
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier: ke1ccoY41X6qpywu7NzBlHxoJt6eky1nGilQ4CbRj5I=
Subject key identifier: 5B:F5:E7:11:BC:F1:C8:88:D5:EC:32:C4:A7:EF:77:74:DF:44:98:F9
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number: 0254
Signing time: Sun 01 Mar 2026 03:14:51 +0000
Manifest this update: Sun 01 Mar 2026 03:14:50 +0000
Manifest next update: Sun 08 Mar 2026 03:14:50 +0000
Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: oUU4ltt4+6iFDOLxWEcgUCyyjxaC4oDiDxedVXS87Ho=)
2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: DL7ltCYvMeljm0jfsg3YPz39zVQVdk56Lm+9f/IUZQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Validity
Not Before: Mar 1 03:14:50 2026 GMT
Not After : Mar 8 03:14:50 2026 GMT
Subject: CN=69a3af2b-03df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:35:6b:47:9e:31:cb:03:bb:3a:8d:9e:97:
eb:48:db:be:5f:f4:1d:b1:a9:d4:08:7a:56:05:9a:
76:7c:9d:ee:4d:8f:c3:fe:67:2e:b4:6d:47:e2:2a:
4d:c6:a6:42:f2:a0:a6:d3:ac:6e:f9:b4:0d:ac:29:
39:2a:45:af:bd:a3:3f:ca:21:bf:5e:15:dc:2d:06:
b4:a6:23:a4:c6:76:88:77:23:13:e5:e0:ad:97:e1:
49:9b:f7:ed:dc:9e:1b:c9:16:c0:85:1c:f7:cd:14:
f6:be:96:fa:b9:9e:15:70:6b:6f:f2:f7:ff:6e:5e:
9b:b2:9d:e7:01:b2:50:78:96:b5:63:1b:42:a3:37:
3a:0b:47:00:c3:e4:45:c7:95:b5:79:03:45:62:fd:
a9:0b:57:31:f0:bd:77:47:aa:a4:a0:61:5a:80:90:
67:d4:34:c0:a7:d9:f8:13:6a:45:15:25:d5:0b:4f:
33:ce:f8:9b:7e:66:17:4c:42:b7:82:a2:41:6b:2c:
ad:2d:27:46:cf:94:45:04:b2:af:ed:f2:3c:4f:6d:
43:39:4e:14:41:0a:ed:2e:f2:f7:f0:17:b3:f1:91:
c5:51:f3:60:49:45:90:03:f6:62:37:c5:26:9d:e4:
6c:46:05:15:78:2a:57:8c:bd:e5:16:8b:da:e5:29:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:E7:11:BC:F1:C8:88:D5:EC:32:C4:A7:EF:77:74:DF:44:98:F9
X509v3 Authority Key Identifier:
keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2a:91:83:04:de:06:3d:56:f4:04:b4:ca:1a:4c:ac:9a:a1:
87:6a:f0:cf:22:53:1c:60:81:97:d5:a4:37:63:1a:06:05:48:
e6:14:da:6c:23:36:5f:d7:55:08:2c:53:eb:ed:ea:74:ab:54:
c6:72:54:63:c6:1b:74:81:4d:25:27:c2:9b:e9:8f:92:88:e7:
ca:ff:93:2d:e9:df:ba:50:7d:9f:06:e5:d1:40:32:2f:82:0e:
7c:64:cb:bc:68:08:1b:b7:70:d0:3e:b9:22:b9:ab:3b:90:27:
3a:0d:d3:1c:75:8c:21:7e:0d:25:ed:cc:da:5d:a7:20:5b:22:
2f:58:2a:8c:f2:5d:3d:1b:91:77:61:77:5c:09:eb:7a:2b:6a:
1e:fd:51:95:62:d9:61:f6:cb:0f:c5:64:64:49:2d:bb:da:a4:
8f:be:63:66:86:51:c3:ac:a7:81:6a:96:09:6f:cb:45:18:38:
18:10:49:ce:e2:b5:aa:9c:b5:24:2f:24:21:5d:9b:9d:0d:f3:
11:c5:1c:18:24:52:66:e8:f9:35:c7:10:9f:4a:44:28:c8:0e:
c1:fb:53:fa:cd:91:13:24:e4:ad:02:b0:c1:82:3b:97:4e:b1:
7b:f9:cf:8d:81:c4:71:ba:8c:21:cd:2b:3b:eb:b7:fc:21:35:
71:3b:00:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2
RDgwQ0M1MTcwHhcNMjYwMzAxMDMxNDUwWhcNMjYwMzA4MDMxNDUwWjAYMRYwFAYD
VQQDDA02OWEzYWYyYi0wM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg2Y1a0eeMcsDuzqNnpfrSNu+X/QdsanUCHpWBZp2fJ3uTY/D/mcutG1H4ipN
xqZC8qCm06xu+bQNrCk5KkWvvaM/yiG/XhXcLQa0piOkxnaIdyMT5eCtl+FJm/ft
3J4byRbAhRz3zRT2vpb6uZ4VcGtv8vf/bl6bsp3nAbJQeJa1YxtCozc6C0cAw+RF
x5W1eQNFYv2pC1cx8L13R6qkoGFagJBn1DTAp9n4E2pFFSXVC08zzvibfmYXTEK3
gqJBayytLSdGz5RFBLKv7fI8T21DOU4UQQrtLvL38Bez8ZHFUfNgSUWQA/ZiN8Um
neRsRgUVeCpXjL3lFova5Snv2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv15xG8
8ciI1ewyxKfvd3TfRJj5MB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD
NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq
Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAryqRgwTeBj1W9AS0yhpMrJqhh2rwzyJTHGCBl9WkN2MaBgVI5hTabCM2X9dV
CCxT6+3qdKtUxnJUY8YbdIFNJSfCm+mPkojnyv+TLenfulB9nwbl0UAyL4IOfGTL
vGgIG7dw0D65IrmrO5AnOg3THHWMIX4NJe3M2l2nIFsiL1gqjPJdPRuRd2F3XAnr
eitqHv1RlWLZYfbLD8VkZEktu9qkj75jZoZRw6yngWqWCW/LRRg4GBBJzuK1qpy1
JC8kIV2bnQ3zEcUcGCRSZuj5NccQn0pEKMgOwftT+s2REyTkrQKwwYI7l06xe/nP
jYHEcbqMIc0rO+u3/CE1cTsAow==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:14 2026 by rpki-client