
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
File: 32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json)
Hash identifier: AiK5k80qiD/xNYHnWF7Wmr/2019zbX+kGqMqDxy3OUM=
Subject key identifier: EA:89:6F:82:5D:0F:A0:AD:29:47:9E:3E:A5:02:FD:66:94:F8:50:48
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
Manifest number: 03B9
Signing time: Sun 05 Apr 2026 00:27:31 +0000
Manifest this update: Sun 05 Apr 2026 00:27:30 +0000
Manifest next update: Sun 12 Apr 2026 00:27:30 +0000
Files and hashes: 1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: 28FDTyTBQ+rDqM495ZHIZazsrchD6X5HwhuCN0f3bfs=)
2: 4BBDE05299B011F0B174EC14C4F9AE02.roa (hash: l281WaGzYU7dCqEFuYzIN6MgvSUnWoKB+RqON01Yd2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDA2, serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Validity
Not Before: Apr 5 00:27:30 2026 GMT
Not After : Apr 12 00:27:30 2026 GMT
Subject: CN=69d1ac73-a225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:87:ea:bb:3d:6b:97:0d:e0:d6:14:6a:70:
b2:dd:96:60:dd:e3:12:c0:e8:c0:02:1f:7a:7e:3e:
ee:a0:df:79:7a:5c:c7:f7:ce:30:20:06:0a:93:43:
2e:7b:b3:12:f7:04:98:a3:64:ef:06:5e:17:d8:0a:
7d:ff:14:c9:87:89:38:a9:16:cf:37:12:1e:88:4b:
95:7e:53:f0:b0:12:9e:20:a9:c2:42:bb:a2:3f:2b:
9b:93:d2:52:c7:fd:3a:e4:fb:d9:be:59:9f:15:a1:
3f:de:e4:64:1f:61:6e:96:98:4e:d0:00:e0:38:9a:
9a:98:58:c2:48:b4:4b:c8:ef:e8:4a:d0:0d:29:5f:
c7:a7:28:25:e6:dc:97:e5:8d:1b:fe:b0:d4:de:65:
aa:a0:b4:e9:91:19:2c:5e:08:d2:da:8f:c8:74:60:
51:63:30:16:14:a5:99:7c:71:fc:7a:b0:ef:17:b9:
c1:4c:6f:d3:39:2a:93:3f:3b:40:32:ac:3e:a3:8d:
e2:4d:d3:86:6e:1d:32:42:80:6b:5d:a5:c6:73:5e:
a7:23:f0:8f:04:60:61:ad:a8:66:f8:5d:81:0d:5a:
80:45:24:e3:d1:66:e9:fe:73:53:e7:9e:a2:3d:b4:
01:95:11:ae:e4:3e:1f:09:87:fa:11:44:c8:ed:74:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:6F:82:5D:0F:A0:AD:29:47:9E:3E:A5:02:FD:66:94:F8:50:48
X509v3 Authority Key Identifier:
keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9b:dc:9c:64:72:19:29:5f:a6:78:88:29:e3:54:e8:4d:eb:
a5:2d:bb:db:9a:c2:25:45:4d:38:93:76:69:24:ee:0b:0f:53:
e8:96:a3:02:2e:4f:ea:39:38:31:d0:14:48:0d:00:0b:df:6a:
7a:35:c7:c5:c5:53:cd:14:43:34:1a:bf:8e:7b:0c:f6:88:c8:
e8:17:f1:a4:93:b6:54:fa:cb:59:99:04:79:07:38:14:0a:9c:
76:68:f2:e7:c7:2d:c1:85:aa:41:98:db:f2:3a:1d:03:28:f2:
7f:a2:35:90:4d:fd:45:47:c8:b9:24:d0:ed:11:d6:4b:0d:87:
71:f8:44:26:d9:a9:e7:1e:6e:65:96:a1:6d:1d:0a:5b:04:24:
c2:8a:63:94:2c:87:86:d2:ab:00:25:e8:b8:39:8c:23:c7:65:
26:ed:82:b0:8a:5c:6f:e4:30:db:31:cd:55:8f:21:d0:3c:48:
73:f2:f6:ad:4d:c1:ee:64:da:dd:b4:0e:a2:0e:cb:e5:b8:d0:
77:6e:f8:8b:f7:a7:9d:76:6a:8e:63:a3:94:aa:24:43:53:ac:
9a:75:b5:f8:90:a6:aa:f9:fb:b3:6c:91:c0:72:6a:90:a2:63:
43:34:9f:2d:79:16:90:ba:ea:ff:e1:2c:b9:83:e1:ba:74:4e:
cb:64:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:28 2026 by rpki-client