
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier: qj8gGR7C137aX5RwYYqqZ5E61s0aLY//p5EwH/hnimY=
Subject key identifier: D9:F1:47:52:C7:63:B0:81:85:ED:9F:66:48:1D:8B:D5:0F:33:0B:81
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number: 018C
Signing time: Wed 13 May 2026 04:33:48 +0000
Manifest this update: Wed 13 May 2026 04:33:47 +0000
Manifest next update: Wed 20 May 2026 04:33:47 +0000
Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: pkUYWoPNUxW3mmyHXtVjmbjoB3/1Op4+LyJHfhlh6RE=)
2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=)
3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Validity
Not Before: May 13 04:33:47 2026 GMT
Not After : May 20 04:33:47 2026 GMT
Subject: CN=6a03ff2c-db08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:1c:13:79:de:91:3e:d7:9d:a8:a7:a3:9e:
02:16:54:56:40:e0:e4:ef:64:28:4e:11:94:2c:b6:
49:ca:55:e0:41:ea:14:9c:c4:3a:01:32:6a:57:b8:
d2:f0:d2:bc:67:e4:f8:8a:90:c8:e9:40:e5:db:9f:
12:8d:56:c3:f0:7f:ac:50:53:e2:2d:0f:a3:89:2c:
20:49:7f:8e:7e:0b:21:1e:7a:86:69:2b:a5:48:69:
61:c5:58:8c:57:53:41:62:9d:09:6c:8f:99:05:67:
07:2c:1a:5a:73:87:43:cf:6e:aa:51:21:38:ba:c8:
dd:72:50:d7:12:87:ac:a8:4a:dc:04:2d:13:b6:14:
4c:73:1c:20:e3:2d:fc:89:f2:e0:eb:23:09:98:a7:
07:4d:50:7a:4b:e3:b9:52:21:5a:83:ef:f2:a2:e1:
09:09:13:9a:82:c1:ba:7c:c4:bd:02:5a:8c:e5:5b:
1f:64:5b:a5:82:ec:aa:df:48:27:c5:aa:3f:e7:cb:
94:b6:1b:4d:cf:07:82:c0:31:ae:27:df:41:08:d7:
9c:12:54:81:d2:5a:9a:0b:a3:71:74:7a:96:aa:91:
57:e6:e1:ea:1a:1d:60:d9:d5:ea:41:22:d2:5e:f4:
88:ba:e6:9c:00:55:70:0c:18:e0:fa:ee:4b:5a:07:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:47:52:C7:63:B0:81:85:ED:9F:66:48:1D:8B:D5:0F:33:0B:81
X509v3 Authority Key Identifier:
keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:19:cc:11:63:7f:04:0c:f1:77:65:4c:7d:4d:1b:bd:6e:94:
09:14:5e:de:7f:37:31:2f:04:29:49:f9:38:8b:67:a4:48:a8:
e7:d2:da:6f:27:3f:5d:c7:04:41:3c:e5:5f:1d:bd:b2:02:56:
84:8c:8b:23:42:fe:23:3b:57:20:b9:4e:5d:d3:49:04:87:c3:
56:ec:02:62:04:f6:bc:be:41:19:79:67:99:d6:a7:c7:fc:33:
26:aa:39:38:5c:b6:2c:c7:cd:83:61:be:95:18:8a:b9:06:30:
b7:da:31:cb:17:0a:f6:f4:b4:9a:7d:e3:5f:8c:be:9c:2c:b4:
3b:4e:f0:1d:55:fc:09:90:5c:f2:86:4e:c9:8e:ad:c3:73:f0:
d6:0c:a0:e5:5a:43:eb:cf:c5:8f:bc:5f:b8:0f:f0:f0:f9:b0:
05:b5:3f:ee:b9:d8:f1:b8:14:2a:e4:00:61:e6:ba:08:4b:7d:
42:23:96:1b:f1:20:40:34:83:c4:d7:f8:bc:1e:46:8d:27:cf:
a7:bc:c8:f3:d8:09:ec:22:4c:99:1c:1f:22:4c:4d:06:07:24:
2d:3f:ac:b7:f9:e3:a7:9a:cc:d2:66:d5:5d:84:b3:d9:98:c8:
ba:9f:6e:f6:60:19:94:43:a0:51:18:f9:f7:f3:55:96:9e:b1:
ac:fc:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:36 2026 by rpki-client