
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: gAYfFmVxvN23mZKQ7Y4kdtw3ccNKZcVtl01aQxAtvQA=
Subject key identifier: BE:29:29:0C:5E:9E:6F:46:8A:91:A2:5E:99:ED:30:5E:E2:6A:88:E7
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0CD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C10
Signing time: Thu 16 Apr 2026 19:08:09 +0000
Manifest this update: Thu 16 Apr 2026 19:08:08 +0000
Manifest next update: Thu 23 Apr 2026 19:08:08 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: 1hfdEZ5WEgYCzno1ucKw8aH45rixR+5wJRKTRuMyDWY=)
2: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TjrXzvrlWANf8JvFU1WnxrTztuxOH43IK3Zl85V0kH0=)
3: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk=)
4: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: lU4qj9qhMKsVAQxIlEtzz2s2LN2qpGRwvCOWleMDdN8=)
5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE=)
6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=)
7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: RupCODMCVn7fipZVaU8cDxGLwLhz8c3cckM5d5QL83Q=)
8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q=)
9: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: whrOto6YdWxD5nUJi5RhnyhfSKeLupBw4gHNI11xyhI=)
10: E8819018178811EC876F5F50C4F9AE02.roa (hash: vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Apr 16 19:08:08 2026 GMT
Not After : Apr 23 19:08:08 2026 GMT
Subject: CN=69e13399-c271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:a1:d2:e7:20:36:64:3d:91:a0:ad:11:7d:
eb:76:6c:41:90:0d:d1:07:19:26:ac:f5:98:8a:09:
71:1f:e6:52:56:7a:24:e9:c4:be:3d:2d:af:74:b9:
8f:8f:91:61:82:8a:42:17:cd:77:d5:97:51:77:d1:
26:7f:9c:fc:50:51:63:86:94:5a:1d:42:10:65:6e:
56:47:d5:6b:33:6a:5c:a7:34:22:54:18:4f:47:88:
f6:45:d8:bc:7c:78:0c:dc:44:f9:5e:70:69:31:dc:
08:83:ff:ff:9f:d0:60:99:e0:3b:48:7e:3f:b3:4e:
1f:06:ef:26:95:32:6a:47:85:88:92:fe:ae:c0:6e:
86:bc:9b:7c:e0:82:95:73:8c:13:b6:6c:d5:55:8f:
51:4b:a8:a8:4c:05:2a:76:77:0c:fe:c2:ce:a3:14:
0f:c0:25:e4:cd:b7:f4:14:24:e7:95:6b:54:9a:e7:
bd:04:f1:2c:c3:6f:59:6f:a6:84:16:e6:d9:56:8c:
1e:13:98:39:dd:9f:99:f7:80:a1:9c:de:dc:db:61:
9a:7d:6d:2d:15:af:ca:91:07:aa:7b:8f:80:19:e3:
7b:0d:9b:c6:b2:28:22:bf:9e:1f:07:94:b1:5f:bf:
98:42:b2:07:fb:c2:4a:95:98:98:f1:d3:4b:39:3b:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:29:0C:5E:9E:6F:46:8A:91:A2:5E:99:ED:30:5E:E2:6A:88:E7
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:b6:15:61:c5:1f:39:65:4f:35:e2:02:c7:4b:67:e4:d7:
9f:49:ba:07:7e:29:51:d0:c3:42:93:1a:9f:f8:65:ba:9f:4a:
f0:14:10:1f:51:78:e1:de:b6:28:a0:d0:39:77:e9:d2:c0:37:
03:ad:e7:8f:7d:ac:b6:f6:6d:5c:59:fe:07:f9:9a:0a:d2:80:
68:40:7e:56:66:b7:98:90:2d:71:ff:98:68:dd:c7:b0:df:b1:
c1:e5:40:28:0b:2f:81:01:0b:aa:b4:6a:eb:3d:cc:07:f2:0b:
25:a2:1c:01:e4:4b:ec:76:44:7b:db:86:06:20:82:66:ae:8a:
a4:2c:7d:c4:2a:6b:ca:ff:99:06:d5:7d:21:19:e6:de:96:cf:
32:58:17:64:e3:98:36:52:9f:28:6a:51:6c:2b:2e:9d:e5:7a:
21:8c:db:59:23:7f:06:e5:d8:2b:c3:3e:7a:23:5c:40:d7:9c:
9f:65:0a:89:74:3e:d7:7d:ce:32:ae:7a:af:55:13:e9:39:db:
68:85:67:5a:06:59:5f:22:11:0f:34:a7:82:db:fb:46:3f:aa:
88:3b:b1:3b:19:8f:c4:36:19:9d:73:c3:ad:01:b5:79:6c:e0:
3a:95:53:83:76:f3:c3:3c:72:5a:78:04:04:2e:e9:75:94:54:
cf:fb:ec:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4
ODFBRTQ5MTgwHhcNMjYwNDE2MTkwODA4WhcNMjYwNDIzMTkwODA4WjAYMRYwFAYD
VQQDEw02OWUxMzM5OS1jMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuL2h0ucgNmQ9kaCtEX3rdmxBkA3RBxkmrPWYiglxH+ZSVnok6cS+PS2vdLmP
j5FhgopCF8131ZdRd9Emf5z8UFFjhpRaHUIQZW5WR9VrM2pcpzQiVBhPR4j2Rdi8
fHgM3ET5XnBpMdwIg///n9BgmeA7SH4/s04fBu8mlTJqR4WIkv6uwG6GvJt84IKV
c4wTtmzVVY9RS6ioTAUqdncM/sLOoxQPwCXkzbf0FCTnlWtUmue9BPEsw29Zb6aE
FubZVoweE5g53Z+Z94ChnN7c22GafW0tFa/KkQeqe4+AGeN7DZvGsigiv54fB5Sx
X7+YQrIH+8JKlZiY8dNLOTvLmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4pKQxe
nm9GipGiXpntMF7iaojnMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0
NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0
UGdQQWVGRmhKMUdJR3VTUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYaO2FWHFHzllTzXiAsdLZ+TXn0m6B34pUdDDQpMan/hlup9K8BQQH1F44d62
KKDQOXfp0sA3A63nj32stvZtXFn+B/maCtKAaEB+Vma3mJAtcf+YaN3HsN+xweVA
KAsvgQELqrRq6z3MB/ILJaIcAeRL7HZEe9uGBiCCZq6KpCx9xCpryv+ZBtV9IRnm
3pbPMlgXZOOYNlKfKGpRbCsuneV6IYzbWSN/BuXYK8M+eiNcQNecn2UKiXQ+133O
Mq56r1UT6TnbaIVnWgZZXyIRDzSngtv7Rj+qiDuxOxmPxDYZnXPDrQG1eWzgOpVT
g3bzwzxyWngEBC7pdZRUz/vsLA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:05:33 2026 by rpki-client