
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json)
Hash identifier: vDqzgJsS77jBK51lLVpVyfjtnwosZiRwywhcLCE70gA=
Subject key identifier: F2:DD:07:24:BC:27:4E:62:C8:33:84:47:70:90:CB:81:C8:DD:17:9A
Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Certificate serial: 0A28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
Manifest number: 0A28
Signing time: Sat 18 Apr 2026 16:33:58 +0000
Manifest this update: Sat 18 Apr 2026 16:33:57 +0000
Manifest next update: Sat 25 Apr 2026 16:33:57 +0000
Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: SY4hOFPMu92l5oIge9eBhC2LF6N9z6GeIVV6h7TIAUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600 (0xa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Validity
Not Before: Apr 18 16:33:57 2026 GMT
Not After : Apr 25 16:33:57 2026 GMT
Subject: CN=69e3b276-7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:fc:c5:76:db:37:90:2f:0f:5e:31:04:29:
6a:f2:23:9a:90:37:15:17:2f:b1:ba:e7:9d:bc:6d:
de:73:a8:d0:26:9d:3a:63:87:07:73:94:ab:be:98:
13:4f:53:6a:5a:c2:9a:1f:0f:10:d3:88:70:b7:a3:
56:7d:32:cb:03:f5:1a:8d:94:00:7a:59:27:8a:e1:
0e:12:7a:51:8e:71:62:23:7f:1d:1d:dc:68:1a:a3:
78:70:b8:51:71:d3:3c:22:d6:f9:28:31:5f:1e:57:
ed:51:88:65:a9:b2:ff:e1:11:7f:d3:56:df:bb:ce:
71:5f:b2:6e:b8:8a:43:b8:27:ed:48:dd:6e:f6:f5:
e3:23:46:cb:0d:33:c7:47:5d:a5:88:8c:b9:f9:d2:
c8:44:a8:84:cd:68:be:3d:65:81:cc:c8:9e:c8:e7:
2c:2e:3a:a4:b0:3f:c4:f1:85:20:ce:87:1d:5b:a6:
37:58:42:f7:03:10:f0:71:bc:77:f5:7e:9b:53:67:
89:94:ed:82:ba:11:7d:99:42:21:8e:30:d8:a7:11:
8c:89:6b:c0:6c:07:2b:a1:91:d6:e6:eb:e9:8c:14:
96:89:9a:8b:42:c9:4f:47:fd:a4:78:8e:1a:a7:e2:
c8:d1:5d:eb:66:1c:45:ba:44:33:ae:23:83:13:6f:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:07:24:BC:27:4E:62:C8:33:84:47:70:90:CB:81:C8:DD:17:9A
X509v3 Authority Key Identifier:
keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:2a:29:a0:b9:a6:d4:24:37:66:8c:9e:2f:16:8f:79:52:
12:7d:d9:e9:a4:e2:6f:34:19:fe:e2:db:2c:34:de:59:8a:97:
70:4f:35:ec:1c:aa:74:4c:36:5d:d4:5b:a7:0d:01:4c:d1:4e:
9a:50:67:57:7d:d6:29:b2:d3:22:7a:4a:f7:5a:12:98:e9:1e:
64:93:22:c7:26:f1:54:fc:e2:6e:fb:5e:7b:30:e7:dc:a5:be:
fd:2f:9c:66:f0:9b:4f:f8:d6:85:64:0d:67:bc:27:cf:dc:8a:
90:30:0d:e4:9d:3a:d8:28:14:ee:39:cf:51:37:f2:b2:70:14:
c0:ae:b7:36:13:9d:70:cc:15:cf:10:d4:a3:f6:87:cb:f7:07:
29:e9:74:a9:ba:b8:b6:5a:14:4b:7d:68:8f:20:b2:45:75:3f:
e4:47:3f:39:2b:67:d3:fc:ec:91:81:76:c2:54:bd:8f:1f:ed:
07:63:45:76:e1:a3:0a:aa:38:29:44:df:61:5d:df:50:18:09:
1a:a8:ff:3a:16:95:49:93:bf:9b:4e:57:8a:15:f2:76:5c:c0:
54:eb:ed:d0:67:1a:32:c7:01:18:4d:1f:45:44:56:6d:51:fa:
2d:d4:e6:39:4b:c8:83:c0:08:07:0a:f5:59:5e:b7:39:7e:49:
96:04:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:09 2026 by rpki-client