
$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier: u8OgeTNwZIwTHv+b+3CAowk2H57LixvKBA24HdEcRAs=
Subject key identifier: D3:F1:84:DF:63:EE:A4:B1:EA:21:95:CA:23:D5:0E:D6:29:CE:6B:7A
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial: 1326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number: 1320
Signing time: Thu 16 Apr 2026 16:56:52 +0000
Manifest this update: Thu 16 Apr 2026 16:56:51 +0000
Manifest next update: Thu 23 Apr 2026 16:56:51 +0000
Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: +pSJTUjaUy28UZFDpCvxqnmPAcAYFK9w80uF2GL2StI=)
2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: NGAAp5bKrPsqJtekMakHs7H1OfK9jRPnn3ajrINjxiM=)
3: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: 3ZXUqVaSWRuqxEz8m47I5k4iPWpdb6iN8DnYHpIukoI=)
4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: A8V1gIPZhwUZTarJ4Mgm3GQ16Ga+pusOMKw3yDRvHDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4902 (0x1326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Validity
Not Before: Apr 16 16:56:51 2026 GMT
Not After : Apr 23 16:56:51 2026 GMT
Subject: CN=69e114d4-c385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:de:02:4b:a0:14:ee:d7:f7:f4:66:65:36:
df:94:6e:c1:c6:79:b4:3c:5e:3e:2e:35:ee:aa:4d:
7b:c0:54:b4:7c:91:7b:56:64:fb:e8:98:2a:a2:01:
e9:9e:2b:75:f7:0b:95:9c:28:1c:3d:cf:f4:ad:31:
07:bf:f6:0a:b7:08:e6:d1:ca:c8:1b:e1:06:7b:54:
95:e5:65:1c:d6:d1:22:f1:77:68:63:f6:b5:d8:93:
2f:66:48:16:4b:97:cb:4b:21:ab:d9:6e:eb:d4:1c:
3e:90:b8:a8:7f:cb:ca:3a:31:4b:bf:42:96:85:8f:
18:a1:10:47:d3:fc:9a:3e:ec:ec:52:69:95:b4:c7:
d6:7f:f0:6d:00:1d:ea:47:38:76:4e:73:d2:99:ce:
9d:d9:a9:33:22:23:2c:e9:e9:88:3b:d3:2d:2c:a8:
40:60:6a:7a:a1:c0:31:7a:e4:97:2e:3a:77:57:a6:
f9:7c:7f:a6:6a:48:48:ed:28:ee:85:3e:be:1d:cb:
40:8b:f6:19:66:21:97:a7:36:67:6a:35:a0:8a:da:
07:bb:20:95:d4:9c:85:67:cf:8d:99:96:9d:b5:bd:
77:6a:76:97:74:f6:83:8e:9b:3e:2e:b6:42:36:19:
21:d1:3c:9d:25:70:ae:12:87:b9:07:72:ff:b9:23:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:84:DF:63:EE:A4:B1:EA:21:95:CA:23:D5:0E:D6:29:CE:6B:7A
X509v3 Authority Key Identifier:
keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:3c:f9:25:2e:35:26:08:cf:cf:19:53:e3:a7:4c:50:5d:
a6:40:fe:0b:1b:2a:60:eb:14:2e:57:ef:0d:fc:22:3a:5c:03:
2a:da:d7:99:7f:d3:96:f4:41:b8:ae:ca:0c:98:58:73:33:4b:
fb:1b:43:ca:92:9f:09:78:98:09:0d:d9:cb:34:6c:13:03:33:
0d:03:5c:db:32:26:b0:8e:fa:08:4a:ee:1e:45:88:39:2d:04:
55:91:aa:5f:fc:51:70:30:de:a2:ef:f3:54:5f:b2:40:9f:eb:
e4:e2:d7:72:6f:08:8d:4b:88:64:d0:2b:08:f4:e2:19:52:f3:
88:df:7a:0b:9e:1d:f9:a0:1f:61:26:a4:05:45:b5:9c:d9:cd:
58:90:d0:8f:ff:5d:69:0f:38:d2:14:b4:b2:34:e9:5d:ad:43:
fe:93:ab:28:6a:14:8a:22:b1:25:ee:ab:b6:b3:0a:4e:3a:94:
7c:53:c3:25:ac:dc:0f:77:57:28:af:7d:7e:e2:f1:52:a8:b2:
4d:eb:00:b2:15:90:78:68:47:54:60:3d:bd:e2:9b:37:39:75:
34:8f:b0:86:88:e6:d6:70:66:67:87:1d:f0:a7:93:25:d1:4f:
01:f2:a7:cf:66:4b:ea:9d:dc:0d:d1:04:67:8f:ab:91:86:fe:
43:51:52:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF
QkJEMjhEOTcwHhcNMjYwNDE2MTY1NjUxWhcNMjYwNDIzMTY1NjUxWjAYMRYwFAYD
VQQDEw02OWUxMTRkNC1jMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3beAkugFO7X9/RmZTbflG7Bxnm0PF4+LjXuqk17wFS0fJF7VmT76JgqogHp
nit19wuVnCgcPc/0rTEHv/YKtwjm0crIG+EGe1SV5WUc1tEi8XdoY/a12JMvZkgW
S5fLSyGr2W7r1Bw+kLiof8vKOjFLv0KWhY8YoRBH0/yaPuzsUmmVtMfWf/BtAB3q
Rzh2TnPSmc6d2akzIiMs6emIO9MtLKhAYGp6ocAxeuSXLjp3V6b5fH+makhI7Sju
hT6+HctAi/YZZiGXpzZnajWgitoHuyCV1JyFZ8+NmZadtb13anaXdPaDjps+LrZC
Nhkh0TydJXCuEoe5B3L/uSNMEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPxhN9j
7qSx6iGVyiPVDtYpzmt6MB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC
M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1
TTI4eVRETExwVmpydlNqWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHyU8+SUuNSYIz88ZU+OnTFBdpkD+CxsqYOsULlfvDfwiOlwDKtrXmX/TlvRB
uK7KDJhYczNL+xtDypKfCXiYCQ3ZyzRsEwMzDQNc2zImsI76CEruHkWIOS0EVZGq
X/xRcDDeou/zVF+yQJ/r5OLXcm8IjUuIZNArCPTiGVLziN96C54d+aAfYSakBUW1
nNnNWJDQj/9daQ840hS0sjTpXa1D/pOrKGoUiiKxJe6rtrMKTjqUfFPDJazcD3dX
KK99fuLxUqiyTesAshWQeGhHVGA9veKbNzl1NI+whojm1nBmZ4cd8KeTJdFPAfKn
z2ZL6p3cDdEEZ4+rkYb+Q1FSwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:39 2026 by rpki-client