
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier: b26w0D1/liHowioQA9Dtg6JfJqF2+KcqA0wrYIY8cYQ=
Subject key identifier: 8F:39:2B:68:73:C3:55:72:26:0C:7A:8E:73:91:73:99:79:00:C4:C3
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial: 354A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number: 353E
Signing time: Tue 12 May 2026 15:09:09 +0000
Manifest this update: Tue 12 May 2026 15:09:08 +0000
Manifest next update: Tue 19 May 2026 15:09:08 +0000
Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: WU0t7xSyH+9BfDDYvEAFTy6XWx7+JqCksn1TEJ7VVVM=)
2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: H6okVBbXA5R44ceAsB8vN/16AqSmiHbSqzPIsnHvUSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13642 (0x354a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Validity
Not Before: May 12 15:09:08 2026 GMT
Not After : May 19 15:09:08 2026 GMT
Subject: CN=6a034295-18c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:4c:d0:5f:4b:98:db:f2:c2:85:70:84:fb:
88:8f:84:59:c9:de:a1:4c:a2:10:fa:94:1b:33:ab:
7c:b0:df:23:2a:ac:2a:22:4c:f0:11:ad:64:31:f9:
95:0f:bc:4a:a6:2f:a1:d5:16:90:2e:f5:fc:94:d1:
9d:87:79:b4:66:af:02:f3:79:71:26:6d:c9:fd:b4:
b0:bd:17:e2:2e:be:5a:d5:48:ad:73:9e:97:ca:d3:
c7:99:28:0b:81:d8:d3:79:4f:21:5a:4f:cd:ad:ff:
05:26:e5:f8:ac:3b:47:72:79:44:23:2e:3a:8e:a2:
c9:4f:1a:52:f2:ad:1f:06:a3:1d:c4:16:c2:4f:8c:
9c:3a:ba:7e:04:19:e6:07:c2:d3:eb:cd:d5:c8:66:
0d:48:c0:26:bf:42:ca:94:07:2f:fc:83:05:54:f2:
f6:66:91:91:74:34:f3:09:fc:53:0c:06:1a:4d:b6:
7a:86:ed:f5:67:c4:81:c2:4a:a1:ef:3f:27:39:ac:
ab:97:26:cb:3f:77:22:b5:88:ac:93:f0:54:8e:09:
fd:03:13:59:1e:35:90:42:69:fe:e4:1e:99:25:9b:
67:77:fb:6b:5e:f6:30:14:c8:3f:af:e7:35:a8:09:
9a:2d:47:d4:13:56:0a:43:19:6b:19:81:2b:48:66:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:2B:68:73:C3:55:72:26:0C:7A:8E:73:91:73:99:79:00:C4:C3
X509v3 Authority Key Identifier:
keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:57:69:06:e6:70:05:2f:cd:45:c6:0c:33:11:71:94:0e:
c9:48:48:85:98:34:af:78:6e:a5:c4:74:14:68:6a:5a:52:80:
a6:c6:98:04:09:ed:38:c8:50:a7:b5:66:78:d3:3d:3b:28:0e:
85:1a:22:cc:5a:8c:18:66:73:93:4b:f1:d8:6e:fc:36:62:fe:
19:b2:b6:85:fb:62:8a:14:2c:13:cf:94:41:22:a1:4b:d0:20:
da:ca:cb:b2:de:78:7d:70:e4:3b:7b:6a:01:6c:6f:e1:b5:ee:
3c:7c:ad:2d:06:dc:a9:35:97:bb:46:2e:ec:3b:10:12:74:1d:
a1:15:c2:cb:0b:a9:82:99:b9:86:5c:bc:7a:fd:30:3e:9a:4e:
9a:b3:6e:cc:c3:11:4b:2a:4d:d6:7d:fb:7f:31:21:fa:0a:29:
c4:3c:4e:67:fe:77:25:ee:94:ec:87:d9:84:af:38:72:d3:e2:
35:da:b0:3f:de:8c:ee:e9:4d:4d:d4:82:39:c9:ff:ba:ab:f1:
fd:01:33:b8:30:1a:7a:3f:36:5f:93:83:0e:17:c6:08:73:a3:
55:1d:e3:00:20:22:ff:38:fd:5e:37:0e:93:04:dd:62:ce:58:
06:3f:0c:cb:48:8e:9e:2f:9e:d6:7c:f3:f8:ec:a5:b2:97:f8:
79:9d:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:16 2026 by rpki-client