
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier: WwclmEAvq3TgZVPpvN8M97YTgwBoC2ah4d/8zHCgHW4=
Subject key identifier: 90:AC:4C:50:C3:F5:FB:92:B0:3A:CB:80:6A:33:33:62:D7:F9:FA:3C
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number: BF
Signing time: Sun 01 Mar 2026 08:10:35 +0000
Manifest this update: Sun 01 Mar 2026 08:10:34 +0000
Manifest next update: Sun 08 Mar 2026 08:10:34 +0000
Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: lgANGL+U5F7nPorOOyVNUaSYeqJG4bc62/I9k8qinCw=)
2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: ZzslUZUbSrFcLn8+l+U473zGQ7BO3ZOE7pR+hADREV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Validity
Not Before: Mar 1 08:10:34 2026 GMT
Not After : Mar 8 08:10:34 2026 GMT
Subject: CN=69a3f47b-5ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:b4:3d:e7:ca:e4:05:92:d2:3e:e5:d9:42:
a2:f2:aa:0d:7e:57:2f:26:6c:70:9a:94:89:30:71:
b8:81:98:10:e8:8a:10:04:54:43:f9:00:0a:1e:cb:
47:fb:1e:7a:4e:a8:21:3e:d4:27:91:f1:d3:c2:04:
04:6a:c8:5f:6e:1e:a4:60:7d:44:75:af:bb:6b:18:
f0:c2:04:e5:f6:2e:67:f0:c2:69:dd:7e:ea:08:86:
7a:e0:dd:2e:df:d2:0d:b7:81:35:e7:06:45:1c:a6:
52:f7:0f:90:e4:43:ed:55:2a:83:bf:a6:19:eb:b3:
23:cb:71:51:8a:e9:06:11:52:de:46:cb:5d:68:8f:
dc:ce:48:c8:d1:b1:dd:4b:c2:60:fb:fb:66:8a:b6:
73:63:f8:01:51:71:40:35:44:13:b8:0e:dc:e2:b0:
fa:4e:d8:10:13:db:aa:54:61:7b:63:b1:6e:ec:8f:
13:b0:ae:fc:fb:6a:7c:0b:f2:78:49:63:c3:76:ec:
80:c8:bb:f4:1b:4e:e4:1f:21:bc:3e:55:d4:07:c9:
eb:7d:5a:f4:8c:59:06:15:33:0d:5c:44:3e:0a:23:
60:3f:3f:53:c8:27:32:14:cd:c2:e6:63:0a:71:4e:
fe:55:61:bd:39:0e:67:f6:2a:ba:06:f9:17:f6:26:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:4C:50:C3:F5:FB:92:B0:3A:CB:80:6A:33:33:62:D7:F9:FA:3C
X509v3 Authority Key Identifier:
keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:e8:0a:69:27:15:d0:02:d1:ed:a3:4c:d5:87:ba:52:01:
0e:c9:2c:dd:84:9f:34:7a:7b:40:ab:ed:61:92:c5:bd:d7:b9:
d8:2a:be:0e:e4:96:bb:a7:c1:a6:85:31:d2:c7:5e:95:32:cf:
a8:1f:38:50:71:c4:40:c0:7c:a7:8a:59:15:1e:08:ce:b6:3b:
99:38:d9:a7:e5:fd:d2:5c:4d:f6:94:97:02:66:05:38:ee:c8:
b6:3d:71:5f:8a:6e:15:83:4d:2f:53:45:79:4a:e1:6a:00:5f:
57:80:44:2b:f5:3e:f8:26:25:4a:36:0c:d0:e1:41:cf:81:c4:
0b:11:c9:71:37:9a:11:33:d2:17:c2:ef:b6:67:f2:d9:84:ab:
de:d5:cb:eb:90:a5:2b:e3:37:6d:32:86:3a:bc:8f:80:68:2a:
fa:df:f1:51:cc:c9:6e:27:9c:6c:d6:b0:f3:71:8d:40:19:a4:
24:6e:2f:9e:e1:ca:3d:65:0b:59:bf:ec:b7:87:65:4f:ec:35:
0d:e9:e2:f8:47:06:c3:e4:34:53:6d:a6:dd:46:ad:cb:63:8e:
e0:8c:5b:2a:07:8d:36:f9:9a:83:57:1a:5b:ff:b3:e1:75:3a:
c0:c0:d6:0a:7d:d2:8c:8d:60:4f:f7:e6:47:74:63:64:20:91:
9d:d8:ea:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2
N0I3NzU1MjYwHhcNMjYwMzAxMDgxMDM0WhcNMjYwMzA4MDgxMDM0WjAYMRYwFAYD
VQQDEw02OWEzZjQ3Yi01ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiti0PefK5AWS0j7l2UKi8qoNflcvJmxwmpSJMHG4gZgQ6IoQBFRD+QAKHstH
+x56TqghPtQnkfHTwgQEashfbh6kYH1Eda+7axjwwgTl9i5n8MJp3X7qCIZ64N0u
39INt4E15wZFHKZS9w+Q5EPtVSqDv6YZ67Mjy3FRiukGEVLeRstdaI/czkjI0bHd
S8Jg+/tmirZzY/gBUXFANUQTuA7c4rD6TtgQE9uqVGF7Y7Fu7I8TsK78+2p8C/J4
SWPDduyAyLv0G07kHyG8PlXUB8nrfVr0jFkGFTMNXEQ+CiNgPz9TyCcyFM3C5mMK
cU7+VWG9OQ5n9iq6BvkX9iZw5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCsTFDD
9fuSsDrLgGozM2LX+fo8MB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz
RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs
TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQgfoCmknFdAC0e2jTNWHulIBDsks3YSfNHp7QKvtYZLFvde52Cq+DuSWu6fB
poUx0sdelTLPqB84UHHEQMB8p4pZFR4IzrY7mTjZp+X90lxN9pSXAmYFOO7Itj1x
X4puFYNNL1NFeUrhagBfV4BEK/U++CYlSjYM0OFBz4HECxHJcTeaETPSF8Lvtmfy
2YSr3tXL65ClK+M3bTKGOryPgGgq+t/xUczJbiecbNaw83GNQBmkJG4vnuHKPWUL
Wb/st4dlT+w1Deni+EcGw+Q0U22m3Uaty2OO4IxbKgeNNvmag1caW/+z4XU6wMDW
Cn3SjI1gT/fmR3RjZCCRndjqsg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:25 2026 by rpki-client