
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: n/gAOXNGDNkHMjAxGBtbdPZ6ryWPm4a/KDGyDqZvsfc=
Subject key identifier: 62:85:46:D4:21:98:A9:30:FF:4F:9C:6A:93:BB:6C:92:4F:BC:09:2A
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 0160
Signing time: Sun 01 Mar 2026 05:58:05 +0000
Manifest this update: Sun 01 Mar 2026 05:58:04 +0000
Manifest next update: Sun 08 Mar 2026 05:58:04 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: GvzjEvY8tEPrMPWW7dyLB1hjmzkBrdm1lfSjiK44GhQ=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: rvTeF823DvYmJvnwsquaPWt6SC82aqM6fKQW5eAewSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Mar 1 05:58:04 2026 GMT
Not After : Mar 8 05:58:04 2026 GMT
Subject: CN=69a3d56d-43e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:10:9e:b3:97:d5:ba:5d:d7:93:38:aa:5d:
6c:8b:71:e6:1d:66:da:3c:22:6c:60:fa:3f:f0:ee:
4f:7a:97:4b:5b:28:63:ba:b4:3d:9a:3b:bf:3b:a8:
c9:98:48:9a:bb:9a:6c:db:ba:65:6d:03:cc:a0:7d:
b2:d4:a4:4b:88:dd:1b:80:05:84:09:10:c1:d8:ac:
f7:b7:5c:ae:5e:09:f8:2e:52:f9:b4:e4:cb:eb:19:
07:cd:37:95:a7:a5:e2:49:03:3a:27:6e:67:df:8e:
d7:6c:70:8f:df:e7:5a:ee:95:44:87:57:de:4a:7f:
30:d9:7d:34:eb:44:fe:b9:02:e1:5d:60:a8:62:d6:
70:2b:9f:bb:2f:ba:89:4f:56:9d:13:12:39:95:3b:
87:ad:a3:af:be:f7:66:c9:f3:f4:78:81:ce:b7:b5:
c5:76:38:5f:35:a7:6c:74:54:68:52:0e:1e:96:60:
e9:0a:21:2f:df:ba:db:5a:41:26:0b:23:ff:41:fa:
92:4f:60:ad:74:6b:4d:80:1b:28:73:23:ae:19:da:
89:c6:e4:aa:af:f9:b3:3b:e2:52:2f:94:ff:e0:02:
89:61:35:c2:31:4c:b7:9e:fa:18:39:04:63:f6:6d:
c4:d6:05:3c:d1:e2:1f:78:53:b1:bc:f0:42:7d:25:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:46:D4:21:98:A9:30:FF:4F:9C:6A:93:BB:6C:92:4F:BC:09:2A
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:e4:8a:55:95:d7:01:27:5f:03:10:20:34:1d:9a:e4:1a:
55:bc:e0:92:71:7d:b7:30:56:c8:7a:24:81:74:9a:ea:b7:64:
63:cd:12:fb:e9:22:fa:39:f6:71:89:94:66:8f:c8:77:b3:39:
58:2d:c1:f1:16:5e:07:d5:ed:a3:01:81:84:e0:7b:89:aa:03:
35:6c:3a:c1:f1:ca:74:3a:4a:6c:67:78:af:62:44:73:47:a0:
13:e5:88:05:57:5d:49:5e:a9:93:fd:7a:fc:28:c1:d3:22:9e:
05:e0:43:c3:fb:67:a6:5b:cc:8f:90:43:2b:96:91:d4:6b:56:
af:e4:8e:ed:5b:02:e3:f2:30:14:a8:97:f2:01:27:be:b5:98:
45:26:d1:51:d5:f9:c5:27:53:83:da:b5:65:8c:2e:73:1b:b6:
8b:68:4f:69:23:f7:38:df:2b:40:75:6e:ff:66:8a:f5:66:29:
02:18:55:9e:a8:5f:e7:49:fe:1e:4d:c4:22:4f:40:f5:2c:ac:
70:75:e8:18:ce:58:c3:7b:f7:e4:2c:92:e4:c5:30:94:fd:48:
39:9b:e2:24:6f:e9:57:8c:42:1b:de:76:80:90:d2:89:17:d3:
90:00:66:7d:da:1f:b4:3c:d5:82:a1:72:56:72:11:ef:3a:90:
a6:e6:0e:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD
NEEwRjk2OUMwHhcNMjYwMzAxMDU1ODA0WhcNMjYwMzA4MDU1ODA0WjAYMRYwFAYD
VQQDEw02OWEzZDU2ZC00M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1YYQnrOX1bpd15M4ql1si3HmHWbaPCJsYPo/8O5PepdLWyhjurQ9mju/O6jJ
mEiau5ps27plbQPMoH2y1KRLiN0bgAWECRDB2Kz3t1yuXgn4LlL5tOTL6xkHzTeV
p6XiSQM6J25n347XbHCP3+da7pVEh1feSn8w2X0060T+uQLhXWCoYtZwK5+7L7qJ
T1adExI5lTuHraOvvvdmyfP0eIHOt7XFdjhfNadsdFRoUg4elmDpCiEv37rbWkEm
CyP/QfqST2CtdGtNgBsocyOuGdqJxuSqr/mzO+JSL5T/4AKJYTXCMUy3nvoYOQRj
9m3E1gU80eIfeFOxvPBCfSX7owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKFRtQh
mKkw/0+capO7bJJPvAkqMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE
MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf
bTJGTEtqUjZHNWJFb1BscHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADsXkilWV1wEnXwMQIDQdmuQaVbzgknF9tzBWyHokgXSa6rdkY80S++ki+jn2
cYmUZo/Id7M5WC3B8RZeB9XtowGBhOB7iaoDNWw6wfHKdDpKbGd4r2JEc0egE+WI
BVddSV6pk/16/CjB0yKeBeBDw/tnplvMj5BDK5aR1GtWr+SO7VsC4/IwFKiX8gEn
vrWYRSbRUdX5xSdTg9q1ZYwucxu2i2hPaSP3ON8rQHVu/2aK9WYpAhhVnqhf50n+
Hk3EIk9A9SyscHXoGM5Yw3v35CyS5MUwlP1IOZviJG/pV4xCG952gJDSiRfTkABm
fdoftDzVgqFyVnIR7zqQpuYOKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:57 2026 by rpki-client