
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: gh/eElkEyVv71JRqvEOncLiGB4nyFI1aLtstF9Hiudw=
Subject key identifier: BD:CD:33:08:98:EB:16:9E:D4:C1:0D:CE:30:8C:80:AE:3C:93:FA:2C
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: 0100
Signing time: Fri 17 Apr 2026 05:56:13 +0000
Manifest this update: Fri 17 Apr 2026 05:56:12 +0000
Manifest next update: Fri 24 Apr 2026 05:56:12 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: zo8CY9auLpEQTpkf+Ccz4DKqo+f9M0DZvqhCUATKWVU=)
2: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=)
3: 63DDF612050411F1819844D9163D8C67.roa (hash: UfMh6BGwSMUTiU+8jXLB4Ib9iALVAn0NIurceWTlxVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Apr 17 05:56:12 2026 GMT
Not After : Apr 24 05:56:12 2026 GMT
Subject: CN=69e1cb7d-8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:cc:1a:99:11:9a:f1:a7:e2:46:b9:5f:a7:
5a:ad:b4:e7:9f:6b:25:07:4d:45:9c:69:d1:b0:08:
79:47:e1:86:cd:3e:2e:e3:64:48:b0:59:0d:a7:da:
a5:25:0f:d1:2a:c9:92:b1:ad:d1:ed:c6:04:11:cf:
c7:5f:2e:bb:98:67:ed:dd:8e:4b:25:24:0f:7c:e6:
28:af:61:30:7c:0f:fc:db:87:35:c7:94:68:ce:e9:
72:2a:0d:ef:3c:0a:f8:9b:18:20:95:05:79:a6:0d:
dc:92:93:64:53:56:6e:74:98:09:11:90:ba:be:7c:
cb:51:27:49:f6:a9:e5:25:da:16:b6:9a:41:4e:9a:
21:96:e4:f9:8d:26:99:c2:c0:b1:c3:dd:43:2b:19:
e8:e5:f0:7e:3b:d3:ca:6b:1e:2f:e0:eb:be:da:3f:
65:bd:01:a7:d1:fd:6f:48:f1:0d:11:99:32:7d:90:
3d:aa:96:bd:c4:58:b9:29:2f:9f:7e:0b:d9:84:1b:
44:39:ae:49:b6:e1:fa:56:99:a5:77:a4:d7:6c:21:
2e:3a:b6:a2:7e:3c:0c:d6:be:8f:3b:1a:cd:e8:d3:
5e:42:06:7c:a8:50:80:86:dd:25:70:3d:2a:94:cf:
8e:05:26:06:bf:a3:8f:75:5d:05:f4:1a:22:55:3c:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:33:08:98:EB:16:9E:D4:C1:0D:CE:30:8C:80:AE:3C:93:FA:2C
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:ca:b9:93:cb:ce:70:e6:b7:55:ea:7d:52:48:7c:9f:b2:
a6:2e:c2:f9:d7:94:9d:b3:9e:e5:82:8d:69:dd:46:d6:c4:f6:
ee:ce:c0:a0:d1:52:50:66:b3:5a:08:4a:35:d6:86:e1:e3:71:
5b:e9:8c:f2:43:e4:f8:86:f0:ca:2a:4b:bf:e4:2e:70:9d:e5:
36:16:28:5d:a2:6b:f3:80:ad:3e:df:24:81:6e:f6:be:7b:95:
f4:a8:03:2c:46:0d:9b:60:3b:8b:b3:04:11:37:32:43:df:c0:
2e:61:5a:a2:92:1d:50:32:9a:35:b2:82:dd:8b:4b:b3:6d:c0:
22:4b:0b:22:20:66:93:43:c3:ba:45:5b:dd:be:e8:4f:b3:5b:
b8:d9:bd:e0:cb:f9:16:6f:e9:0a:e1:af:06:39:f4:33:a1:2c:
53:a0:8d:27:c0:0f:81:9a:d0:86:02:c5:86:1c:ca:09:b8:9c:
51:ff:e9:76:2f:2e:ca:9c:8f:6e:1a:fc:bb:c2:16:75:7d:0e:
79:bd:d7:d2:7f:b3:f5:7d:46:8b:07:33:fd:3d:1b:1f:d4:1d:
53:bf:a8:6d:0d:70:ea:22:94:87:74:71:c1:aa:7e:00:ae:b5:
ea:e5:6e:66:f4:71:a9:77:b0:69:f0:f3:e7:55:77:f8:8f:41:
42:9a:3e:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC
MTY0NENCOEEwHhcNMjYwNDE3MDU1NjEyWhcNMjYwNDI0MDU1NjEyWjAYMRYwFAYD
VQQDEw02OWUxY2I3ZC04ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjYjMGpkRmvGn4ka5X6darbTnn2slB01FnGnRsAh5R+GGzT4u42RIsFkNp9ql
JQ/RKsmSsa3R7cYEEc/HXy67mGft3Y5LJSQPfOYor2EwfA/824c1x5RozulyKg3v
PAr4mxgglQV5pg3ckpNkU1ZudJgJEZC6vnzLUSdJ9qnlJdoWtppBTpohluT5jSaZ
wsCxw91DKxno5fB+O9PKax4v4Ou+2j9lvQGn0f1vSPENEZkyfZA9qpa9xFi5KS+f
fgvZhBtEOa5JtuH6Vpmld6TXbCEuOraifjwM1r6POxrN6NNeQgZ8qFCAht0lcD0q
lM+OBSYGv6OPdV0F9BoiVTzvswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3NMwiY
6xae1MENzjCMgK48k/osMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE
RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE
MWozX2I4WkFsX0t4WkV5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl6TKuZPLznDmt1XqfVJIfJ+ypi7C+deUnbOe5YKNad1G1sT27s7AoNFSUGaz
WghKNdaG4eNxW+mM8kPk+IbwyipLv+QucJ3lNhYoXaJr84CtPt8kgW72vnuV9KgD
LEYNm2A7i7MEETcyQ9/ALmFaopIdUDKaNbKC3YtLs23AIksLIiBmk0PDukVb3b7o
T7NbuNm94Mv5Fm/pCuGvBjn0M6EsU6CNJ8APgZrQhgLFhhzKCbicUf/pdi8uypyP
bhr8u8IWdX0Oeb3X0n+z9X1Giwcz/T0bH9QdU7+obQ1w6iKUh3Rxwap+AK616uVu
ZvRxqXewafDz51V3+I9BQpo+iw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:10 2026 by rpki-client