
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json)
Hash identifier: TCzENFo3SnYB8RKJGuLc5LTql7g6zmGTSCRWfI6YqNk=
Subject key identifier: A4:7B:CB:50:C0:C4:86:56:4B:BD:0B:BA:38:7D:E0:53:14:0D:24:34
Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
Manifest number: DF
Signing time: Fri 17 Apr 2026 06:15:35 +0000
Manifest this update: Fri 17 Apr 2026 06:15:34 +0000
Manifest next update: Fri 24 Apr 2026 06:15:34 +0000
Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: e9FrVl/pNkhHEIwtiYtwR9qnGf+w5F05zPHjZ0NqIRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Validity
Not Before: Apr 17 06:15:34 2026 GMT
Not After : Apr 24 06:15:34 2026 GMT
Subject: CN=69e1d007-3c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:c3:46:40:c9:d2:91:6a:4f:3c:ff:e4:82:
80:51:f6:d1:4a:ee:52:b9:1a:a7:0b:2b:cc:56:e1:
f7:4f:14:74:10:6f:fc:5f:2d:88:81:5b:b7:3f:13:
c9:2e:40:15:a5:e9:0a:8d:f3:88:a2:ff:4f:ba:d5:
71:06:ea:00:bf:02:98:b7:0b:97:fe:47:d2:ab:44:
15:f7:86:6c:0d:87:cf:e2:58:67:42:64:3d:c4:ed:
f7:67:0f:75:f7:b1:cf:f9:b2:9f:74:40:01:26:79:
9e:96:b1:1b:18:e7:89:b5:46:71:66:40:4a:35:13:
39:7e:6e:b6:82:62:43:07:23:df:72:fc:d4:49:d4:
07:69:4a:95:6f:12:e7:7f:1a:41:02:bf:0f:30:d4:
16:f6:c3:cf:eb:6d:4b:6b:70:fc:8a:b5:a3:42:65:
b5:06:49:0d:64:85:28:4f:b2:1c:83:55:71:2d:9c:
5a:5b:12:48:0c:76:a8:07:c3:c7:ca:3e:09:dc:6a:
4c:c7:6c:2b:cd:d2:2f:1a:70:2d:ce:46:b3:48:11:
6f:33:e6:a3:51:15:10:54:07:89:75:74:c0:40:a9:
42:ea:70:e1:be:1c:47:4c:7c:59:ff:78:bf:64:ac:
0f:01:e9:3d:64:01:20:00:2e:46:a5:7b:12:5c:27:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:CB:50:C0:C4:86:56:4B:BD:0B:BA:38:7D:E0:53:14:0D:24:34
X509v3 Authority Key Identifier:
keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:48:a0:3e:41:6f:a9:50:7c:0c:f5:9f:25:21:da:26:aa:72:
21:a7:58:ba:f1:4b:66:85:fa:75:9a:ac:84:b0:df:ba:04:13:
00:68:c4:0b:af:dc:30:ac:31:1b:99:1b:19:ef:c7:6a:59:79:
58:b5:d9:74:64:c1:c6:a2:6d:b3:90:39:47:cc:87:6c:56:63:
62:97:0d:8d:24:80:00:d9:da:dc:6b:57:a4:de:fa:4c:1e:7d:
1b:d3:8b:7a:4f:27:24:45:85:f3:4d:5f:70:27:44:de:8c:05:
2f:a9:98:72:1c:e7:24:66:e5:bf:d3:eb:86:64:d2:14:fa:10:
d3:ef:94:6d:1c:3c:76:e1:78:67:41:4b:73:ef:2b:d1:02:bf:
f8:0e:2e:ef:5b:f3:86:62:50:da:d0:57:81:df:bb:02:27:2d:
f2:4c:4f:f6:a6:54:41:36:eb:70:63:4e:c0:14:53:5e:c0:c1:
98:ed:6f:2c:15:fd:65:a4:f6:fb:11:d4:23:94:95:a0:2b:e6:
c9:e1:7d:7b:f6:d3:4c:68:13:3f:cc:9c:0a:59:b0:6e:48:35:
ef:95:e8:10:19:cd:71:85:1f:32:5d:55:6d:9c:ca:51:9b:42:
ef:75:3b:22:82:85:49:f2:d4:ec:dd:b9:5b:19:cb:a5:56:a3:
37:6b:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:28 2026 by rpki-client