
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: BK4yJyqDREG2PaSGsljkYcJXzMHFOxXZRiv4SBvCRx8=
Subject key identifier: BF:76:B7:1E:CE:4D:9A:9D:33:ED:E3:3E:22:AC:0D:54:51:49:14:1D
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 35BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 3573
Signing time: Thu 16 Apr 2026 14:40:30 +0000
Manifest this update: Thu 16 Apr 2026 14:40:29 +0000
Manifest next update: Thu 23 Apr 2026 14:40:29 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: ZEsMlf/dDGYEMoQI1c96PnY+NUDYoS3Sdj8Dy8p3ZyE=)
2: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
3: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
5: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13757 (0x35bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Apr 16 14:40:29 2026 GMT
Not After : Apr 23 14:40:29 2026 GMT
Subject: CN=69e0f4de-9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:2f:3a:84:84:8b:7d:56:39:49:8e:22:16:
7d:f0:73:98:ae:5a:b5:4c:50:b7:e9:bd:4b:7b:df:
87:dd:c7:50:c7:70:66:da:e6:ea:b5:1a:af:69:9f:
7f:d1:6a:60:3f:17:43:0e:f3:c7:fb:ea:7a:41:b2:
f5:03:d8:a3:be:5d:ad:b7:e0:eb:63:dd:c4:27:86:
16:1f:1c:76:7d:5b:f6:20:87:27:76:27:91:88:3d:
9d:22:51:1c:ba:99:2b:0f:36:b3:35:13:7c:b8:88:
fd:6e:c9:14:02:d3:a5:51:ca:fa:75:78:19:e6:7f:
72:1e:03:c2:b2:15:d6:76:f2:b6:6d:ae:d7:89:f2:
c2:0b:12:c7:d2:81:b0:49:89:3e:c4:57:79:c5:1e:
91:f4:48:49:a7:7e:95:8e:42:1e:48:e4:cf:cc:4b:
6c:bb:72:4a:dd:17:2b:d5:76:b4:6a:14:80:07:88:
a7:34:91:84:b2:ab:5c:73:a2:99:fe:49:0d:a5:e3:
67:48:f5:d8:8c:f9:88:17:b2:fb:9c:f4:0d:37:a9:
97:48:35:99:66:75:24:45:17:52:da:ca:75:41:b0:
69:ef:62:f6:0e:6c:c9:a8:38:3f:14:52:be:f1:a5:
55:d4:55:51:b1:0d:a2:1f:98:df:5e:e1:be:e1:7c:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:76:B7:1E:CE:4D:9A:9D:33:ED:E3:3E:22:AC:0D:54:51:49:14:1D
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:62:de:9c:90:13:b0:ef:85:d6:79:69:6f:cd:3d:f8:91:fc:
69:43:ea:d6:8f:ed:f6:1e:d2:48:4d:6a:b7:bf:e0:74:56:f1:
cb:0a:77:d8:9a:5a:3a:d1:80:c5:66:f8:81:92:ff:01:15:cc:
e0:b9:6e:e2:73:45:31:7e:7b:9b:d3:c6:ad:17:54:49:d8:9a:
84:b2:c9:09:ac:26:a3:b8:81:b7:06:e7:25:88:2b:a5:c1:92:
92:36:a2:ae:55:ff:dd:25:b2:32:4a:d4:6a:9b:44:ac:0f:92:
c3:1f:84:96:4d:4a:64:05:35:d1:77:76:f9:64:48:ed:14:22:
e2:8b:cb:8f:b4:94:fc:e4:db:91:1a:31:e4:63:3e:d1:9e:7a:
2c:2a:77:47:b5:21:11:57:99:ee:8c:1f:de:4d:8c:b3:ed:7c:
63:de:e1:56:ef:2d:11:10:11:65:71:31:98:98:d0:06:df:3e:
c2:08:7b:17:b8:f0:e9:3a:c6:de:40:e6:06:c6:f4:74:2a:4c:
e0:af:bf:4f:dc:42:73:3b:1f:57:9a:3f:08:2c:c2:0b:43:4f:
df:6f:63:9a:c6:35:56:c7:ed:46:6d:1d:a5:fe:19:1a:49:98:
b4:76:34:c3:40:f0:78:45:d1:ee:80:46:90:ae:32:c4:20:be:
e2:e5:6a:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG
RUNBMDRCNEEwHhcNMjYwNDE2MTQ0MDI5WhcNMjYwNDIzMTQ0MDI5WjAYMRYwFAYD
VQQDEw02OWUwZjRkZS05Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuAkvOoSEi31WOUmOIhZ98HOYrlq1TFC36b1Le9+H3cdQx3Bm2ubqtRqvaZ9/
0WpgPxdDDvPH++p6QbL1A9ijvl2tt+DrY93EJ4YWHxx2fVv2IIcndieRiD2dIlEc
upkrDzazNRN8uIj9bskUAtOlUcr6dXgZ5n9yHgPCshXWdvK2ba7XifLCCxLH0oGw
SYk+xFd5xR6R9EhJp36VjkIeSOTPzEtsu3JK3Rcr1Xa0ahSAB4inNJGEsqtcc6KZ
/kkNpeNnSPXYjPmIF7L7nPQNN6mXSDWZZnUkRRdS2sp1QbBp72L2DmzJqDg/FFK+
8aVV1FVRsQ2iH5jfXuG+4XygUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL92tx7O
TZqdM+3jPiKsDVRRSRQdMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE
OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2
RXZud1VKMVpmd18teWdTMG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsmLenJATsO+F1nlpb809+JH8aUPq1o/t9h7SSE1qt7/gdFbxywp32JpaOtGA
xWb4gZL/ARXM4Llu4nNFMX57m9PGrRdUSdiahLLJCawmo7iBtwbnJYgrpcGSkjai
rlX/3SWyMkrUaptErA+Swx+Elk1KZAU10Xd2+WRI7RQi4ovLj7SU/OTbkRox5GM+
0Z56LCp3R7UhEVeZ7owf3k2Ms+18Y97hVu8tERARZXExmJjQBt8+wgh7F7jw6TrG
3kDmBsb0dCpM4K+/T9xCczsfV5o/CCzCC0NP329jmsY1VsftRm0dpf4ZGkmYtHY0
w0DweEXR7oBGkK4yxCC+4uVqxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:08 2026 by rpki-client