
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier: YIAwtStL3BgCuv8X6KHq3tgiFm4McHvCAUAjE7yJLr4=
Subject key identifier: 1F:89:AA:EB:4B:01:CF:CC:10:E1:68:CE:05:E1:2C:65:49:63:7B:72
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number: 0103
Signing time: Sun 05 Apr 2026 05:33:17 +0000
Manifest this update: Sun 05 Apr 2026 05:33:17 +0000
Manifest next update: Sun 12 Apr 2026 05:33:17 +0000
Files and hashes: 1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: dzFFG6J/y1X06IcFMjIqkG0lQnoKzgcMJNGkH6qHq6A=)
2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Apr 5 05:33:17 2026 GMT
Not After : Apr 12 05:33:17 2026 GMT
Subject: CN=69d1f41d-cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:dd:56:16:1f:70:c7:99:a4:f7:30:4a:77:
a5:0f:17:54:32:7c:94:8b:4d:c4:56:78:14:5c:22:
b1:ec:19:64:95:db:86:a0:ab:ae:f8:1d:37:62:06:
1c:fc:25:6f:db:5c:32:5a:62:5a:81:2d:f6:c3:5d:
a9:4e:73:ea:90:7f:c8:d3:07:a0:75:bc:8d:0c:0d:
81:43:be:68:b8:7c:d0:9d:b1:2b:0f:60:c1:e0:a3:
19:05:70:51:9a:53:d3:1b:d8:52:e7:8d:cf:83:b8:
0a:40:95:53:77:c4:8c:29:a5:80:e4:65:c2:f1:e1:
b6:16:b2:7b:8e:32:af:2d:b7:d0:ee:cb:0f:e0:09:
c3:de:04:76:41:16:1f:72:c8:ff:07:ad:d4:6c:bb:
2e:e3:f6:a3:3a:0d:ae:a1:95:d5:24:da:04:93:0f:
40:e1:55:f3:60:71:f4:48:12:7e:55:04:ff:b5:c2:
c1:db:74:0c:32:3c:f7:b6:02:36:d1:7a:d4:f8:73:
0e:8d:a0:98:3c:85:60:49:b6:83:5c:0c:09:a8:06:
58:d5:73:a3:aa:6e:07:1b:96:80:3d:f3:ab:36:fd:
c6:9d:34:ca:ff:41:ee:0b:8e:39:85:2e:9f:f2:a4:
1d:e2:92:f4:8e:55:a5:78:b1:5f:2d:00:e6:d2:98:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:AA:EB:4B:01:CF:CC:10:E1:68:CE:05:E1:2C:65:49:63:7B:72
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:14:c6:1f:31:fe:52:da:99:3e:90:eb:8b:95:cb:9a:99:93:
48:38:ee:4c:0f:4e:d4:e7:0c:66:4e:f8:26:ee:b4:d5:8d:ad:
85:6a:75:03:8a:3f:ff:0f:2e:42:d6:b2:42:0d:76:fd:74:7e:
98:1d:b1:c0:c1:6b:11:00:a0:91:f7:3d:ed:f8:8b:f4:46:89:
14:dc:f7:ca:e9:45:32:e3:47:68:ec:00:76:23:f8:88:23:de:
81:07:ff:3e:3f:68:39:d9:76:6d:58:65:34:f4:33:0f:40:69:
ba:e1:86:02:dd:ed:8a:83:1c:2b:7d:bd:2b:71:ca:cd:93:3d:
67:91:c7:00:37:77:fe:43:c8:f6:11:32:df:96:f0:61:38:86:
a1:02:36:07:af:44:a2:0b:ca:a4:6c:2a:17:1d:fe:e3:68:35:
c5:16:a4:c9:37:c0:9f:c6:5d:ab:c7:6a:75:20:20:b6:69:a3:
04:1d:5b:7f:55:cc:fe:ab:45:86:5d:fd:82:cf:b5:a6:8c:d9:
1d:e1:37:8f:d6:39:cb:7a:d2:78:19:96:68:db:b3:25:82:45:
44:79:d6:47:dc:62:ab:58:e9:bf:9c:8a:c1:4b:cf:ff:58:d6:
05:7c:7c:d5:cc:f0:c9:2a:03:da:cc:81:7b:32:32:92:a4:2f:
a1:c4:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:52 2026 by rpki-client