
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier: tkXFmiNo4qXgMlkgq6IQcEhjeEdiwPGX1P4lU4KZHU0=
Subject key identifier: 17:2C:60:1A:20:D5:6C:FE:AD:D0:6C:AC:13:CB:FD:8A:86:66:47:52
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number: 0213
Signing time: Mon 02 Mar 2026 00:30:39 +0000
Manifest this update: Mon 02 Mar 2026 00:30:38 +0000
Manifest next update: Mon 09 Mar 2026 00:30:38 +0000
Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: sTnOEOeXLFlwxClfKT/FvCCKF4Mfr2eFEr2koqAGXx8=)
2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Mar 2 00:30:38 2026 GMT
Not After : Mar 9 00:30:38 2026 GMT
Subject: CN=69a4da2e-544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:77:66:96:6d:1a:03:b3:5b:3d:52:5f:e2:
ba:c6:78:29:ec:f3:f8:a2:ea:1f:2a:cf:82:8b:0e:
bb:af:26:c4:5d:91:d1:94:9f:72:23:e2:79:1c:af:
c0:a5:d7:67:c9:f2:86:b4:f1:b9:e0:e2:ae:4f:15:
f8:57:6e:63:8f:b0:16:9a:7e:07:74:15:36:20:2c:
e6:e2:42:ae:41:1a:fe:bb:1d:a7:5f:25:7b:e3:cd:
b4:00:58:dc:50:57:56:42:d6:54:89:24:91:1c:80:
ce:fb:3a:a7:c5:f5:03:29:ea:8e:df:30:1a:97:82:
de:3c:75:ed:5e:22:6b:ea:7a:90:a8:35:ef:64:2b:
62:f8:d2:ea:8f:0f:e0:af:38:83:af:a0:1f:36:15:
56:d4:17:37:c5:a8:16:89:a4:17:06:61:1b:db:7a:
fb:af:7a:88:14:a2:47:61:c1:2b:46:c5:a3:e2:44:
f1:a9:2d:60:db:42:15:fc:45:9e:78:a7:c9:de:8f:
e9:89:6d:db:81:88:de:64:9a:1b:22:b1:97:ab:69:
e6:fd:4a:30:83:0c:86:a0:4c:af:dc:ce:b6:66:29:
94:b0:27:51:99:18:fc:5d:82:b5:7e:78:fb:33:87:
c5:f3:d8:60:75:67:80:92:21:88:3a:3c:89:82:e2:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:60:1A:20:D5:6C:FE:AD:D0:6C:AC:13:CB:FD:8A:86:66:47:52
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:24:11:55:73:db:fd:62:7c:d8:d9:e1:a2:be:1f:8e:9d:1d:
6e:91:34:23:39:3d:af:bd:76:d9:0b:26:05:74:18:31:60:aa:
50:47:ae:06:bd:49:18:c6:fc:19:a5:96:97:73:d3:82:91:6b:
21:10:c5:b2:a2:12:b0:85:35:8a:dd:c5:9b:2a:7f:8c:f9:06:
5c:8f:6a:84:f9:d6:25:8b:78:9c:a1:64:3a:c5:19:2b:aa:47:
df:e2:f6:6a:bf:a7:98:5d:31:46:13:73:56:0b:a9:1b:a4:f7:
01:1d:21:43:9f:ae:1c:ef:5c:63:09:f9:d2:5b:99:ac:24:ff:
41:71:cd:d4:a2:88:3f:af:04:52:cb:67:f5:ae:75:75:84:dd:
91:21:6b:dd:88:d7:f8:8f:98:b6:10:13:72:1a:c1:d5:4b:03:
a8:c4:cf:16:cd:45:34:da:74:bc:c7:b3:10:35:58:c9:fc:00:
82:1f:ba:53:41:d4:b6:89:51:94:ff:47:a1:9e:92:87:de:3c:
6f:3c:4d:c3:8d:a9:4e:59:70:e1:99:6f:8e:fc:82:88:95:82:
85:29:bc:a7:80:5a:8a:c5:4f:34:1a:88:58:4d:64:26:4c:00:
c8:88:ba:fe:94:b8:60:b7:62:85:ec:63:f4:4f:8f:fa:b5:88:
25:0f:e3:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjYwMzAyMDAzMDM4WhcNMjYwMzA5MDAzMDM4WjAYMRYwFAYD
VQQDEw02OWE0ZGEyZS01NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7KR3ZpZtGgOzWz1SX+K6xngp7PP4ouofKs+Ciw67rybEXZHRlJ9yI+J5HK/A
pddnyfKGtPG54OKuTxX4V25jj7AWmn4HdBU2ICzm4kKuQRr+ux2nXyV74820AFjc
UFdWQtZUiSSRHIDO+zqnxfUDKeqO3zAal4LePHXtXiJr6nqQqDXvZCti+NLqjw/g
rziDr6AfNhVW1Bc3xagWiaQXBmEb23r7r3qIFKJHYcErRsWj4kTxqS1g20IV/EWe
eKfJ3o/piW3bgYjeZJobIrGXq2nm/UowgwyGoEyv3M62ZimUsCdRmRj8XYK1fnj7
M4fF89hgdWeAkiGIOjyJguLtQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcsYBog
1Wz+rdBsrBPL/YqGZkdSMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu
bnlfajBYcXlROHQwdDdsaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvyQRVXPb/WJ82Nnhor4fjp0dbpE0Izk9r7122QsmBXQYMWCqUEeuBr1JGMb8
GaWWl3PTgpFrIRDFsqISsIU1it3Fmyp/jPkGXI9qhPnWJYt4nKFkOsUZK6pH3+L2
ar+nmF0xRhNzVgupG6T3AR0hQ5+uHO9cYwn50luZrCT/QXHN1KKIP68EUstn9a51
dYTdkSFr3YjX+I+YthATchrB1UsDqMTPFs1FNNp0vMezEDVYyfwAgh+6U0HUtolR
lP9HoZ6Sh948bzxNw42pTllw4ZlvjvyCiJWChSm8p4BaisVPNBqIWE1kJkwAyIi6
/pS4YLdihexj9E+P+rWIJQ/j1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:37 2026 by rpki-client