
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json)
Hash identifier: 6XWWVu3/nQ7IA4qg2kcnwqLHC6dit+X+pLpQYJhLuLE=
Subject key identifier: 97:1C:81:09:2F:92:C8:1E:54:B5:44:C5:EB:31:A4:C0:91:68:04:7C
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
Manifest number: 020D
Signing time: Sun 01 Mar 2026 22:51:06 +0000
Manifest this update: Sun 01 Mar 2026 22:51:06 +0000
Manifest next update: Sun 08 Mar 2026 22:51:06 +0000
Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: D13Nn2ypP/vEhEO6DT7P8csVEQsbZ/BjXxJbRB+QMk0=)
2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: OmAXY2O6FSIlEjupu2rP4MV7HV+6tvf+8THz6edNFEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Validity
Not Before: Mar 1 22:51:06 2026 GMT
Not After : Mar 8 22:51:06 2026 GMT
Subject: CN=69a4c2da-c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:36:8b:e7:3f:30:67:0d:25:10:5b:3f:6f:
34:26:45:ee:d1:61:7f:82:5c:c2:4e:30:ad:99:5d:
ae:ea:53:da:5c:f3:49:30:0d:68:b9:ff:17:40:e2:
c0:47:41:28:c2:a6:00:0c:d2:d2:5e:c3:22:8c:83:
44:e4:25:ba:a6:40:87:dd:63:5f:09:c3:89:6c:85:
a7:64:49:4f:af:29:e7:36:9a:02:d9:e1:85:e3:a9:
e6:27:41:29:cb:89:9b:64:75:20:7e:d7:ae:15:b1:
b3:fb:9e:6f:f7:b5:40:f5:23:cd:ac:80:2b:d7:b9:
01:bd:ed:3c:e9:13:a8:e1:28:0d:a3:e5:db:24:03:
e1:7f:a1:51:17:b6:26:23:67:79:5d:76:18:14:48:
66:70:c4:34:b8:39:c4:05:9b:57:b5:e5:ea:b5:79:
97:8c:ec:c6:55:2d:ff:23:bf:53:b7:32:c9:02:93:
67:f7:56:d5:24:9a:c4:39:6b:00:ab:46:af:c9:6d:
7a:70:96:04:ad:63:b1:b4:e6:f5:91:78:18:7a:c2:
1e:6f:c9:ed:73:43:48:5d:99:24:09:63:8f:45:ad:
76:4c:ef:0a:da:22:65:72:1b:e4:02:d4:49:fc:c7:
53:81:22:7d:0c:6f:84:a5:a6:1c:b0:4e:8a:cd:41:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:81:09:2F:92:C8:1E:54:B5:44:C5:EB:31:A4:C0:91:68:04:7C
X509v3 Authority Key Identifier:
keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:24:82:5a:d1:37:3a:d5:1a:06:40:28:12:37:66:cd:bf:e4:
fd:6e:c6:39:6e:9b:0d:7d:dc:c9:e1:74:32:c3:43:a6:56:0a:
31:25:cc:9f:0f:36:ae:63:fb:e5:eb:ae:f5:9a:77:21:80:d2:
fc:40:67:b8:23:84:75:0b:5f:10:f3:f9:23:e0:80:73:ef:07:
dc:26:86:b4:d8:07:17:52:f2:98:29:92:3c:43:55:6f:90:4c:
db:a5:eb:80:18:3a:99:45:37:e3:21:86:db:e2:a4:e2:64:e2:
4f:be:1e:b8:2e:59:b0:14:26:f5:34:b1:c0:9f:92:45:e2:3b:
61:40:49:12:55:d2:b6:cc:9a:b4:7f:4d:b1:19:76:43:c5:5e:
c0:a5:37:28:b4:3d:ad:ab:9f:8b:d7:59:b1:0a:b5:12:e3:40:
24:f9:91:9e:09:53:95:c8:10:c7:24:85:79:1a:fe:99:b9:ec:
d9:3a:30:58:12:3d:3b:94:04:78:28:7d:38:be:19:e7:6d:dd:
5b:28:c2:9a:d2:8e:a8:9d:b3:99:d8:08:68:4b:eb:57:b2:10:
78:d6:83:cd:2e:20:51:04:b7:a8:a8:c3:95:90:19:72:89:53:
d1:87:1c:01:ec:15:bf:11:46:2b:bc:01:ff:6f:7d:27:31:dd:
22:a5:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:30 2026 by rpki-client