
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json)
Hash identifier: loTRtVaHl/yXs77TULEB475aiG1tRDOHKmasuh4yNHQ=
Subject key identifier: A4:28:DE:36:36:66:2A:8D:09:BF:18:39:4D:F9:5E:1E:C6:ED:91:F7
Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
Manifest number: 053B
Signing time: Thu 16 Apr 2026 23:25:43 +0000
Manifest this update: Thu 16 Apr 2026 23:25:43 +0000
Manifest next update: Thu 23 Apr 2026 23:25:43 +0000
Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: +LkWbN6MQvb/LzFmQIZgM+hy7Bgcs6i9vx3JGnQ5Xuc=)
2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Rt3TK51O88nSTbrQi7M6zmvfejUXKL1ItfboEtNWTOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Validity
Not Before: Apr 16 23:25:43 2026 GMT
Not After : Apr 23 23:25:43 2026 GMT
Subject: CN=69e16ff7-59d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:ec:26:2c:c4:1d:bf:de:07:ed:f1:5c:26:
26:4a:7e:19:e7:e5:64:15:fb:5e:df:93:3c:83:15:
68:f6:a6:17:69:28:76:df:3d:73:1c:73:40:7e:0f:
f8:f4:f7:8e:e7:bd:18:f2:98:42:db:ba:ad:15:a5:
05:67:24:5b:5d:fa:5a:5c:b8:21:92:5f:80:7b:03:
53:a6:27:1c:88:da:e8:da:a3:45:fc:c9:21:e4:53:
e2:5a:1d:e4:ca:b2:45:b5:b0:15:9c:50:c9:1e:e5:
81:c1:01:2c:26:11:26:5d:3b:dc:df:22:77:65:d2:
d5:f7:1a:c2:23:5b:b2:3a:23:4c:5e:06:61:d1:15:
c2:93:80:6a:66:8d:a1:1d:b7:32:3b:4a:03:37:cd:
ad:8a:49:3b:dd:ac:1e:91:73:24:85:b6:70:cf:a9:
e1:8c:f2:72:69:52:5d:c1:10:ec:57:69:1b:50:bf:
b1:b1:ec:cb:af:08:a3:e7:72:cb:e2:76:f6:76:9c:
9f:89:69:df:34:36:fe:8d:26:9d:21:96:93:de:71:
d2:f0:5c:1b:7d:71:c9:5e:3a:00:54:e2:02:80:fe:
28:7e:f7:d4:d6:6f:6b:88:bb:f4:b1:9c:27:36:c4:
4d:12:3d:89:f6:95:c8:68:b6:a6:81:63:52:31:91:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:DE:36:36:66:2A:8D:09:BF:18:39:4D:F9:5E:1E:C6:ED:91:F7
X509v3 Authority Key Identifier:
keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:87:2c:a2:e0:14:6b:25:69:f8:bb:82:75:b5:44:b0:64:
a7:7f:ac:2c:ca:58:bb:87:03:31:38:69:87:95:35:80:8c:19:
0b:fc:12:78:18:f3:b4:4d:65:9b:50:14:68:d7:ec:3a:93:c2:
a2:4a:64:15:5d:b7:a2:4f:18:82:26:be:88:2c:89:cf:68:22:
2f:d6:53:cc:7d:9d:70:f8:c5:94:85:ae:17:d1:c1:63:c9:56:
fe:12:1e:32:85:6d:f4:9b:53:cf:da:8f:19:d1:c0:48:93:75:
7b:47:67:41:e4:63:bb:e1:19:59:14:73:87:33:37:4c:3e:99:
a8:4f:1b:87:68:4b:c5:d3:0d:f8:a0:04:2a:b1:dc:4c:24:fe:
78:62:3b:2e:70:48:f7:13:e3:b8:ff:52:05:cf:b8:e0:31:a6:
04:80:49:17:95:af:08:b3:7f:c9:0e:06:b6:8c:3c:93:8b:99:
6a:0b:8e:72:ec:1d:88:68:90:4a:9b:b7:83:d3:2a:6e:b0:01:
91:1c:cc:9c:bb:26:9b:c2:82:df:1d:4f:9b:d9:f6:f5:23:2d:
c2:ce:be:aa:b1:f4:74:b2:f3:78:96:22:be:e0:ba:49:65:13:
1f:2b:d5:2c:b3:b3:49:b7:20:41:f6:33:61:cf:54:ce:2a:9f:
16:a0:20:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC
NTdEMUM0RTgwHhcNMjYwNDE2MjMyNTQzWhcNMjYwNDIzMjMyNTQzWjAYMRYwFAYD
VQQDEw02OWUxNmZmNy01OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7HsJizEHb/eB+3xXCYmSn4Z5+VkFfte35M8gxVo9qYXaSh23z1zHHNAfg/4
9PeO570Y8phC27qtFaUFZyRbXfpaXLghkl+AewNTpicciNro2qNF/Mkh5FPiWh3k
yrJFtbAVnFDJHuWBwQEsJhEmXTvc3yJ3ZdLV9xrCI1uyOiNMXgZh0RXCk4BqZo2h
HbcyO0oDN82tikk73awekXMkhbZwz6nhjPJyaVJdwRDsV2kbUL+xsezLrwij53LL
4nb2dpyfiWnfNDb+jSadIZaT3nHS8FwbfXHJXjoAVOICgP4ofvfU1m9riLv0sZwn
NsRNEj2J9pXIaLamgWNSMZHjmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQo3jY2
ZiqNCb8YOU35Xh7G7ZH3MB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND
NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX
VmVicEdoeHkwUy0xZlJ4T2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZbeHLKLgFGslafi7gnW1RLBkp3+sLMpYu4cDMThph5U1gIwZC/wSeBjztE1l
m1AUaNfsOpPCokpkFV23ok8Ygia+iCyJz2giL9ZTzH2dcPjFlIWuF9HBY8lW/hIe
MoVt9JtTz9qPGdHASJN1e0dnQeRju+EZWRRzhzM3TD6ZqE8bh2hLxdMN+KAEKrHc
TCT+eGI7LnBI9xPjuP9SBc+44DGmBIBJF5WvCLN/yQ4Gtow8k4uZaguOcuwdiGiQ
Spu3g9MqbrABkRzMnLsmm8KC3x1Pm9n29SMtws6+qrH0dLLzeJYivuC6SWUTHyvV
LLOzSbcgQfYzYc9UziqfFqAgkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:11 2026 by rpki-client