
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json)
Hash identifier: QpZXDsUUtsnjlcSIaOVN8h9Z3vmitI5pkmC3MuXyLPE=
Subject key identifier: 50:DC:27:1F:98:BF:98:0A:DC:44:24:1F:DF:79:22:E9:D5:25:5E:23
Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
Manifest number: C2
Signing time: Sun 01 Mar 2026 08:15:07 +0000
Manifest this update: Sun 01 Mar 2026 08:15:07 +0000
Manifest next update: Sun 08 Mar 2026 08:15:07 +0000
Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: ERyUkovKz4HnBewl5rICHTXD/OqyhzM0AZL95GS7VNg=)
2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: dz7B3/XrjBDe1+l9My7KU1R+q1q+fbfuJZvwhzewWLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Validity
Not Before: Mar 1 08:15:07 2026 GMT
Not After : Mar 8 08:15:07 2026 GMT
Subject: CN=69a3f58b-8537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:da:bf:52:98:ca:49:e4:49:80:57:7a:0f:
fc:6b:77:39:05:fb:1a:3f:e6:c2:ec:df:1a:78:5d:
26:e2:bb:d9:ae:68:df:71:f2:89:87:88:f6:83:9e:
38:89:99:ed:c2:94:71:46:f5:6d:d9:92:e8:57:07:
19:54:1f:ca:43:1f:9e:1f:c3:1a:3f:8a:d0:b1:da:
24:20:74:d8:54:53:f6:04:42:f3:89:09:e1:eb:b9:
14:ad:1f:76:fd:58:57:6b:da:b0:38:e0:84:ce:bf:
41:44:25:e1:95:b2:cd:f9:c2:32:f7:d7:9d:5e:54:
eb:d9:f2:45:b8:4f:eb:ff:2e:92:25:e4:44:60:76:
a1:9c:8f:5e:4b:8c:07:66:94:a6:b5:c9:06:78:3a:
6c:57:ab:0c:d5:fa:5f:7c:50:de:bd:df:b4:09:6b:
ba:4c:d7:bc:12:48:8d:08:56:34:29:ed:07:0d:4a:
c0:ea:a5:47:4a:8c:27:d3:c9:66:a4:bd:99:7c:ec:
53:1f:f5:8f:ae:99:2e:ca:6b:79:89:60:b4:89:bc:
9d:52:f7:1b:a2:7b:5e:22:ab:fe:c0:46:ea:7f:6f:
e8:93:55:7f:ff:4c:f2:3b:c3:da:65:a6:22:f5:de:
aa:b4:5b:21:39:bc:03:55:b3:fe:5c:c3:56:fc:04:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:27:1F:98:BF:98:0A:DC:44:24:1F:DF:79:22:E9:D5:25:5E:23
X509v3 Authority Key Identifier:
keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:9d:13:d3:f2:21:3d:1e:c9:d9:6b:99:d0:ed:2f:90:f4:26:
88:2d:c1:35:3b:ec:76:b7:9b:bb:e5:69:bf:a9:9f:71:1e:64:
74:54:be:b3:38:b0:1a:47:3d:a7:68:6b:77:ff:34:9f:02:e4:
64:0f:96:1d:fd:b6:bf:fd:a3:5d:a0:ec:81:56:70:10:d2:b5:
3b:52:b6:dc:99:f6:1f:30:e2:7c:a5:63:c8:b8:a1:da:e8:e7:
f7:55:36:2d:4d:52:2d:f3:e1:81:29:f3:bc:f8:29:7d:2d:06:
c3:16:57:ad:ca:40:4c:48:6a:db:2f:8b:4f:23:42:ec:44:1f:
18:c1:2a:4d:93:85:27:62:e6:cb:cf:1b:43:5d:70:7b:18:66:
91:9e:7a:ba:4e:8a:df:94:3c:7b:29:ea:e3:74:52:c3:13:78:
3f:02:1e:a1:e3:b6:2a:37:db:5d:c9:11:6a:b2:d4:d0:1d:ce:
12:4f:c2:c0:a9:85:ae:9d:2a:89:e4:e7:69:4a:ae:89:7f:81:
c1:16:c4:42:d3:8c:51:fa:c4:69:9b:b5:a8:3b:9f:36:e3:c5:
4e:22:70:00:b0:ad:f3:40:84:30:af:2f:1a:f2:02:ea:3c:70:
6c:a2:24:39:2c:ae:f9:da:56:f2:6a:f2:b4:ef:d7:6d:d7:1b:
50:38:10:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5
QjZEMTE3RjIwHhcNMjYwMzAxMDgxNTA3WhcNMjYwMzA4MDgxNTA3WjAYMRYwFAYD
VQQDEw02OWEzZjU4Yi04NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/Hav1KYyknkSYBXeg/8a3c5BfsaP+bC7N8aeF0m4rvZrmjfcfKJh4j2g544
iZntwpRxRvVt2ZLoVwcZVB/KQx+eH8MaP4rQsdokIHTYVFP2BELziQnh67kUrR92
/VhXa9qwOOCEzr9BRCXhlbLN+cIy99edXlTr2fJFuE/r/y6SJeREYHahnI9eS4wH
ZpSmtckGeDpsV6sM1fpffFDevd+0CWu6TNe8EkiNCFY0Ke0HDUrA6qVHSown08lm
pL2ZfOxTH/WPrpkuymt5iWC0ibydUvcbonteIqv+wEbqf2/ok1V//0zyO8PaZaYi
9d6qtFshObwDVbP+XMNW/ATTFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDcJx+Y
v5gK3EQkH995IunVJV4jMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC
MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1
WHRwYTJjbmtIa1NiYlJGX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1J0T0/IhPR7J2WuZ0O0vkPQmiC3BNTvsdrebu+Vpv6mfcR5kdFS+sziwGkc9
p2hrd/80nwLkZA+WHf22v/2jXaDsgVZwENK1O1K23Jn2HzDifKVjyLih2ujn91U2
LU1SLfPhgSnzvPgpfS0GwxZXrcpATEhq2y+LTyNC7EQfGMEqTZOFJ2Lmy88bQ11w
exhmkZ56uk6K35Q8eynq43RSwxN4PwIeoeO2KjfbXckRarLU0B3OEk/CwKmFrp0q
ieTnaUquiX+BwRbEQtOMUfrEaZu1qDufNuPFTiJwALCt80CEMK8vGvIC6jxwbKIk
OSyu+dpW8mrytO/XbdcbUDgQWw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:39 2026 by rpki-client