
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: AmFzmTXXU68tQIAlpbtyX9lJPgAu3Xyr4JJVn7ew9OU=
Subject key identifier: F3:0B:33:B6:F3:11:75:A7:78:69:EB:00:EE:F5:EE:97:2F:AC:6C:4F
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 0318
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 0312
Signing time: Sun 05 Apr 2026 00:56:25 +0000
Manifest this update: Sun 05 Apr 2026 00:56:24 +0000
Manifest next update: Sun 12 Apr 2026 00:56:24 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: 5NdXmCdPZvVofj5/YB+XKbv4QtzF5NaHtuZ/ePyxaVo=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: hRSBw3j57fal3n5v23N17SHqFFyn7GkCbwIU7hzC2CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 792 (0x318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: Apr 5 00:56:24 2026 GMT
Not After : Apr 12 00:56:24 2026 GMT
Subject: CN=69d1b339-f801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:71:3c:89:e3:d6:d8:dd:ce:c8:f0:e4:f0:
c9:2a:50:ec:d9:ec:a4:eb:f7:11:96:77:f4:c2:79:
c8:fd:3c:ef:e3:1e:bf:ab:a3:fd:7d:85:52:5e:75:
cc:5f:b1:7d:f7:bc:37:a0:a0:e6:50:5b:37:69:f8:
b9:49:b6:44:35:1f:e5:69:19:c0:a1:ea:34:04:20:
8e:d5:74:35:b6:b7:0e:1e:f2:0e:9d:45:ab:25:4b:
3b:14:8e:e1:87:22:54:0d:6c:03:dd:d0:c2:38:61:
45:0c:89:f4:3f:f2:d7:f2:09:54:16:91:68:ae:03:
2c:51:3c:29:7a:d3:fa:12:5e:d2:bc:0b:07:0b:79:
85:82:ab:fc:4c:e2:61:3a:ef:42:98:88:f2:f5:56:
fb:d9:c9:c9:29:21:81:3e:3e:f2:f9:4e:61:e9:e0:
f2:7b:8b:5c:13:df:6c:50:89:76:f5:59:b8:b9:ec:
61:0c:45:48:d7:c1:9b:22:01:37:86:a6:ae:71:54:
c4:ad:08:cd:b7:4f:3e:b7:f3:12:b7:af:8c:b5:a8:
27:67:c8:8d:29:93:03:9f:fa:88:3b:bd:47:89:73:
ee:6a:13:69:5f:9e:d6:00:07:da:fd:32:9a:00:a9:
71:11:a5:59:36:24:2a:06:16:8e:ab:0f:a7:1c:1d:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:33:B6:F3:11:75:A7:78:69:EB:00:EE:F5:EE:97:2F:AC:6C:4F
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:de:b9:4e:6c:9e:c4:37:33:e3:29:49:29:42:a9:89:33:4d:
9d:f2:b8:a7:a7:78:77:a8:6c:f5:d4:cc:ce:d9:ca:ae:9e:7f:
f3:71:ca:dd:e8:6c:12:1e:b6:8f:95:18:5f:1c:5f:40:00:70:
c1:d1:96:1b:47:08:4e:8a:6b:36:b3:10:ba:ae:3f:97:98:f0:
b9:05:99:ed:c5:89:25:f5:aa:5a:c3:2a:81:03:ea:9f:73:93:
f4:19:18:49:76:4f:7d:a2:3f:09:af:b1:e5:86:c6:e1:18:b7:
cf:d2:b0:c3:75:2b:21:7f:2d:ad:08:5e:a1:43:7c:01:3e:a0:
75:f4:57:d4:8a:0a:00:a3:f4:ff:06:de:07:b1:da:f0:c8:ca:
05:f4:21:e1:1d:c9:e6:ab:fa:0c:9a:a9:5a:14:79:ff:09:a1:
3a:e4:d3:21:20:d9:d6:31:ed:53:0d:58:ae:d2:da:5e:88:ca:
d6:78:dd:27:68:04:10:fe:a6:8a:2b:6e:9b:c8:43:0f:86:d2:
38:42:9f:c4:ed:3e:b1:e2:ab:87:72:e3:3c:fb:95:cd:6f:af:
b6:9c:22:0b:fb:c8:6b:80:0f:22:27:43:c1:b8:88:f6:82:0b:
87:e7:28:db:4f:09:d6:77:3e:40:2c:c0:d7:a2:11:b0:44:a8:
71:e3:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:28 2026 by rpki-client