
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier: /QSsRpdJq0S4mxyEBjEOlYfPKqYyQET9EtqxOSIewp4=
Subject key identifier: 5C:25:BF:89:05:0C:C8:61:0D:39:66:DC:CE:47:ED:37:F0:3E:26:A5
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial: 04C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number: 04C1
Signing time: Sat 04 Apr 2026 23:40:59 +0000
Manifest this update: Sat 04 Apr 2026 23:40:59 +0000
Manifest next update: Sat 11 Apr 2026 23:40:59 +0000
Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: NtEGXmLRsSwWsgd4np/5V/MXiiHl4rGjzjSh1kzpn18=)
2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: 7dmcjwf3qKkvWDXhJJ0yFS4Iw9ffbjP8rVUkXu2XNOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Validity
Not Before: Apr 4 23:40:59 2026 GMT
Not After : Apr 11 23:40:59 2026 GMT
Subject: CN=69d1a18b-5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:68:16:d2:9e:0f:a0:7f:16:9d:7d:12:b2:
2e:7f:83:99:c2:ac:9f:b6:4b:21:b4:ff:46:42:82:
e8:d1:ea:52:b2:a1:b6:8e:f6:a4:d5:11:fc:55:7a:
d9:dd:0a:ac:39:42:f6:60:28:45:d1:50:8e:25:73:
7b:e8:a0:f6:e7:c4:d3:16:0b:bb:2c:b1:79:54:ac:
57:75:df:dc:ac:d1:01:61:db:81:16:70:d2:e8:d5:
9b:91:14:a5:f1:15:ad:c5:3c:2f:5e:3b:5a:d9:5a:
69:51:b3:59:34:61:d1:17:82:f6:1b:11:3f:f2:9f:
1b:16:0e:28:38:c2:2e:31:9e:9e:4f:9e:fe:f9:0d:
7c:46:f7:b4:b8:e7:b7:11:4a:65:53:83:99:d1:cf:
61:9f:25:fc:00:3a:07:24:85:e4:8a:2c:0e:23:44:
e5:c1:60:47:e3:73:7c:39:c2:60:4f:1f:31:40:91:
f0:3e:66:ee:fd:5e:8b:46:5f:45:6e:44:bb:f8:8b:
b8:f0:4e:75:e5:46:da:58:e3:31:a3:77:74:80:ff:
fe:b5:e5:d1:e3:d4:a2:63:8c:c4:e7:23:75:51:be:
0d:3e:0e:63:fe:18:8a:de:8d:4d:2d:19:7f:1b:03:
29:43:f9:28:63:2c:e1:bb:0c:02:27:30:7b:2f:b7:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:BF:89:05:0C:C8:61:0D:39:66:DC:CE:47:ED:37:F0:3E:26:A5
X509v3 Authority Key Identifier:
keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:ae:17:f5:6b:89:03:aa:3b:9b:bd:8a:f0:2a:03:d9:45:
c6:af:a3:7b:01:15:70:b1:b9:c8:74:b1:71:d7:b9:15:15:c8:
f1:bb:80:4b:61:a0:b1:4f:90:21:ee:cb:9b:28:1e:2f:c7:31:
d6:b4:c8:7d:d3:e3:08:6b:ee:a4:07:eb:9a:23:60:2e:97:1e:
9a:eb:58:d9:2b:76:e3:bb:cf:36:45:13:d9:bb:5d:41:fe:4a:
ae:d1:bf:88:b8:a6:ba:34:f7:f9:0d:71:8c:20:30:40:16:81:
ff:9c:68:f8:d4:d6:25:8f:19:45:e5:cd:8a:13:6d:6b:11:56:
c4:60:cf:69:9c:16:13:aa:cb:31:64:f2:ae:56:c5:76:4e:48:
a6:c5:08:7d:22:83:b6:42:82:0d:3a:84:d6:c9:36:01:85:de:
98:02:8a:96:e3:37:8c:25:9e:72:2f:38:da:cc:35:d7:0e:b5:
1e:9f:39:8d:23:f2:20:43:be:2d:64:d2:60:9d:51:09:f9:95:
06:8b:75:a3:fc:ee:f9:f6:62:ea:d9:94:aa:60:b5:41:30:5d:
f8:21:1d:aa:6b:b7:cb:e8:33:44:20:28:03:fd:67:f0:86:53:
e4:44:e4:78:84:29:e1:bf:3b:2e:ab:8b:f9:20:31:78:3e:be:
d4:3a:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:05 2026 by rpki-client