
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: ZuzD4/+WFs5UcbGithCBk7xoRTVqBd3WgRpVQ7bdWnA=
Subject key identifier: AF:29:B9:A8:E0:7C:AC:2F:D0:40:C5:CD:CC:21:0B:90:28:E8:23:82
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 355C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 3535
Signing time: Sat 04 Apr 2026 15:02:42 +0000
Manifest this update: Sat 04 Apr 2026 15:02:42 +0000
Manifest next update: Sat 11 Apr 2026 15:02:42 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: ouy4y4aIt05Nt+q4Hg71IUC4fsD5emq8g/U349XpjNI=)
2: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13660 (0x355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Apr 4 15:02:42 2026 GMT
Not After : Apr 11 15:02:42 2026 GMT
Subject: CN=69d12812-def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:30:fa:b6:20:c8:e7:e1:fa:25:07:23:03:
5e:7e:08:a4:a1:85:b8:c7:ad:99:96:6c:85:f2:c3:
08:4c:88:94:aa:4b:0c:29:1c:dc:91:6e:37:81:c3:
64:72:bc:cd:84:69:59:9f:de:9d:3b:67:7c:e4:18:
e8:45:20:da:1c:75:86:e5:83:01:22:e1:41:99:ed:
ce:8c:50:f3:f9:c7:b1:1b:17:b3:08:ca:2a:da:cd:
41:f4:a0:62:72:32:9b:75:42:aa:a2:68:74:c8:38:
e4:26:ae:b4:df:13:a3:47:a3:03:38:0b:5a:3a:2f:
ff:3e:5c:5b:aa:a1:e9:5d:d6:80:0d:b1:2e:39:d6:
b2:c4:9b:17:1d:ea:0e:fa:d1:5d:35:64:db:3c:87:
41:29:23:06:b3:90:8f:6e:e4:7f:f8:ee:e5:ee:80:
ed:fd:d4:0d:c8:69:b0:a5:65:45:bb:3f:2b:ff:b0:
97:1f:ce:f0:04:9f:2f:db:39:ad:47:2b:48:a5:4b:
fd:04:f3:1d:3c:e7:65:a6:07:55:25:f6:59:f7:56:
4b:89:87:43:8f:71:f6:23:e8:29:ff:bb:78:f5:d6:
18:e4:87:8c:4e:49:47:0a:50:48:51:00:c9:69:fc:
be:31:1c:95:ee:e6:49:dc:f9:6a:ad:8b:88:88:6c:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:B9:A8:E0:7C:AC:2F:D0:40:C5:CD:CC:21:0B:90:28:E8:23:82
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:46:20:7c:11:dc:25:17:4d:67:80:65:ff:8c:6b:78:34:98:
b0:43:c3:9a:28:10:b3:06:af:5f:14:33:77:7c:27:61:b7:40:
9a:a4:0e:6a:4d:89:1d:a8:c6:ac:eb:0a:7f:6c:de:bb:e3:9a:
60:ca:2d:b4:68:94:1b:bb:42:17:6c:f0:f8:1d:00:6b:a9:38:
1c:32:11:19:20:1f:b2:c6:9b:3a:4d:f2:71:d2:d9:e3:c5:63:
40:e8:20:b0:f0:64:74:c1:40:d0:73:18:87:1e:fb:dd:57:e2:
83:fa:82:32:3b:e4:c7:5b:1f:38:8a:13:4d:89:9f:3a:8e:71:
f1:0d:00:80:20:00:19:45:6f:81:fb:27:53:2c:45:f3:cd:08:
5c:ed:b0:b1:3c:83:88:5b:05:64:3f:7b:7d:db:1a:56:68:a4:
28:3f:55:84:56:ba:a1:c9:20:7a:28:8a:da:1e:c4:42:4e:5b:
6d:ab:5e:4a:be:5d:7b:da:25:86:05:e7:54:4e:aa:00:56:ad:
50:c4:dd:a5:11:6d:d1:ff:cc:34:67:3b:e5:6f:e1:98:7c:4a:
d6:c3:b3:8f:d0:b2:c7:92:a6:ab:d9:b6:ec:36:84:e9:93:0c:
81:6e:56:d4:f2:57:d1:28:cb:de:0a:f5:d5:a1:ce:54:18:ed:
2e:76:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:53 2026 by rpki-client