
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier: lFiPi+4Jr2UgVtqKfBEb9rSn4rMbfddXZKPBjed0wTE=
Subject key identifier: 72:8B:40:9D:AA:1A:CA:8D:6A:F4:BB:22:28:F7:11:3B:DA:60:28:1D
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial: 068D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number: 0682
Signing time: Fri 24 Apr 2026 22:25:14 +0000
Manifest this update: Fri 24 Apr 2026 22:25:14 +0000
Manifest next update: Fri 01 May 2026 22:25:14 +0000
Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: 1VrazUWZzenwSdkdaU8Q1ERqRF48pkw546cyliN8bkQ=)
2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: vNOxu4/izKhP78TziGSmWnx3a7Ly5WurceG6/Ij1Sc0=)
3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: LxQi0ZLbD5O+UGQwvVl1PKgKpei9FqLrxR7aU59LHo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 01 May 2026 22:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Validity
Not Before: Apr 24 22:25:14 2026 GMT
Not After : May 1 22:25:14 2026 GMT
Subject: CN=69ebedca-5898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:3c:6a:68:05:9d:a3:2e:6b:0d:06:9b:c3:
40:e9:e0:34:74:4e:21:fa:0f:5c:3b:17:4f:57:bc:
8b:1f:21:09:92:85:06:da:71:bb:f4:a3:32:69:08:
81:da:12:30:74:b8:d2:a1:b3:68:6a:f8:45:3c:45:
00:d6:af:1b:83:2c:65:da:23:eb:05:6f:34:38:38:
bb:ca:d5:a1:eb:37:60:d2:e9:4d:f2:7d:73:da:df:
72:50:14:a7:98:d1:87:ae:80:ae:8b:9e:8a:aa:02:
18:70:19:20:2f:b9:c0:12:b3:d5:01:89:a2:2f:39:
7e:4a:6a:8f:48:6b:2d:0d:f7:01:30:aa:c9:9b:59:
03:7b:4e:14:3e:80:d6:50:e3:03:a5:2d:f3:7c:bf:
51:10:fc:a5:40:64:b9:8f:5d:da:30:0a:e2:a3:8e:
e2:2b:fc:3f:c9:a5:e4:bc:75:63:a8:bc:ca:00:96:
aa:dd:0e:38:4b:31:93:e8:31:9a:01:1c:da:b7:11:
a2:1e:42:27:34:40:f3:77:62:f7:27:a1:ae:34:38:
5a:f2:81:82:67:98:c1:da:71:5f:45:6d:1c:90:3f:
b0:11:6d:80:3b:2c:1b:b0:77:18:3b:d9:7f:c1:8f:
04:d6:52:bb:36:af:79:ec:ed:40:55:7d:86:f4:16:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:40:9D:AA:1A:CA:8D:6A:F4:BB:22:28:F7:11:3B:DA:60:28:1D
X509v3 Authority Key Identifier:
keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:8f:35:67:8a:1b:d4:47:c7:ff:69:69:d8:43:8b:0f:98:
55:09:a7:e4:be:e5:68:ee:c6:f6:b0:82:1f:ed:e1:d8:b2:ab:
2c:8f:d0:a7:61:80:29:49:30:7c:ab:fe:60:27:2e:9f:fa:5b:
73:66:98:a9:21:e3:e7:d0:93:86:27:35:13:89:58:ea:bd:2e:
ef:b7:5e:0a:9a:ba:37:67:c0:28:fe:58:d3:8b:f9:b6:a6:99:
fe:08:88:b0:65:37:09:40:51:2c:88:9a:aa:1f:d6:e3:19:6f:
9a:95:6f:f7:b9:da:54:43:9d:4a:7a:a3:53:93:01:81:24:3f:
9f:e6:71:4a:9b:12:c4:ca:10:13:bf:b9:fc:3f:46:a1:dd:db:
f1:07:a8:11:27:53:66:42:ef:2f:11:a5:d2:a4:04:a7:7e:6d:
4d:2f:1b:af:37:b6:e7:2f:2d:e3:d4:47:e9:09:c9:1b:03:bc:
1f:24:4c:b0:3a:33:1b:ba:ca:d2:40:58:b2:58:2e:45:a9:cf:
eb:03:d4:3b:26:55:b5:5e:66:9e:d1:64:b2:22:85:43:13:cd:
9e:30:dc:8e:ef:b3:4d:cb:33:d7:43:1a:f3:81:77:14:68:f8:
c3:05:13:a5:a8:fa:21:e1:d9:04:89:f6:88:a4:62:3d:24:4c:
8c:d4:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:34:32 2026 by rpki-client