
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier: D5UIwdfSh/3TISsqaitU7jVwDcYxIpFlVAZ2h7tcVXQ=
Subject key identifier: 20:B7:37:EF:13:23:0F:A7:6D:DE:2A:16:64:C8:59:F3:C8:A0:60:CE
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number: 04ED
Signing time: Sun 01 Mar 2026 00:21:18 +0000
Manifest this update: Sun 01 Mar 2026 00:21:18 +0000
Manifest next update: Sun 08 Mar 2026 00:21:18 +0000
Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: uLq+2buRPq6LUyVEAuxVkZeLqEYGU23KjaOQhJ5/0Sg=)
2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: roW5JwJ3oO/3SBHteb6ZmI8xvOq498IS1bxOQnc+LEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Validity
Not Before: Mar 1 00:21:18 2026 GMT
Not After : Mar 8 00:21:18 2026 GMT
Subject: CN=69a3867e-0f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:f0:0e:00:c4:fe:f0:56:ab:23:88:80:5c:
b4:46:a2:4d:38:7d:75:39:57:db:c0:7a:a5:21:f0:
1a:25:d0:14:3c:68:d0:f5:f1:3d:d2:a6:de:45:68:
fa:4c:a1:2f:3d:72:15:59:67:78:9a:ca:41:e2:14:
a5:7e:0c:a1:14:1c:cb:2a:28:2e:f7:f7:be:2f:37:
b1:5b:6b:91:fd:12:d2:36:54:e6:a8:7e:7e:5e:2b:
d5:8b:43:8c:40:81:7d:5c:96:c2:34:84:d6:bb:74:
0e:f0:03:98:32:7a:bf:03:b5:76:4a:d8:b2:eb:3a:
93:80:8d:02:fa:ab:96:db:8e:03:c6:13:ba:b1:aa:
3a:6e:df:76:9a:18:ef:33:78:7d:f0:a7:4a:95:4a:
32:88:8a:1d:03:76:fb:d3:46:43:b4:9b:e9:74:80:
5b:70:de:bd:58:80:f1:31:eb:fe:e5:10:c1:12:f2:
b1:00:38:0e:13:d0:0c:79:07:6a:de:96:99:f4:64:
6d:84:c2:7f:48:9f:e8:2d:55:02:30:44:bd:57:75:
07:39:6a:d0:35:ae:ca:12:9d:c4:f2:38:17:58:51:
09:04:d5:f3:19:92:dd:6e:5c:04:c4:7d:9e:8c:8f:
c4:28:ff:7c:40:46:dc:93:d9:fe:a4:38:44:e6:72:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:37:EF:13:23:0F:A7:6D:DE:2A:16:64:C8:59:F3:C8:A0:60:CE
X509v3 Authority Key Identifier:
keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:29:69:e2:e1:b0:f6:05:11:81:bc:38:42:b9:8f:b5:11:5f:
b0:17:79:4a:be:5e:f4:53:12:29:60:ff:f2:fd:f6:2e:db:c8:
0d:1a:3f:fe:19:64:51:fa:0c:05:4b:4f:77:2a:67:fb:97:0a:
ae:b9:ea:be:d6:65:8f:e7:6e:33:0a:18:18:ae:3e:7f:19:d2:
7d:d7:c7:89:e4:52:52:9a:4d:3e:58:0e:ff:d3:c2:ec:00:0f:
48:c1:bf:a1:8b:7f:8b:89:f2:65:ef:44:bf:8d:12:3e:74:fc:
94:d2:f0:37:f9:01:fc:32:ac:84:96:56:3c:8a:7c:52:50:87:
ef:16:a6:11:52:34:3b:10:bc:97:2c:bb:d4:a8:e9:01:fd:74:
f6:20:3b:16:11:c9:28:66:60:29:30:4c:aa:75:f3:db:94:4f:
3d:95:59:08:c1:95:bd:b2:e2:d6:f0:60:30:80:d3:b4:c6:51:
47:e1:39:9d:88:76:55:33:1d:ec:db:5b:c5:ec:53:75:10:dc:
a7:f8:0d:1e:19:d3:dd:7e:1c:2a:77:f2:87:76:01:8f:a5:02:
6b:af:6f:90:da:95:20:94:d5:63:46:ac:7f:2d:8e:5a:26:99:
bc:a8:a5:ed:61:45:39:71:cb:38:ce:07:1f:34:62:bc:65:5f:
a1:74:c6:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz
OUFBRjgyQ0EwHhcNMjYwMzAxMDAyMTE4WhcNMjYwMzA4MDAyMTE4WjAYMRYwFAYD
VQQDDA02OWEzODY3ZS0wZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbzwDgDE/vBWqyOIgFy0RqJNOH11OVfbwHqlIfAaJdAUPGjQ9fE90qbeRWj6
TKEvPXIVWWd4mspB4hSlfgyhFBzLKigu9/e+LzexW2uR/RLSNlTmqH5+XivVi0OM
QIF9XJbCNITWu3QO8AOYMnq/A7V2Stiy6zqTgI0C+quW244DxhO6sao6bt92mhjv
M3h98KdKlUoyiIodA3b700ZDtJvpdIBbcN69WIDxMev+5RDBEvKxADgOE9AMeQdq
3paZ9GRthMJ/SJ/oLVUCMES9V3UHOWrQNa7KEp3E8jgXWFEJBNXzGZLdblwExH2e
jI/EKP98QEbck9n+pDhE5nLkuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC3N+8T
Iw+nbd4qFmTIWfPIoGDOMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG
MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk
ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAISlp4uGw9gURgbw4QrmPtRFfsBd5Sr5e9FMSKWD/8v32LtvIDRo//hlkUfoM
BUtPdypn+5cKrrnqvtZlj+duMwoYGK4+fxnSfdfHieRSUppNPlgO/9PC7AAPSMG/
oYt/i4nyZe9Ev40SPnT8lNLwN/kB/DKshJZWPIp8UlCH7xamEVI0OxC8lyy71Kjp
Af109iA7FhHJKGZgKTBMqnXz25RPPZVZCMGVvbLi1vBgMIDTtMZRR+E5nYh2VTMd
7NtbxexTdRDcp/gNHhnT3X4cKnfyh3YBj6UCa69vkNqVIJTVY0asfy2OWiaZvKil
7WFFOXHLOM4HHzRivGVfoXTG3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:48 2026 by rpki-client