
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json)
Hash identifier: mrdJ2f5fueEYRXZYnIrP1L5G2DRZxEGiLsAN6t9PP4E=
Subject key identifier: 85:80:07:4B:0A:05:EA:E8:3C:C2:3E:C7:8A:85:BF:71:20:64:A8:54
Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
Manifest number: 0229
Signing time: Mon 02 Mar 2026 01:42:58 +0000
Manifest this update: Mon 02 Mar 2026 01:42:56 +0000
Manifest next update: Mon 09 Mar 2026 01:42:56 +0000
Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: CDi97vADmjykHa8aOcyeq9sDQur/qc7Zr8IVr0ztv4c=)
2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: rd/wAvSucL3KznyqiuFkW7+IzcHszwzgGGaI1AWvgdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Validity
Not Before: Mar 2 01:42:56 2026 GMT
Not After : Mar 9 01:42:56 2026 GMT
Subject: CN=69a4eb21-b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:46:fc:e2:da:e3:ba:1e:55:f7:ae:44:16:
b7:b3:3f:95:3e:a6:f1:2e:87:6b:87:85:af:f6:f6:
69:e6:f2:50:ef:1f:ce:7a:e5:78:05:c4:06:d6:c5:
af:94:7d:76:1e:8c:55:ce:a5:73:f4:af:99:af:e8:
60:21:b5:a7:4f:cb:f0:41:8a:eb:b2:31:d4:98:05:
db:1a:35:e9:c3:1e:bd:9b:6c:51:fe:cd:d1:94:09:
a3:0a:33:69:c4:1c:74:ea:09:6b:eb:3b:5b:72:d4:
cb:59:e4:2d:cb:9a:83:7c:26:dd:68:f2:17:f7:64:
9b:c9:0d:be:55:8f:54:ea:0a:87:24:87:20:bc:3d:
0f:ec:7d:bb:21:7e:81:8a:4d:f9:84:6f:81:52:d5:
ad:fa:3a:a8:58:17:52:70:da:a7:39:18:a9:0d:f5:
96:0d:53:18:87:fc:4d:88:8a:45:25:e3:e1:e3:38:
41:9e:77:58:a6:f5:ec:f4:63:e4:e2:3f:6b:ad:9b:
28:7e:2c:c9:a1:53:1e:15:76:8b:d1:74:a4:83:ab:
26:44:49:4e:bc:46:f7:3e:f8:49:df:18:33:a1:72:
b9:11:2c:3b:03:da:9e:2f:fa:dd:ba:47:03:69:79:
e0:fe:65:fc:94:12:7d:79:54:fe:8f:05:f0:ba:64:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:80:07:4B:0A:05:EA:E8:3C:C2:3E:C7:8A:85:BF:71:20:64:A8:54
X509v3 Authority Key Identifier:
keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:81:98:13:8f:9b:6c:96:e3:82:a1:ba:04:c3:af:0c:28:
aa:72:8b:2c:f9:2d:04:ca:c2:7b:b0:a4:b9:c9:5a:65:8d:ba:
46:d1:77:c2:ec:a2:75:55:ac:0d:e9:16:26:be:32:a2:db:66:
dc:25:1b:c1:5c:5e:53:b6:cd:b2:b8:75:13:88:e5:ec:da:10:
77:4d:00:96:bb:43:9e:cf:ac:62:06:a2:c0:81:81:7e:ad:de:
a5:01:45:c6:40:c4:3d:1e:1b:3a:0f:c0:6e:b9:0c:6c:11:e4:
1d:2b:82:d0:9e:a9:a9:82:a3:ef:4b:a4:2f:b3:3b:b6:66:5f:
50:1f:ae:81:77:28:3a:d6:14:de:7a:e1:97:4d:b2:a4:b1:f3:
71:69:44:3b:2d:87:d6:16:14:d4:9a:b8:73:c1:ae:e0:76:5c:
05:c4:54:f5:8a:42:ee:bd:bf:fb:b3:fa:8a:c4:f6:21:87:01:
ef:f2:83:a9:f9:a2:6b:28:80:e2:4c:e8:42:8f:60:b1:a5:e4:
5a:29:f2:5b:2a:55:67:8d:d9:81:eb:20:22:63:5f:f9:94:32:
da:9c:80:7d:94:e9:4e:f3:a4:cc:ec:17:15:cf:14:f2:9c:cb:
28:4f:36:13:9b:49:99:f3:69:2f:ab:00:ce:ff:b7:f8:a6:78:
d6:26:00:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw
QkE2QzI0MDkwHhcNMjYwMzAyMDE0MjU2WhcNMjYwMzA5MDE0MjU2WjAYMRYwFAYD
VQQDEw02OWE0ZWIyMS1iMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueFG/OLa47oeVfeuRBa3sz+VPqbxLodrh4Wv9vZp5vJQ7x/OeuV4BcQG1sWv
lH12HoxVzqVz9K+Zr+hgIbWnT8vwQYrrsjHUmAXbGjXpwx69m2xR/s3RlAmjCjNp
xBx06glr6ztbctTLWeQty5qDfCbdaPIX92SbyQ2+VY9U6gqHJIcgvD0P7H27IX6B
ik35hG+BUtWt+jqoWBdScNqnORipDfWWDVMYh/xNiIpFJePh4zhBnndYpvXs9GPk
4j9rrZsofizJoVMeFXaL0XSkg6smRElOvEb3PvhJ3xgzoXK5ESw7A9qeL/rdukcD
aXng/mX8lBJ9eVT+jwXwumRCKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWAB0sK
BeroPMI+x4qFv3EgZKhUMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3
MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK
Mm41dklMSnRMelVMcHNKQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjaGBmBOPm2yW44KhugTDrwwoqnKLLPktBMrCe7CkuclaZY26RtF3wuyidVWs
DekWJr4yottm3CUbwVxeU7bNsrh1E4jl7NoQd00AlrtDns+sYgaiwIGBfq3epQFF
xkDEPR4bOg/AbrkMbBHkHSuC0J6pqYKj70ukL7M7tmZfUB+ugXcoOtYU3nrhl02y
pLHzcWlEOy2H1hYU1Jq4c8Gu4HZcBcRU9YpC7r2/+7P6isT2IYcB7/KDqfmiayiA
4kzoQo9gsaXkWinyWypVZ43ZgesgImNf+ZQy2pyAfZTpTvOkzOwXFc8U8pzLKE82
E5tJmfNpL6sAzv+3+KZ41iYAHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:40 2026 by rpki-client