
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier: IjgHJnwtGSyjvEuMLq3BKrpmuwGYOfXFI9U23hbAUiY=
Subject key identifier: 3F:9B:79:D0:A6:7E:16:18:CF:41:6A:64:89:AA:DA:CD:76:FA:65:9C
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:15:47 +0000
Manifest this update: Fri 17 Apr 2026 08:15:46 +0000
Manifest next update: Fri 24 Apr 2026 08:15:46 +0000
Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: jAouETCD4YXn/rmwLkTv3r7CBHqm9smZMqVmabV4GdM=)
2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Validity
Not Before: Apr 17 08:15:46 2026 GMT
Not After : Apr 24 08:15:46 2026 GMT
Subject: CN=69e1ec32-5240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:8c:1a:13:74:f0:7b:30:03:ff:af:ed:35:
37:bb:2b:e7:0d:ef:94:0f:eb:bb:98:bc:fe:80:f1:
9a:86:53:ac:cf:fa:d5:0d:2f:e6:c2:de:22:2b:bc:
18:1e:a8:a9:00:5b:25:49:d7:ed:e1:ac:94:f6:fa:
fc:49:ed:22:62:54:74:f4:3e:b9:3d:57:4b:bf:fb:
1e:0f:d0:d3:50:55:2a:20:d0:d4:38:79:59:a7:cc:
3c:c0:35:44:9b:48:4b:4c:96:ed:de:e6:e9:da:50:
b1:9c:34:c3:84:41:8a:8b:f1:c2:d4:76:cb:47:d1:
8f:bc:31:3a:14:eb:c9:0b:e9:08:08:21:c8:c9:71:
c2:98:8f:48:40:6d:df:e3:70:8d:51:cf:05:3d:df:
d6:74:1b:24:91:60:cf:29:3e:fa:d9:b0:74:4e:49:
45:63:1b:09:b4:fd:92:fd:3b:a9:e6:b6:44:cc:b7:
a3:e9:91:e3:f8:b1:87:24:3e:4a:cd:7c:f6:07:d8:
d8:ca:4c:83:19:13:cf:ee:69:56:04:89:43:f2:8e:
bb:50:fe:1c:9d:6d:f3:4c:bf:d9:41:d9:44:df:91:
78:a8:41:18:cb:8d:ae:fe:79:62:c5:04:4c:52:51:
d8:49:df:17:82:58:1b:e3:21:01:88:2a:27:25:e7:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:79:D0:A6:7E:16:18:CF:41:6A:64:89:AA:DA:CD:76:FA:65:9C
X509v3 Authority Key Identifier:
keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:63:a9:2b:9f:60:60:c5:85:74:42:a3:cf:e0:90:6f:4f:
6b:54:b5:68:41:3a:d3:ae:a2:77:b0:c4:37:a6:de:24:4d:e7:
8c:c7:5b:6a:72:c5:4d:ce:3a:34:bc:b1:3c:57:eb:27:78:e9:
97:9e:3a:8f:c7:c4:aa:11:bb:da:62:df:2e:34:ba:a2:fb:85:
5c:1d:c1:60:09:9f:4c:ab:0f:4e:7c:62:ef:4e:a8:7d:0b:50:
79:f6:0c:87:4c:52:9d:1d:38:6a:16:5b:ae:70:5c:45:17:a8:
8e:26:08:31:9b:e9:ca:3b:54:02:72:97:62:cf:01:16:04:54:
d0:bb:28:00:e4:8c:40:6f:96:5f:86:a1:0d:23:bd:d3:49:b1:
06:b6:6b:2e:a8:1b:36:5f:ee:83:ae:a6:e6:66:4d:21:50:97:
46:07:2d:1c:a9:2c:7a:1f:cc:e2:26:cb:09:cb:42:51:c7:64:
0e:5f:20:27:10:25:8c:00:d8:a1:91:40:92:16:de:ca:86:3a:
a2:ba:23:ac:76:12:aa:9f:73:1a:fc:a6:f6:0b:39:04:dc:17:
c5:8f:60:f7:e9:f8:79:96:75:f8:ab:9e:2b:69:48:07:03:d1:
b2:98:89:4c:2b:28:85:c9:16:a9:60:af:a2:aa:04:21:24:24:
09:4c:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:41 2026 by rpki-client