
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier: JhM33DNNzOtFVs9wvWblq5wRXYQvNqpeHqjWLgEhrDM=
Subject key identifier: 27:7A:5F:90:62:33:D0:E7:0E:65:A4:B6:FF:4F:03:0A:44:13:C9:30
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number: 0290
Signing time: Sun 05 Apr 2026 01:18:04 +0000
Manifest this update: Sun 05 Apr 2026 01:18:04 +0000
Manifest next update: Sun 12 Apr 2026 01:18:04 +0000
Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: vCJ/JEs295kZ3lqE5VEU2bLDQj+Udd2X84G1l1a/lNc=)
2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Validity
Not Before: Apr 5 01:18:04 2026 GMT
Not After : Apr 12 01:18:04 2026 GMT
Subject: CN=69d1b84c-6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:c3:06:cb:a5:7c:3d:9c:e8:71:10:28:47:
39:98:cc:09:34:87:c1:45:78:16:e1:84:5a:48:f3:
d8:dc:cb:47:4d:29:2f:e1:27:34:aa:16:db:63:d7:
c5:e1:e4:c1:35:7e:18:d4:fa:f7:20:4c:22:ff:88:
4c:55:c5:d2:39:fe:bd:e1:c7:0f:97:ed:24:83:53:
ba:d1:fd:24:73:af:62:be:32:2b:ef:ba:ad:57:4f:
29:46:36:cd:8e:0f:03:a8:8f:c6:fd:23:94:ea:1e:
f4:e4:29:18:10:43:b8:8a:c9:da:05:f1:55:7c:8f:
67:e7:94:a0:51:f7:b1:58:24:be:8a:29:9f:a5:2f:
f2:68:62:00:15:a0:fb:dd:d8:b7:df:d2:68:10:9c:
f0:8f:fe:37:95:e4:d7:70:71:ba:51:ea:bd:1d:fc:
d2:ad:39:be:69:a1:dd:d9:a0:d9:7f:13:81:5d:f8:
bc:54:36:1e:1c:d2:df:59:82:ce:b5:2e:46:0d:43:
52:71:79:bd:dd:a3:37:d2:20:a2:51:cf:00:09:60:
00:90:c9:d9:a4:76:c6:c9:da:b9:51:65:bd:65:9a:
b0:ad:44:f9:7a:94:51:34:0b:b1:10:a6:52:31:73:
92:95:58:fe:cb:c7:36:f7:27:a2:78:ca:45:0d:fa:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:5F:90:62:33:D0:E7:0E:65:A4:B6:FF:4F:03:0A:44:13:C9:30
X509v3 Authority Key Identifier:
keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f8:2f:71:43:48:4e:fc:46:5a:91:99:e8:3b:39:33:79:12:
78:3f:5f:29:ce:e1:62:c5:8f:c8:4d:86:16:d1:46:e5:e1:c8:
e3:bb:f6:90:8f:3a:70:d3:fd:50:e8:e4:97:9d:1b:b6:53:c6:
68:25:21:5c:fb:01:e8:b6:4d:6c:d1:25:85:50:18:df:a6:8b:
3b:a7:a6:c8:b1:2d:fc:79:6d:64:b9:84:b4:ef:8f:e1:0e:19:
60:4d:26:57:34:ff:06:43:0e:fb:c3:fc:17:ae:fc:ab:fd:16:
a2:ff:a2:42:04:b3:41:49:02:20:61:1b:6f:db:69:8f:2f:1d:
01:e5:3d:bb:4f:9b:05:cd:ca:a0:85:fc:c6:1d:68:47:1d:05:
5c:7e:10:5a:77:ca:02:a7:9f:9f:61:b7:10:98:e1:d8:01:bc:
a0:eb:65:1f:74:a2:da:7e:29:46:ce:53:2e:11:fd:96:2d:cf:
1e:d9:1e:ab:42:57:8a:d8:d6:5e:22:6f:74:d1:ea:c5:01:87:
b0:e8:ef:f9:d6:ba:68:51:65:3d:46:5b:6f:ac:bc:6e:00:15:
3d:64:78:ab:bb:c9:3c:7e:f9:66:04:ae:f9:bd:c9:e2:da:bb:
43:ce:3f:1b:a5:40:49:a8:f0:d0:db:88:56:ae:f6:83:64:64:
e0:55:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:17 2026 by rpki-client