
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: MDXqUDHdIu09Hl7H2pQfKjQoM9xOJwNtsojx8xI2JRk=
Subject key identifier: FC:D7:27:49:1D:24:FE:BD:37:5E:78:62:2C:7A:AA:EF:68:60:A9:C0
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0EAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0E90
Signing time: Thu 16 Apr 2026 17:39:56 +0000
Manifest this update: Thu 16 Apr 2026 17:39:56 +0000
Manifest next update: Thu 23 Apr 2026 17:39:56 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: pJcw3oNS6rVMCzPsOIzae2KpvTcQFANZl1UhSF2DJGA=)
2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: 4waDGGKnkJeLLa4QkYuztqh/mv8xS12LSc+ievo5tLQ=)
3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: oPPYxBYmiiy4enhiiy5O2BkIuc1yyliJlPvf0DwR6C8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3756 (0xeac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: Apr 16 17:39:56 2026 GMT
Not After : Apr 23 17:39:56 2026 GMT
Subject: CN=69e11eec-1412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:96:cd:7f:18:90:e8:56:71:81:5a:fa:e7:
2c:00:1a:19:73:2f:39:10:5a:85:74:08:73:3a:e3:
32:7f:43:9f:c2:24:02:23:c7:56:3c:64:f7:e7:3c:
ef:cc:dd:c6:01:17:59:0f:4c:27:06:79:e4:45:9a:
0e:bf:8b:d4:92:9f:e8:82:98:f4:2a:7f:d5:9c:b8:
19:6e:c3:1d:a7:be:05:f6:63:86:c9:f4:18:69:17:
fb:e0:51:98:eb:69:9c:43:52:84:01:b8:24:69:e7:
88:27:96:95:28:3f:e0:2f:2a:56:d1:b3:8f:e1:0b:
cd:1f:74:8b:77:6d:b3:4d:cb:1a:6f:05:34:11:cf:
2b:90:44:bd:66:c2:ac:44:0d:4e:4c:10:12:94:25:
92:2a:c4:e2:a6:04:fc:50:32:e2:f4:13:20:ba:28:
7a:fd:98:c7:fd:f2:41:80:3e:2b:ad:a1:83:d2:64:
5b:2d:4d:bb:ed:c6:9a:4e:aa:e1:6a:9e:ff:71:9d:
93:cd:a3:25:97:fc:eb:e0:a4:1c:d2:43:1e:75:ed:
62:ec:6d:3b:83:ea:f5:b9:23:9a:c1:ad:3d:8f:b3:
53:07:7b:3d:95:68:d6:13:1b:bd:ca:1b:e9:cc:ae:
27:ef:90:e7:a8:e8:15:94:4f:f9:1d:05:f8:ac:87:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:27:49:1D:24:FE:BD:37:5E:78:62:2C:7A:AA:EF:68:60:A9:C0
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:a6:89:ae:db:c5:e7:11:01:30:9a:0f:9e:64:37:73:85:
e4:72:a1:20:07:7b:04:e9:1a:47:a9:ca:9f:46:5b:dc:96:32:
70:4d:37:45:d7:13:e3:83:0d:e6:4b:1e:6a:1f:56:e5:51:08:
94:9a:fd:e8:c6:02:15:4e:d5:3c:7a:62:36:6a:db:1f:1a:dd:
94:b0:b4:14:f3:af:d0:07:cc:6b:82:24:ac:72:64:b6:83:03:
36:73:eb:ea:be:38:c3:91:70:5a:84:a9:53:55:a6:ac:60:40:
7b:fe:31:00:6d:d4:c5:ad:2a:d5:16:af:a7:c0:0c:75:2f:16:
ae:75:81:be:8b:d4:b3:b8:c5:ca:fb:e5:44:a3:ec:c9:36:38:
10:e4:9b:2e:8c:0d:33:30:82:fd:35:34:9a:22:35:80:4c:e9:
49:93:52:b0:da:12:bd:26:61:90:4d:ff:d6:14:00:68:75:15:
a9:f8:c1:0e:d6:28:83:b5:b1:c3:49:34:53:1f:1c:d4:5c:46:
0b:06:6b:3a:89:74:53:d9:fa:b1:30:3b:09:bc:90:05:29:bd:
39:c1:38:81:ec:71:1c:a4:e7:fe:5b:a6:02:0b:4d:eb:f5:03:
a1:0e:a0:bf:83:6a:a8:ce:a8:fb:19:8f:68:35:5b:49:52:79:
dd:cd:8e:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1
OUE0MzgyMzMwHhcNMjYwNDE2MTczOTU2WhcNMjYwNDIzMTczOTU2WjAYMRYwFAYD
VQQDEw02OWUxMWVlYy0xNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKWWzX8YkOhWcYFa+ucsABoZcy85EFqFdAhzOuMyf0OfwiQCI8dWPGT35zzv
zN3GARdZD0wnBnnkRZoOv4vUkp/ogpj0Kn/VnLgZbsMdp74F9mOGyfQYaRf74FGY
62mcQ1KEAbgkaeeIJ5aVKD/gLypW0bOP4QvNH3SLd22zTcsabwU0Ec8rkES9ZsKs
RA1OTBASlCWSKsTipgT8UDLi9BMguih6/ZjH/fJBgD4rraGD0mRbLU277caaTqrh
ap7/cZ2TzaMll/zr4KQc0kMede1i7G07g+r1uSOawa09j7NTB3s9lWjWExu9yhvp
zK4n75DnqOgVlE/5HQX4rIcO5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzXJ0kd
JP69N154Yix6qu9oYKnAMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz
OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX
MFdBYjZEMkxsSzFacERnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIzymia7bxecRATCaD55kN3OF5HKhIAd7BOkaR6nKn0Zb3JYycE03RdcT44MN
5kseah9W5VEIlJr96MYCFU7VPHpiNmrbHxrdlLC0FPOv0AfMa4IkrHJktoMDNnPr
6r44w5FwWoSpU1WmrGBAe/4xAG3Uxa0q1Ravp8AMdS8WrnWBvovUs7jFyvvlRKPs
yTY4EOSbLowNMzCC/TU0miI1gEzpSZNSsNoSvSZhkE3/1hQAaHUVqfjBDtYog7Wx
w0k0Ux8c1FxGCwZrOol0U9n6sTA7CbyQBSm9OcE4gexxHKTn/lumAgtN6/UDoQ6g
v4NqqM6o+xmPaDVbSVJ53c2OQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:56:34 2026 by rpki-client