
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier: XqVSu7ylSHt+h0Cj+LajPF1wQRE76xLZ9+y/nKfNC2A=
Subject key identifier: BF:32:5E:44:89:9E:70:6F:FF:65:91:12:FE:A3:86:06:DB:F5:41:3E
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number: 0205
Signing time: Wed 13 May 2026 03:08:18 +0000
Manifest this update: Wed 13 May 2026 03:08:17 +0000
Manifest next update: Wed 20 May 2026 03:08:17 +0000
Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: pkVJKdaiL5QcVn2wzd3rJzuFkSTt1M/bFEq2OhBUsEg=)
2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 9g+cXzlenM5QdNB0vC6zwv+Sc4F3maBeP/ANCVxlI0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Validity
Not Before: May 13 03:08:17 2026 GMT
Not After : May 20 03:08:17 2026 GMT
Subject: CN=6a03eb22-deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:b9:fd:eb:2e:24:ae:4a:d5:83:06:43:13:
68:4a:eb:52:a2:a9:f3:0c:67:ab:81:27:00:bf:67:
eb:11:56:fa:ad:95:93:de:68:ae:a7:af:b2:e0:3f:
3c:b3:f4:08:d8:4c:ff:74:e1:3a:fc:2b:10:86:0b:
b3:36:26:a7:66:a9:fd:0e:2f:3e:7e:e0:0b:ea:58:
be:53:f3:0c:d1:4f:92:f3:49:87:6b:4a:5c:31:26:
0b:80:29:35:15:cc:af:dd:2c:9c:b5:72:39:c4:e2:
37:30:8d:3f:b5:af:91:de:c0:9d:14:ad:4f:b7:bd:
48:47:20:6f:52:f0:24:26:a0:c2:13:80:99:1e:54:
bc:74:44:d7:70:6a:17:3b:2e:f8:01:56:50:62:f3:
61:c1:e7:5a:2a:3a:32:ad:d4:61:d8:ad:3a:b9:66:
47:59:60:04:6b:40:c3:d7:d5:9e:81:b6:93:61:b1:
a6:97:54:f9:c0:18:0c:06:3b:52:e1:9e:a3:59:91:
0a:93:0d:42:0c:57:f0:00:51:af:52:46:6e:11:89:
4e:31:92:d0:b8:d8:9f:84:f4:b1:2f:58:ad:2c:2f:
28:d9:bd:ca:3f:78:da:26:b9:39:71:2d:29:70:04:
2f:b3:48:0b:8d:f2:2a:4d:64:1c:8f:c0:df:1c:69:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:32:5E:44:89:9E:70:6F:FF:65:91:12:FE:A3:86:06:DB:F5:41:3E
X509v3 Authority Key Identifier:
keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:64:6d:53:7f:09:df:fc:dd:0f:c1:30:11:ee:9e:1e:c0:e7:
21:a2:cf:ad:78:80:1a:7d:d6:9e:4b:91:cc:90:d1:3b:27:e3:
d6:31:7d:25:56:b8:6b:b7:2e:3b:b6:b6:30:dd:c9:8b:82:72:
0d:7e:b5:1e:b8:94:67:c2:57:d2:a9:bb:1d:27:83:ba:ce:e0:
50:fb:16:f8:6b:37:ca:f9:cd:64:f1:06:d7:d5:c0:8a:4d:cc:
23:c6:61:8b:a5:90:82:dd:fb:fe:a5:71:c3:3d:79:de:06:17:
c3:95:80:97:49:65:de:54:89:af:b8:13:cd:1b:e8:3e:2b:8f:
be:e6:89:2a:71:bd:b4:e8:93:dd:7b:e7:c5:99:7e:73:9c:64:
c5:c5:29:93:6b:12:c9:ce:18:cc:2f:60:de:14:08:0f:7d:10:
29:2d:ec:3b:77:ed:1f:d5:86:39:36:85:b7:e0:36:e9:33:b6:
70:32:db:c7:9d:8a:56:e4:0b:62:be:cc:ad:55:1d:24:ad:76:
b4:8c:ef:79:25:ee:04:91:ec:0a:5b:ce:7f:48:3e:f5:f2:2f:
d9:be:32:31:63:71:8e:0c:b0:72:69:4e:78:f9:cd:8a:c7:40:
a4:bd:ac:52:db:36:d6:c2:c3:8b:eb:d1:1a:0a:db:8e:23:11:
d7:92:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:54 2026 by rpki-client