
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier: TMUC7tVriZVE1BjUt56nkA3pi/TjaAzKLUuaLv7eo20=
Subject key identifier: 39:31:8C:09:26:7E:BF:98:DB:ED:2C:93:39:40:B2:56:0E:49:28:DE
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number: 0225
Signing time: Fri 17 Apr 2026 02:44:29 +0000
Manifest this update: Fri 17 Apr 2026 02:44:29 +0000
Manifest next update: Fri 24 Apr 2026 02:44:29 +0000
Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: ybPNKOvgQ+TKzv8jdYgkUV2ZK/JE7c28nmY2j6nRsV4=)
2: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=)
3: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: akuOHZWMxhdBgYqE6Ifrb7JtsIz0NQwxFPmVS9VWAZI=)
4: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: CJlRP/VDSjivJDg1KUXNqi92MzCGV7Ydo4BmSJUkkAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Validity
Not Before: Apr 17 02:44:29 2026 GMT
Not After : Apr 24 02:44:29 2026 GMT
Subject: CN=69e19e8d-d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:46:c3:7d:b7:a8:65:05:81:4b:b7:ff:2c:
9c:fe:9b:b8:81:c0:82:fe:6b:e9:0a:35:89:a2:bc:
90:0c:e7:59:59:5f:74:56:55:76:3d:7b:12:a0:57:
7b:37:db:6a:0d:a7:0c:0d:9b:92:fa:73:90:03:e2:
14:46:6d:50:d6:bc:d6:ee:38:22:80:50:eb:cb:e4:
da:96:51:38:1a:72:cf:f4:79:f7:2f:33:08:5c:24:
21:87:a4:b0:a6:cf:e8:ca:a0:66:3b:6e:a6:29:df:
67:f9:77:98:e2:99:ff:87:47:fa:d1:07:b7:7d:00:
60:01:d9:05:c5:73:e3:69:e3:1a:a8:8d:62:36:79:
83:f9:90:75:8b:71:48:41:13:78:65:84:d9:e8:cd:
a2:55:10:c8:74:1f:d7:19:db:3d:bc:1f:4e:de:fb:
4d:36:ae:1f:68:81:cc:62:1c:28:b0:35:d6:29:08:
7a:40:67:cb:eb:c6:f8:d6:d5:7e:3e:ec:cc:65:b8:
08:27:2b:3d:bb:13:0f:14:d2:04:b8:87:31:78:39:
e7:d1:49:65:85:60:4c:1a:ab:95:4f:ca:92:96:7a:
02:73:d1:97:da:6e:a8:75:86:49:ce:31:55:70:91:
da:fb:3c:31:c9:61:ef:35:38:04:08:ba:42:e8:f2:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:8C:09:26:7E:BF:98:DB:ED:2C:93:39:40:B2:56:0E:49:28:DE
X509v3 Authority Key Identifier:
keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:bb:f4:03:22:57:6c:0d:53:da:4d:94:35:37:18:2e:04:
14:fe:e5:43:6e:70:25:26:0f:97:95:80:17:8f:f5:94:61:0a:
78:f2:33:05:e5:1c:1a:25:04:81:78:82:fe:8c:f0:40:0e:a7:
0d:a0:62:51:cf:86:79:44:68:85:ea:b9:d8:31:b5:9c:5f:c1:
e8:c3:94:a3:75:c8:34:69:4d:e1:1c:ea:75:06:93:e5:25:63:
14:8d:6d:64:b8:9e:8d:46:b8:83:dc:32:6e:6e:45:b5:f2:8d:
5b:0c:3d:09:b3:e8:28:8b:5a:fb:90:42:38:40:51:f2:19:19:
6c:1f:53:59:3f:06:0b:38:02:ad:67:df:9f:b8:62:96:1f:a3:
e1:29:39:0d:d0:be:0b:29:00:04:7e:9e:82:0d:00:c7:ca:5b:
3f:9a:8d:c5:fc:66:62:6f:34:53:f7:09:92:6b:78:b8:f9:31:
03:61:ae:ec:ac:e7:eb:de:38:c1:85:a6:21:20:d4:1d:79:38:
2a:25:2b:43:6b:44:62:12:f5:1a:bb:c5:b3:b1:9b:30:49:a0:
4e:44:0a:39:6c:4f:29:8b:7f:f7:b8:48:fa:cd:28:c4:04:b6:
3a:69:8a:22:d4:9f:b4:b9:c9:6f:44:03:39:54:97:c0:1b:83:
6b:96:f7:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF
Q0Y5QTU4MjcwHhcNMjYwNDE3MDI0NDI5WhcNMjYwNDI0MDI0NDI5WjAYMRYwFAYD
VQQDEw02OWUxOWU4ZC1kMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFhGw323qGUFgUu3/yyc/pu4gcCC/mvpCjWJoryQDOdZWV90VlV2PXsSoFd7
N9tqDacMDZuS+nOQA+IURm1Q1rzW7jgigFDry+TallE4GnLP9Hn3LzMIXCQhh6Sw
ps/oyqBmO26mKd9n+XeY4pn/h0f60Qe3fQBgAdkFxXPjaeMaqI1iNnmD+ZB1i3FI
QRN4ZYTZ6M2iVRDIdB/XGds9vB9O3vtNNq4faIHMYhwosDXWKQh6QGfL68b41tV+
PuzMZbgIJys9uxMPFNIEuIcxeDnn0UllhWBMGquVT8qSlnoCc9GX2m6odYZJzjFV
cJHa+zwxyWHvNTgECLpC6PKAfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkxjAkm
fr+Y2+0skzlAslYOSSjeMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD
NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm
LWc0WnZIUExyYWpzLWFXQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABQi79AMiV2wNU9pNlDU3GC4EFP7lQ25wJSYPl5WAF4/1lGEKePIzBeUcGiUE
gXiC/ozwQA6nDaBiUc+GeURoheq52DG1nF/B6MOUo3XINGlN4RzqdQaT5SVjFI1t
ZLiejUa4g9wybm5FtfKNWww9CbPoKIta+5BCOEBR8hkZbB9TWT8GCzgCrWffn7hi
lh+j4Sk5DdC+CykABH6egg0Ax8pbP5qNxfxmYm80U/cJkmt4uPkxA2Gu7Kzn6944
wYWmISDUHXk4KiUrQ2tEYhL1GrvFs7GbMEmgTkQKOWxPKYt/97hI+s0oxAS2OmmK
ItSftLnJb0QDOVSXwBuDa5b3dA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:12 2026 by rpki-client