
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: 0NGsoct/PsACdDyhalVfectmo+q8E/1bXydJ29PU27s=
Subject key identifier: F9:E0:42:65:0C:1B:8B:42:CC:65:7F:49:AB:90:8D:63:7A:80:97:03
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 01D4
Signing time: Wed 25 Mar 2026 02:59:21 +0000
Manifest this update: Wed 25 Mar 2026 02:59:21 +0000
Manifest next update: Wed 01 Apr 2026 02:59:21 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: J1JJR+whHsBbZMkkH6L+N10/zvdNK1wmjtghbePPKos=)
2: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: z4T+vvI8T+5oc2mgkAo/obM6X1bNreFY1igmcwM5xYk=)
3: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: y6hlqSgvXAjWJY7Sel1hIYuvC0A3C+jNhr6PU7c820I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Mar 25 02:59:21 2026 GMT
Not After : Apr 1 02:59:21 2026 GMT
Subject: CN=69c34f89-5005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:87:6e:b4:a0:16:42:e9:10:a0:27:46:f2:
84:2e:f0:2b:a1:a2:88:83:c6:2d:ca:71:27:3f:04:
aa:10:3a:b0:e6:e4:62:52:88:76:bc:f4:9d:0c:4b:
55:c7:ca:5b:61:31:8d:46:f1:dd:0d:e8:f2:2d:8b:
e0:3e:bf:e3:64:95:f9:38:4c:33:94:d2:82:2a:bc:
53:2f:da:f1:85:c3:15:28:79:1c:b3:f0:7f:10:f9:
b2:cb:67:18:93:76:71:0d:51:4b:23:d8:a8:61:69:
4a:76:31:87:22:81:b5:73:9a:ed:c1:8b:0a:88:5d:
28:2c:c4:82:e0:da:0c:eb:1d:6d:d2:21:4f:cf:7a:
43:a7:0b:50:ac:f9:36:c3:94:04:21:82:24:37:70:
84:a1:83:b4:5a:86:d4:3c:39:59:63:92:5f:14:52:
e2:73:f9:2f:59:8e:5a:af:a3:f1:4e:61:52:76:53:
a9:7a:6f:24:7d:97:a7:e9:30:0e:5e:2d:17:98:c9:
1a:b8:13:2e:44:6e:43:4c:2b:ff:29:c8:86:ee:72:
29:d1:96:37:40:01:7a:e8:94:de:8f:cf:4d:57:e9:
16:28:a4:20:ff:52:2b:f5:e8:ee:e0:3c:b1:5f:33:
ba:07:da:44:b0:7d:28:62:4c:55:41:09:ba:00:78:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:42:65:0C:1B:8B:42:CC:65:7F:49:AB:90:8D:63:7A:80:97:03
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ff:d1:a8:fc:60:b2:f6:6a:7b:12:c2:57:90:18:eb:a1:bb:
75:e6:96:84:5f:89:b9:e3:51:ec:26:26:e3:74:97:7c:97:9c:
84:50:1a:03:01:da:a8:99:3c:e3:0e:7a:3b:3f:70:e9:16:46:
bd:51:02:23:09:9a:f9:5e:c6:af:5d:34:6a:2d:8b:c9:da:69:
7a:c5:b8:0a:91:8a:b7:5a:5c:28:92:61:89:3e:14:cd:8d:be:
10:ea:6c:fc:ac:09:c4:87:8b:52:21:f6:d1:41:fb:9c:d4:c8:
d9:18:f8:b2:63:99:66:cc:a5:fc:9f:3b:2a:e1:70:3f:1e:9b:
d0:0d:f0:f4:11:40:8f:99:02:f0:8f:40:f3:a1:f2:a1:e1:c4:
09:59:6a:17:86:b1:63:74:3f:f8:93:7f:c9:e8:38:2e:2e:a7:
72:0f:42:a2:08:60:fa:e4:b3:85:e0:32:87:14:6b:ab:68:5b:
ad:19:1e:0e:00:1e:17:c3:d2:78:1a:18:46:1a:7c:85:37:56:
2b:fc:32:d7:9b:0b:d8:9f:5b:16:9a:11:73:c4:98:85:e1:4b:
79:72:24:f5:6b:20:d5:25:56:5d:d2:66:2b:9d:b3:a9:16:53:
0e:b2:e7:83:21:81:02:bf:93:19:bc:a1:ca:74:2d:5b:75:79:
95:e5:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:00 2026 by rpki-client