
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json)
Hash identifier: /MMKyjGRbvL735n+Sj3Erm31AeQdolCncV5LTDnLz3s=
Subject key identifier: 45:AB:54:1F:73:89:F3:43:F7:65:8E:90:0F:A0:A9:96:EB:50:D8:03
Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Certificate serial: 0854
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
Manifest number: 0854
Signing time: Tue 12 May 2026 20:51:46 +0000
Manifest this update: Tue 12 May 2026 20:51:46 +0000
Manifest next update: Tue 19 May 2026 20:51:46 +0000
Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: yQpShcjSEt53w/5ZXjh0ZoZX0DU1Y7WHSBj8iNO1ibM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Validity
Not Before: May 12 20:51:46 2026 GMT
Not After : May 19 20:51:46 2026 GMT
Subject: CN=6a0392e2-8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:79:dc:9f:2b:fd:18:2c:2f:88:62:f0:04:
d7:8b:2b:47:af:e5:0a:92:11:bd:62:03:6d:06:cf:
3b:16:e3:88:0d:79:2b:ca:99:a7:e2:80:48:02:b2:
20:66:84:e9:18:00:b7:4c:60:f2:f4:5d:9d:b0:ea:
0b:68:57:bb:10:4b:97:12:d9:64:fa:0b:04:19:7b:
4d:28:0f:f9:36:0f:9b:f2:92:e4:33:c1:b1:f3:68:
10:89:ed:44:6d:8c:aa:c1:ba:08:75:af:c4:6f:71:
99:71:0d:1f:68:be:88:bb:24:85:26:e8:74:3d:34:
95:82:c5:54:38:10:6d:1c:b9:e7:99:fc:8e:fa:a6:
1e:16:9e:3f:21:9a:f7:1a:c2:31:68:41:73:4d:27:
8a:85:1c:a1:5d:c3:8a:19:c5:3c:6a:99:30:fc:19:
48:96:24:fb:36:cb:01:e6:05:2c:8a:fd:84:8e:da:
9f:08:f0:14:ac:41:6d:97:43:00:d5:4d:68:bd:bb:
49:f5:c7:5d:fb:24:b1:80:f6:e1:2e:c2:de:73:b4:
74:e5:38:2e:58:09:37:ac:46:0b:f4:2a:ce:94:77:
13:42:26:b4:d8:eb:74:bb:88:ee:57:9e:95:e2:23:
37:94:17:af:32:5a:00:4c:d9:dd:8f:7c:ce:bc:d9:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:54:1F:73:89:F3:43:F7:65:8E:90:0F:A0:A9:96:EB:50:D8:03
X509v3 Authority Key Identifier:
keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a5:30:ca:4e:5e:32:e6:af:cc:55:d3:e3:c3:49:72:c7:22:
24:87:f9:e7:2d:2c:6a:e8:0d:ee:9f:fe:fd:0d:d6:0c:95:eb:
2c:0a:db:2e:89:f7:88:23:e9:d0:0e:fc:c5:7e:da:86:98:0b:
2b:59:b3:8d:b7:54:4b:6b:2f:8c:c0:ff:53:e3:62:1e:7e:09:
92:8d:b0:1c:37:4d:99:b8:90:e2:59:39:e5:f3:76:77:2b:6c:
ad:67:6a:af:f9:bc:26:c6:b3:36:41:3a:5e:31:fb:0c:dc:74:
a8:fe:11:5f:af:c4:65:f6:b6:19:28:71:dc:fb:52:2d:0c:ef:
7a:c5:18:43:d7:3b:74:a8:3c:e9:4f:53:1f:86:ea:90:36:55:
66:96:31:f1:99:1f:c3:37:c9:2f:7d:df:d9:2e:38:2c:1d:08:
3c:3c:62:9d:4e:d5:c8:86:fc:0c:49:55:cd:13:e3:e8:de:1a:
01:ae:c5:f6:61:37:7d:af:52:fd:b0:a5:62:7a:14:31:99:3c:
82:19:22:e0:cd:9e:73:e0:03:ef:21:7d:4d:5f:ef:98:26:05:
ec:d9:04:a1:e6:41:9c:6d:a8:42:b8:16:03:a2:e4:e1:c9:51:
64:45:e4:64:97:57:99:f6:4c:d3:1d:38:a0:91:bd:6e:81:b6:
c5:8e:5f:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC
NEVEQ0RCN0IwHhcNMjYwNTEyMjA1MTQ2WhcNMjYwNTE5MjA1MTQ2WjAYMRYwFAYD
VQQDEw02YTAzOTJlMi04MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6t553J8r/RgsL4hi8ATXiytHr+UKkhG9YgNtBs87FuOIDXkrypmn4oBIArIg
ZoTpGAC3TGDy9F2dsOoLaFe7EEuXEtlk+gsEGXtNKA/5Ng+b8pLkM8Gx82gQie1E
bYyqwboIda/Eb3GZcQ0faL6IuySFJuh0PTSVgsVUOBBtHLnnmfyO+qYeFp4/IZr3
GsIxaEFzTSeKhRyhXcOKGcU8apkw/BlIliT7NssB5gUsiv2EjtqfCPAUrEFtl0MA
1U1ovbtJ9cdd+ySxgPbhLsLec7R05TguWAk3rEYL9CrOlHcTQia02Ot0u4juV56V
4iM3lBevMloATNndj3zOvNn/hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWrVB9z
ifND92WOkA+gqZbrUNgDMB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz
MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi
V0hRU0x5NGJpc08wN2MyM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC6Uwyk5eMuavzFXT48NJcsciJIf55y0saugN7p/+/Q3WDJXrLArbLon3iCPp
0A78xX7ahpgLK1mzjbdUS2svjMD/U+NiHn4Jko2wHDdNmbiQ4lk55fN2dytsrWdq
r/m8JsazNkE6XjH7DNx0qP4RX6/EZfa2GShx3PtSLQzvesUYQ9c7dKg86U9TH4bq
kDZVZpYx8ZkfwzfJL33f2S44LB0IPDxinU7VyIb8DElVzRPj6N4aAa7F9mE3fa9S
/bClYnoUMZk8ghki4M2ec+AD7yF9TV/vmCYF7NkEoeZBnG2oQrgWA6Lk4clRZEXk
ZJdXmfZM0x04oJG9boG2xY5f+w==
-----END CERTIFICATE-----
Generated at Wed May 13 00:11:57 2026 by rpki-client