
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier: MqbNQPSAV4DA7OrTrSUpW/jIZ0vMQpNnWPaTljDnomc=
Subject key identifier: 39:4F:C6:14:1A:E3:7B:D0:31:CC:61:63:D6:92:59:4B:9B:98:07:8A
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number: 0155
Signing time: Sun 01 Mar 2026 06:06:25 +0000
Manifest this update: Sun 01 Mar 2026 06:06:24 +0000
Manifest next update: Sun 08 Mar 2026 06:06:24 +0000
Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: 30Im37y1Z+C/nXDsZ/ZeTHFU3F9y+xNvOmeJwVnfZY0=)
2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Validity
Not Before: Mar 1 06:06:24 2026 GMT
Not After : Mar 8 06:06:24 2026 GMT
Subject: CN=69a3d761-c87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:48:dc:94:24:03:4d:87:9c:18:5a:2a:64:
6f:36:0c:13:05:ef:c4:c7:48:41:d9:ae:36:22:9c:
16:ea:f9:49:22:38:15:c6:13:e1:15:1d:49:ec:41:
ea:4b:8f:42:ab:99:c8:7d:0b:c5:6b:f6:fb:d0:90:
fa:ca:3c:21:7c:4f:6b:db:54:c7:00:08:5f:60:4c:
fb:be:9b:72:91:d3:90:12:45:e2:97:ad:b7:dd:34:
51:d4:43:10:93:c9:3b:b6:78:53:1d:6b:c9:f4:12:
45:35:c8:8a:24:78:b0:44:5c:44:a6:b2:09:42:d6:
b4:74:79:25:54:8b:3f:38:02:7f:bc:40:71:2e:90:
ff:6d:c1:eb:2e:70:a5:81:68:2d:16:e0:96:c1:d7:
07:f7:c7:9b:8b:a5:9b:60:63:cc:37:7f:a1:43:61:
4a:40:b3:91:6a:89:1b:f3:e6:fa:77:8c:44:4c:62:
32:04:80:6f:ca:90:21:ac:f0:92:00:f6:64:06:fb:
47:6d:9e:68:0b:f9:1d:78:ad:a1:df:5f:6e:1d:f8:
dc:31:6e:e7:c2:b1:39:d9:c2:71:09:a4:cb:69:aa:
ae:c6:28:cf:13:08:13:9f:20:ee:ed:25:9d:0f:9f:
33:c6:d2:cd:ee:c2:9d:a3:9a:21:1a:f1:79:c8:f4:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:C6:14:1A:E3:7B:D0:31:CC:61:63:D6:92:59:4B:9B:98:07:8A
X509v3 Authority Key Identifier:
keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a5:eb:f2:c0:b5:58:4e:6a:49:28:cb:bf:0d:7b:67:2b:0b:
23:e2:03:c9:0f:0e:84:53:03:65:50:c1:b9:11:c1:3d:e1:e2:
85:f6:a0:6c:b2:1e:78:b0:99:5d:4f:43:25:9e:d5:f6:b0:22:
98:78:5d:7e:4e:a4:72:31:f9:83:aa:3d:15:00:4c:a8:72:83:
d4:4f:ab:cf:b6:54:25:62:9b:da:79:fb:88:31:76:e0:90:29:
46:83:ac:29:63:86:7f:72:98:9f:83:bd:e6:0a:c7:33:cb:52:
d8:9e:de:c8:c8:8c:1a:50:55:8f:b5:1e:6b:e6:79:72:59:97:
88:a1:d4:cc:44:b2:5a:49:69:99:69:2b:08:22:17:ce:24:35:
1d:79:3a:dd:2f:1a:69:33:3c:ef:67:e0:b8:b0:23:b7:2e:73:
5c:42:df:1f:db:51:36:43:8a:07:3f:1a:41:70:63:22:23:91:
16:fd:d8:68:13:70:8c:b9:66:48:36:2c:2e:f2:0c:a3:7b:35:
13:43:58:57:ad:e3:24:06:bd:99:7f:14:df:2c:da:ca:c2:1d:
d9:30:f6:d0:7d:9c:d0:35:77:b9:f1:28:1f:1d:a7:0c:9b:5e:
7c:80:cf:8c:2d:ca:a6:22:1d:9f:63:59:b0:de:63:37:07:85:
3e:56:04:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx
ODdEOTdGMzMwHhcNMjYwMzAxMDYwNjI0WhcNMjYwMzA4MDYwNjI0WjAYMRYwFAYD
VQQDEw02OWEzZDc2MS1jODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn8VI3JQkA02HnBhaKmRvNgwTBe/Ex0hB2a42IpwW6vlJIjgVxhPhFR1J7EHq
S49Cq5nIfQvFa/b70JD6yjwhfE9r21THAAhfYEz7vptykdOQEkXil6233TRR1EMQ
k8k7tnhTHWvJ9BJFNciKJHiwRFxEprIJQta0dHklVIs/OAJ/vEBxLpD/bcHrLnCl
gWgtFuCWwdcH98ebi6WbYGPMN3+hQ2FKQLORaokb8+b6d4xETGIyBIBvypAhrPCS
APZkBvtHbZ5oC/kdeK2h319uHfjcMW7nwrE52cJxCaTLaaquxijPEwgTnyDu7SWd
D58zxtLN7sKdo5ohGvF5yPTegwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlPxhQa
43vQMcxhY9aSWUubmAeKMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy
OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha
U05rcG40cFBrcHdZZlpmek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArKXr8sC1WE5qSSjLvw17ZysLI+IDyQ8OhFMDZVDBuRHBPeHihfagbLIeeLCZ
XU9DJZ7V9rAimHhdfk6kcjH5g6o9FQBMqHKD1E+rz7ZUJWKb2nn7iDF24JApRoOs
KWOGf3KYn4O95grHM8tS2J7eyMiMGlBVj7Uea+Z5clmXiKHUzESyWklpmWkrCCIX
ziQ1HXk63S8aaTM872fguLAjty5zXELfH9tRNkOKBz8aQXBjIiORFv3YaBNwjLlm
SDYsLvIMo3s1E0NYV63jJAa9mX8U3yzaysId2TD20H2c0DV3ufEoHx2nDJtefIDP
jC3KpiIdn2NZsN5jNweFPlYEfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:44 2026 by rpki-client