
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json)
Hash identifier: 03PRRhyXhvg0Mx4hap+G7dtk3or9g/5HngPAgtHA/V0=
Subject key identifier: 35:3C:30:96:16:A8:7B:8E:9D:D3:91:E6:C1:F2:9B:B0:BB:D5:10:EE
Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
Manifest number: 94
Signing time: Sun 05 Apr 2026 06:50:56 +0000
Manifest this update: Sun 05 Apr 2026 06:50:56 +0000
Manifest next update: Sun 12 Apr 2026 06:50:56 +0000
Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: xgC9E29Y1IRI0si4Wq+kJEfa35OjKaJZyDqbufsxgEU=)
2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Validity
Not Before: Apr 5 06:50:56 2026 GMT
Not After : Apr 12 06:50:56 2026 GMT
Subject: CN=69d20650-b90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:26:82:df:c1:8d:6c:86:99:03:29:89:ae:
57:4a:9e:5a:09:a6:33:bd:ab:0d:23:2e:6e:83:68:
bd:dd:0b:56:dd:32:66:5c:46:7c:32:6d:78:51:1e:
66:3a:b7:4f:2b:53:4e:6b:42:90:2f:68:5f:92:62:
08:cb:ee:73:fc:eb:6a:7b:9d:41:9e:c6:68:e7:85:
18:35:08:41:d7:de:3d:ef:4f:dd:58:c3:96:7e:19:
6a:56:80:a7:43:69:eb:23:da:71:d6:41:eb:eb:c0:
bb:66:e0:89:d8:95:82:a6:9a:ac:ab:ae:6a:64:68:
25:e1:4b:e1:d2:93:a1:95:87:49:e2:22:e2:d9:90:
6b:30:f0:31:9b:6e:94:c9:64:3e:16:e5:a2:c7:3d:
58:14:e1:f7:0f:33:02:bb:fa:eb:82:e9:6c:c4:9f:
d6:6c:64:e2:17:de:e9:c9:6a:57:0d:2b:96:c1:1b:
90:a1:4e:a2:ec:ae:92:51:10:49:be:77:c9:8f:16:
94:ca:b1:20:9f:b3:d2:00:40:e7:61:e1:37:c6:c3:
aa:d2:33:7b:09:6c:6e:57:29:51:21:26:d0:f0:1d:
2a:96:d5:7a:11:ec:4d:ff:35:29:8e:01:87:36:31:
54:cb:a4:bf:ca:2d:9d:26:4d:92:92:d9:9a:c2:4c:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:30:96:16:A8:7B:8E:9D:D3:91:E6:C1:F2:9B:B0:BB:D5:10:EE
X509v3 Authority Key Identifier:
keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:84:da:bf:90:64:af:79:0d:f3:f7:39:fa:dd:4e:ba:9d:
62:48:8e:ea:3b:a4:1a:d9:6f:eb:71:c4:5e:63:97:f8:3b:69:
c5:a9:0b:6c:13:ac:55:fd:44:e5:75:6b:a5:14:bb:36:6d:80:
0d:7d:da:02:50:d7:3e:34:25:44:be:e2:1a:33:d3:69:1e:5c:
d6:db:bb:6e:3a:10:5b:84:0c:3d:c5:e6:e8:53:5a:d6:64:db:
71:66:66:8a:db:18:61:bf:18:72:f1:3d:c9:0a:f7:f7:9f:c0:
f8:4b:a8:ff:2a:69:49:06:4d:1a:ad:71:29:f9:05:72:b8:9e:
cc:2e:eb:4b:5c:0e:44:a0:87:92:a5:4b:d5:b4:37:87:0a:8c:
72:64:78:d9:60:e2:02:3a:b2:ea:6e:19:e4:bb:07:20:62:2f:
25:e2:0f:4f:01:a5:72:eb:e6:b7:5c:5d:f5:df:1c:2e:89:f7:
28:91:88:d5:d5:83:76:79:67:1f:7b:6a:87:e1:4b:6a:69:72:
cc:1f:6c:39:a2:4c:4e:d0:1d:96:16:43:bc:e7:dd:c4:f9:d8:
06:9f:74:81:4b:32:a7:5d:ca:fc:d2:48:5c:34:29:11:ae:f4:
ac:a6:7b:8d:9b:63:a7:18:c1:1f:53:f3:ef:4b:93:01:36:fb:
07:15:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:56 2026 by rpki-client