
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: p552XS2CfzhYnER9clQCYtTBtCO62bToKF0vp7JGsbc=
Subject key identifier: F4:A9:E8:C3:CE:D5:83:BA:E0:AF:6F:66:63:10:48:E0:E0:A9:1F:15
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1B05
Signing time: Sun 26 Apr 2026 16:13:34 +0000
Manifest this update: Sun 26 Apr 2026 16:13:33 +0000
Manifest next update: Sun 03 May 2026 16:13:33 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: lkkOBWm6FYakAkzDQf480Bcafmtp1j71loUv272MzZs=)
2: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=)
3: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: zH/5NTHwdeoZmGrA8haU1PKwfd5Ix3h3VEnXYc9ASzA=)
4: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=)
5: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=)
6: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7002 (0x1b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Apr 26 16:13:33 2026 GMT
Not After : May 3 16:13:33 2026 GMT
Subject: CN=69ee39ad-3c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:69:97:06:a7:a5:8b:41:2a:c0:a3:86:bb:
5a:f7:a0:b1:3b:5c:8a:fe:76:30:64:78:4b:2a:8d:
d6:ac:8c:de:fe:f6:27:e3:9f:95:45:a4:6d:74:fd:
f5:d8:ca:3c:c1:d9:f0:b5:70:c9:4a:33:15:a9:05:
77:19:97:11:80:06:b9:e4:85:ff:13:3f:fb:61:db:
b1:8a:09:7f:13:e3:df:08:23:de:4c:df:f4:cc:59:
01:01:a4:f7:0f:db:d0:dd:48:bf:3a:82:37:eb:80:
41:f1:0c:fc:2a:08:50:48:05:5a:4b:d8:18:0b:33:
05:b5:01:a4:a1:ab:6f:ea:08:16:60:78:db:31:0d:
bc:ec:78:da:ec:1b:a6:9a:e1:c6:21:0f:61:f8:c1:
84:b3:23:e4:a9:11:13:85:6c:45:e8:81:81:03:cc:
33:cf:0d:bd:2c:0b:e0:f2:9b:0b:3f:0b:93:a6:ef:
6d:38:20:c7:13:b5:74:2c:5e:7d:9a:be:84:05:6e:
cc:0b:5b:da:ed:59:a8:56:73:63:2f:24:fa:37:db:
19:b6:b6:2c:ba:fb:a7:3c:24:14:8f:03:0c:43:c5:
97:db:51:17:ff:49:76:ed:97:4b:f5:a4:61:c1:33:
c0:18:02:d8:9b:34:3a:a7:1c:9a:19:c4:3b:0f:91:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:E8:C3:CE:D5:83:BA:E0:AF:6F:66:63:10:48:E0:E0:A9:1F:15
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:7e:86:04:0e:7f:a4:1e:21:62:25:c8:93:a2:9c:15:ea:64:
31:72:97:59:06:8d:a0:a7:1e:b9:11:e7:59:e0:b2:a0:56:e1:
1f:5f:f2:ec:57:b8:f7:88:60:e9:7c:21:5e:8b:a6:c6:c1:f6:
81:4b:fe:1c:dc:1e:43:5e:26:df:97:3d:19:ba:35:b2:aa:8c:
7d:f1:65:d3:34:93:83:36:d6:a4:36:3d:b4:bd:0a:c9:7e:11:
9f:fe:64:67:be:c1:51:20:42:73:c8:9d:e0:60:d2:fa:b7:22:
4a:0a:9b:5e:f1:b3:dd:d6:ea:cc:31:be:fc:b8:58:26:8a:ae:
24:7e:67:45:3b:50:8e:fb:10:b3:4d:5d:6a:3d:e1:12:3b:01:
96:46:f6:92:b1:4b:d2:5d:70:10:66:d1:ff:13:d3:4d:56:84:
e3:05:00:54:42:63:62:2d:36:3c:66:c4:39:25:2c:d0:93:1d:
82:dd:37:50:d9:20:a7:08:f3:59:0b:9f:b1:b0:e4:65:a0:b0:
5f:24:18:29:5e:52:b0:9b:b9:35:6e:23:09:6d:2f:35:40:fb:
12:7a:d1:63:14:db:25:88:d1:3c:2a:42:85:73:a3:d7:86:11:
cd:08:b8:21:92:a0:21:76:84:70:31:7d:7d:9c:83:b1:88:eb:
51:22:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:04 2026 by rpki-client