
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier: DjD4gIrvPxH1wKZadCP7JBLdvz7ZNnntKCLTzKq0T8o=
Subject key identifier: 61:D2:D7:6F:D8:91:96:8E:54:D9:2C:AA:3C:9A:C6:94:7F:BE:28:DC
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial: 21AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number: 21AD
Signing time: Sat 18 Apr 2026 15:50:43 +0000
Manifest this update: Sat 18 Apr 2026 15:50:42 +0000
Manifest next update: Sat 25 Apr 2026 15:50:42 +0000
Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: tbEBPqLXiLyNG5f+kq1xh4dFrb0JeeIDtym82+bbAw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8621 (0x21ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Validity
Not Before: Apr 18 15:50:42 2026 GMT
Not After : Apr 25 15:50:42 2026 GMT
Subject: CN=69e3a852-1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:46:35:5f:53:2c:4f:3a:70:58:fc:00:f6:89:
a0:83:f2:04:bc:32:0b:82:67:ea:d9:a7:ba:0b:ac:
2d:90:42:52:64:56:23:28:b4:eb:8d:0c:5a:43:6f:
8b:59:b5:17:b0:1d:6d:a3:1b:63:ee:99:4c:5f:01:
01:9f:b6:72:92:30:69:e2:0d:cf:1e:f7:1c:94:b8:
67:69:26:8d:aa:a2:ca:4f:a3:2b:5c:7a:6e:77:bb:
7d:61:2f:6b:b4:34:74:87:0c:b1:d7:3f:f8:24:9d:
b2:af:77:b6:ac:c1:ec:d1:dc:ab:89:b2:34:1b:00:
ce:6b:11:a7:04:c7:35:50:44:85:c5:d8:74:c9:75:
00:42:15:a0:75:9d:6f:ac:88:da:3c:5c:74:e3:b0:
ba:2b:c1:e9:fd:81:3e:eb:47:92:21:76:4a:7b:13:
6c:bc:ac:ce:6f:2f:a0:30:19:04:39:08:91:45:1f:
70:2e:73:b7:a3:d3:dc:7b:63:88:8d:fd:99:47:cb:
23:24:d1:6d:be:7b:fd:9f:e9:29:83:bc:44:75:67:
ae:40:36:a9:b2:9b:f2:c6:df:3b:cd:e5:a0:de:4e:
1e:c2:00:19:11:09:05:33:b0:bd:df:b6:b4:c6:27:
94:7c:6a:3b:fe:d2:36:7c:4b:df:0a:24:72:66:ad:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D2:D7:6F:D8:91:96:8E:54:D9:2C:AA:3C:9A:C6:94:7F:BE:28:DC
X509v3 Authority Key Identifier:
keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:a9:fc:23:9b:d1:58:c5:9d:29:8f:14:53:7c:af:32:27:
b1:2d:17:e9:a7:49:b8:5d:41:63:a0:e3:3b:d3:8f:64:1c:3e:
19:87:6b:13:69:52:e9:57:d1:8d:ae:13:38:38:46:9b:ed:f3:
ce:fe:12:3c:83:00:97:21:1a:4f:ff:61:86:28:dd:3d:13:71:
7b:b2:e9:02:80:78:37:70:b7:a7:26:f3:19:cc:32:cf:fc:a0:
2e:3c:7b:a0:46:fa:42:52:e6:84:d2:6d:2d:95:4c:76:76:7c:
2b:21:51:18:1b:95:56:9b:66:a9:0f:81:de:8b:c3:99:50:a2:
69:e9:de:d7:8e:96:31:0f:71:7c:ff:02:d8:de:45:3c:1c:0f:
f2:dc:65:7e:da:22:27:78:bd:a6:96:5b:47:20:c2:7d:3c:f0:
82:c5:8f:9c:07:9b:93:ee:b1:8f:18:6c:13:06:2c:6c:08:82:
91:dd:48:2b:e6:a6:79:a2:c0:4b:ec:4c:4a:15:f0:bc:b2:8d:
5a:e4:01:d4:80:d7:43:80:72:c3:d6:ba:86:6a:01:3f:8a:9e:
28:1d:18:ad:77:bf:54:e3:64:07:b4:bd:ef:15:9b:17:a9:10:
91:cb:41:36:5e:32:f4:dd:2a:b5:37:6f:85:5f:a4:dd:54:4f:
f7:fb:0d:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz
MzJEOTU1NUUwHhcNMjYwNDE4MTU1MDQyWhcNMjYwNDI1MTU1MDQyWjAYMRYwFAYD
VQQDEw02OWUzYTg1Mi0xNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+EY1X1MsTzpwWPwA9omgg/IEvDILgmfq2ae6C6wtkEJSZFYjKLTrjQxaQ2+L
WbUXsB1toxtj7plMXwEBn7ZykjBp4g3PHvcclLhnaSaNqqLKT6MrXHpud7t9YS9r
tDR0hwyx1z/4JJ2yr3e2rMHs0dyribI0GwDOaxGnBMc1UESFxdh0yXUAQhWgdZ1v
rIjaPFx047C6K8Hp/YE+60eSIXZKexNsvKzOby+gMBkEOQiRRR9wLnO3o9Pce2OI
jf2ZR8sjJNFtvnv9n+kpg7xEdWeuQDapspvyxt87zeWg3k4ewgAZEQkFM7C937a0
xieUfGo7/tI2fEvfCiRyZq1VEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHS12/Y
kZaOVNksqjyaxpR/vijcMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw
Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK
OFkwZmt3LWpNdFl6TFpWVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdEqp/COb0VjFnSmPFFN8rzInsS0X6adJuF1BY6DjO9OPZBw+GYdrE2lS6VfR
ja4TODhGm+3zzv4SPIMAlyEaT/9hhijdPRNxe7LpAoB4N3C3pybzGcwyz/ygLjx7
oEb6QlLmhNJtLZVMdnZ8KyFRGBuVVptmqQ+B3ovDmVCiaene146WMQ9xfP8C2N5F
PBwP8txlftoiJ3i9ppZbRyDCfTzwgsWPnAebk+6xjxhsEwYsbAiCkd1IK+ameaLA
S+xMShXwvLKNWuQB1IDXQ4Byw9a6hmoBP4qeKB0YrXe/VONkB7S97xWbF6kQkctB
Nl4y9N0qtTdvhV+k3VRP9/sNDA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:40 2026 by rpki-client