
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
File: 4D9YAHuXKQulI0NZeReytqtd0uk.mft (raw, json)
Hash identifier: X8DF5KDPbyKY99uiVzcI0Spgo1ff5RqJZg6weVoJeL0=
Subject key identifier: 6C:2F:FF:88:B2:93:73:13:7B:79:37:4C:94:D2:CC:4D:45:01:63:18
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Certificate issuer: /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial: 067D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
Manifest number: 0677
Signing time: Sat 28 Feb 2026 23:03:19 +0000
Manifest this update: Sat 28 Feb 2026 23:03:19 +0000
Manifest next update: Sat 07 Mar 2026 23:03:19 +0000
Files and hashes: 1: 4D9YAHuXKQulI0NZeReytqtd0uk.crl (hash: 0G9MNc42YJPHEL7Or81YIrt17v1eGd3QujzcsH4RMbs=)
2: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (hash: 8DukUXHtreFdKUgIvZrKvql5wqzBY6PJqfjiVtGIfJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166646, serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Validity
Not Before: Feb 28 23:03:19 2026 GMT
Not After : Mar 7 23:03:19 2026 GMT
Subject: CN=69a37437-36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:be:39:14:64:11:fb:aa:a7:59:64:74:ef:
bd:e3:a1:cb:1b:7a:df:1e:56:ab:54:76:bc:af:22:
84:24:a2:0c:83:c0:15:d0:ed:ab:2d:1b:1d:cc:de:
cb:f0:3c:83:9c:9e:79:7d:90:68:9c:51:13:9b:c5:
cf:ff:32:15:6e:8e:bc:88:5f:ec:c4:c4:db:ed:f2:
bf:79:e7:f5:59:f6:02:e9:f3:1a:de:53:69:29:b8:
cf:80:30:dd:91:2c:f0:43:13:45:12:2f:62:fa:6e:
76:62:c7:2e:2e:40:df:83:22:9f:ed:9b:68:29:50:
1f:f6:55:d9:c1:bf:ae:37:89:10:1a:9a:30:ce:d4:
63:a3:59:d1:96:51:6a:c7:02:81:18:3c:4a:64:65:
1f:9d:1b:7f:d8:7a:c2:4f:43:bf:b0:10:d0:75:a0:
3a:e5:e6:4e:76:95:b8:b1:74:f8:2d:8a:14:46:b3:
3c:c7:18:ee:f9:58:c3:d9:b9:07:a3:1b:26:5f:ac:
2c:24:8e:3e:2a:55:0c:17:50:a0:76:26:39:88:54:
f7:dc:e4:96:4c:0f:f9:de:ae:e8:09:6b:eb:9a:3d:
10:12:0b:cb:7c:21:03:ea:57:bd:f7:18:8b:77:56:
1a:3a:12:a2:1e:1c:d1:7b:3e:d0:59:a3:bc:bd:55:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:FF:88:B2:93:73:13:7B:79:37:4C:94:D2:CC:4D:45:01:63:18
X509v3 Authority Key Identifier:
keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fc:cd:a1:b1:82:77:63:b6:1d:0c:1c:fe:91:6f:82:4f:77:
63:03:40:86:d7:77:8a:1a:9d:da:8b:03:fb:0c:d8:0d:e3:e0:
ff:60:da:ce:f6:6d:57:6e:0f:cb:dc:0d:39:09:d0:9e:e6:df:
93:e9:fe:6a:1e:56:a0:e9:28:c9:ef:02:b6:b7:6f:23:2b:23:
bb:6a:d2:98:88:c1:a5:a5:f5:4b:e8:d3:5f:c8:ee:0d:4f:a4:
b0:57:3f:c2:73:66:7c:f0:ed:aa:c5:25:ad:16:28:70:d1:58:
c1:9d:ea:a2:21:77:4c:48:e5:73:ac:5e:1f:e5:39:ee:73:7f:
13:af:04:e8:f8:03:56:98:89:2d:d8:7b:e9:42:5f:1e:bf:d6:
df:1f:75:05:20:96:f8:27:31:b9:b9:c2:56:af:1c:61:75:d0:
ce:d8:93:d9:69:97:ce:fc:89:42:2a:11:ba:94:ed:5a:89:48:
fc:5e:00:52:e0:04:1f:e4:d5:e8:ed:de:72:4e:e2:64:3a:dc:
e6:4a:35:2a:cb:e8:bc:76:2d:cc:13:5d:54:c9:2b:ca:a5:11:
f4:98:4f:08:95:18:69:23:59:dd:c9:2f:ca:b7:75:ae:36:e1:
1d:86:f3:b7:c1:44:21:91:07:06:cf:0e:bc:40:03:22:ad:be:
44:1d:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:46 2026 by rpki-client