd04bMNHnb68x2NBNA=
Subject key identifier: 81:0A:2E:4F:8A:EB:06:54:9E:BC:3B:31:BB:18:C5:4D:06:B6:AC:CF
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1DB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D62
Signing time: Sun 26 Apr 2026 16:03:29 +0000
Manifest this update: Sun 26 Apr 2026 16:03:28 +0000
Manifest next update: Sun 03 May 2026 16:03:28 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: fSizt9radXf3CDa4RYEm7r4oHT3xI1ArIFXeBdG8Uhs=)
2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
3: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
4: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7602 (0x1db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Apr 26 16:03:28 2026 GMT
Not After : May 3 16:03:28 2026 GMT
Subject: CN=69ee3751-ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:9e:49:16:31:b4:e3:fd:4c:29:6b:56:9b:
17:b4:9a:be:34:8b:25:e6:1b:cc:cf:c4:30:4a:36:
fb:16:a4:43:43:fd:dd:a3:2f:6a:5f:bf:c0:48:e9:
be:db:b9:2b:cb:30:3d:a9:22:00:43:6f:5f:8a:fe:
ec:e2:27:af:c9:0f:e9:69:99:53:49:ce:b6:75:ac:
32:b4:31:f2:94:5f:55:64:8d:38:ae:49:70:00:9c:
33:cf:5f:25:1d:7b:b1:58:2f:63:ff:69:5d:6e:15:
fe:df:6e:18:cc:2c:07:df:63:fe:9a:b4:e3:c8:6a:
06:ec:30:22:18:d5:65:8b:ad:88:ed:74:60:f8:d2:
08:09:05:05:7b:bb:3a:bc:02:d5:1c:3e:e6:10:37:
8e:7e:1d:2c:49:2a:cd:26:65:29:2a:c2:c2:40:2b:
19:de:9a:ab:12:bc:2d:d8:5d:08:32:f5:0d:03:1f:
05:e5:9f:15:0e:82:99:16:df:36:1e:f6:d6:00:f8:
6c:d7:d5:d7:fa:a5:3c:b1:21:58:98:9b:46:e5:0a:
ad:7c:78:2c:4a:ee:8a:42:c6:a2:62:fd:a3:71:5e:
33:88:14:05:e5:8a:0f:94:b8:95:47:ba:ac:ca:cb:
21:87:a9:dd:44:d6:9b:94:c1:13:c7:44:00:11:bc:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:2E:4F:8A:EB:06:54:9E:BC:3B:31:BB:18:C5:4D:06:B6:AC:CF
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f7:87:b6:62:a7:9e:62:8b:14:c5:59:d5:43:25:63:ec:6e:
95:b3:7e:9b:cd:94:86:7e:ca:de:a6:4c:96:cb:0b:24:81:49:
c6:2a:bc:96:be:00:2a:fe:e2:4a:ce:76:a3:82:56:9d:5d:0e:
e9:f0:2f:dc:a5:84:a4:80:6d:4c:37:be:c0:fe:0b:b6:fd:ed:
26:25:f4:8f:b1:18:ad:2f:e2:d2:53:f3:a4:4b:60:84:81:6b:
a8:b2:35:de:bd:e3:5e:bc:2c:15:8b:33:23:a9:a9:8b:0d:7a:
aa:0f:ae:7e:58:64:78:a5:6d:ac:f8:dd:8e:26:73:31:64:a7:
99:34:0a:78:40:02:4b:49:e3:2f:9e:1e:46:f8:4d:8e:48:c3:
ab:f5:78:7c:9c:84:7c:07:c1:30:97:93:b4:3d:a1:75:58:77:
e1:da:aa:da:76:ec:57:93:6d:26:4e:f5:84:47:7d:60:da:e9:
7a:e6:c7:0c:f8:43:30:5c:e1:a0:6c:a3:ea:ae:ea:4b:2a:d6:
d0:14:b2:4b:ed:40:c1:8d:d8:0d:97:c1:db:df:04:07:4b:8a:
48:91:f2:b2:b5:53:e6:5a:89:cc:d7:9f:e2:df:20:0a:12:fa:
db:b7:0f:61:ee:d3:2f:86:d2:0d:2d:46:c1:16:74:9b:03:93:
76:76:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:39:22 2026 by rpki-client