
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier: hboANNASXYh4Mt9ruipz+wjm3o0XTVAQCzh9l4eCgNg=
Subject key identifier: 65:EA:51:99:BA:0A:AB:48:49:49:AD:5B:7E:6A:49:C1:D2:83:3C:13
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 033C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number: 02CE
Signing time: Sun 01 Mar 2026 23:46:08 +0000
Manifest this update: Sun 01 Mar 2026 23:46:07 +0000
Manifest next update: Sun 08 Mar 2026 23:46:07 +0000
Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: tsoMFbSCDroLqzKLDdCjk8CW4VRu2Pg9dPaNS1azbA4=)
2: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
3: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
4: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
5: E735782EBB8911F083DB6D28C4F9AE02.roa (hash: EGPPvZRgoPkvLfSn1FO9IWICWOn4INg9mkEVkACiYBo=)
6: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
7: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
8: B895CEFADD9A11F0956A19D3406F56BC.roa (hash: QHNHaXar6tn1K3fpu4q5EwIJGjeA5hGhBt9DNwjJ3Ng=)
9: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
10: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
11: EDD791BCA80611F09091490CC4F9AE02.roa (hash: H19PUWRg0OLXt+zyul68ugvmUr9ug8PqNggB/l0rirk=)
12: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: ZS69q+KLB0wxQSpzELQNwnOrdQL0A5TtkzgU+YFIMPc=)
13: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
14: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
15: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: AnPywYvkMzKBvrL7EYJm43TN30A+CP8/exgQap5VkDs=)
16: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
17: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: wp6/EcySdPY2J9HVTxurzHs/7C5ZFYTx7rFTXPJhFNQ=)
18: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
19: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Mar 1 23:46:07 2026 GMT
Not After : Mar 8 23:46:07 2026 GMT
Subject: CN=69a4cfc0-d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:0a:75:23:b5:d8:8f:fe:29:8a:ef:34:c9:
38:1f:84:8b:58:1b:5b:e6:9e:bc:2a:34:b0:97:9b:
01:44:6f:cd:7e:d1:49:f7:6f:30:ee:6a:68:34:a3:
3a:d1:ef:eb:46:d3:d8:01:f0:76:e6:df:a8:af:85:
dc:6e:b1:24:35:4f:a6:6e:cf:2f:7d:77:4b:43:57:
5c:f6:c3:b9:43:6c:2e:2f:c9:6e:e4:f0:60:80:33:
c2:54:5a:a7:43:fa:03:ac:aa:fc:e6:db:c7:24:9a:
99:02:39:8a:5e:f9:e4:7d:07:71:ca:00:6d:21:28:
f5:a6:bc:a1:4e:a4:2a:b4:81:0a:fe:7a:e3:91:49:
b9:f1:ce:73:6c:b8:b4:d2:fc:f6:2a:1a:0f:48:3c:
1b:49:e3:1a:b8:3c:f8:81:1f:da:25:f6:d9:6b:da:
e9:dd:52:89:c9:ce:1e:0c:e2:18:11:81:73:fc:a6:
05:49:77:d7:69:dd:5d:44:94:c4:55:76:ba:8f:ea:
08:92:67:0c:7a:9b:93:ea:dd:6f:c7:27:5d:7d:17:
2a:56:01:8f:9b:26:a3:49:87:0f:04:60:07:f0:09:
29:81:4a:63:af:87:2c:98:ac:ec:fc:4c:96:95:97:
97:1a:5f:c0:28:12:71:b3:37:c5:e6:55:d5:90:86:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:51:99:BA:0A:AB:48:49:49:AD:5B:7E:6A:49:C1:D2:83:3C:13
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d6:90:6d:b0:ae:a7:61:d2:bd:b3:9b:f0:50:90:36:a4:ce:
55:9f:26:df:cf:b5:f2:96:a0:b9:d6:27:6a:d7:ae:3b:bb:27:
be:6c:94:86:4f:09:0b:1b:7f:2d:c8:fc:73:db:08:48:fc:63:
c6:09:b6:33:9e:0a:df:e5:52:1e:f3:7b:46:39:4b:31:5f:b6:
79:85:73:88:ff:08:66:a1:03:96:8c:13:7a:be:a7:a7:e9:fc:
0a:81:1a:30:00:fe:ee:82:6e:54:d5:ab:07:14:50:15:49:09:
58:c1:ad:99:90:23:31:09:1e:16:c6:4b:84:c8:32:f7:85:66:
f4:9f:51:0f:fe:fd:a9:28:7e:75:35:b7:61:e6:02:5b:37:6b:
97:83:c7:08:5b:9a:ad:3e:0e:c2:a2:6a:36:49:3e:58:c2:ee:
cd:f5:a2:c8:ea:ba:3d:0c:39:48:44:64:7b:0f:2b:d7:d0:2c:
bf:4d:0c:6c:28:d1:3e:08:0f:47:52:e5:1d:79:08:35:da:c8:
fd:d2:c9:51:50:29:e8:ae:c3:00:24:42:10:ac:f4:06:de:ab:
c4:a8:53:8f:a3:28:bd:b8:03:48:34:37:ff:35:0d:11:1b:ac:
e8:c3:b4:80:50:34:88:bd:32:f2:42:7d:f5:bd:b2:b7:bd:12:
73:13:67:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjYwMzAxMjM0NjA3WhcNMjYwMzA4MjM0NjA3WjAYMRYwFAYD
VQQDEw02OWE0Y2ZjMC1kNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv14KdSO12I/+KYrvNMk4H4SLWBtb5p68KjSwl5sBRG/NftFJ928w7mpoNKM6
0e/rRtPYAfB25t+or4XcbrEkNU+mbs8vfXdLQ1dc9sO5Q2wuL8lu5PBggDPCVFqn
Q/oDrKr85tvHJJqZAjmKXvnkfQdxygBtISj1pryhTqQqtIEK/nrjkUm58c5zbLi0
0vz2KhoPSDwbSeMauDz4gR/aJfbZa9rp3VKJyc4eDOIYEYFz/KYFSXfXad1dRJTE
VXa6j+oIkmcMepuT6t1vxyddfRcqVgGPmyajSYcPBGAH8AkpgUpjr4csmKzs/EyW
lZeXGl/AKBJxszfF5lXVkIarPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXqUZm6
CqtISUmtW35qScHSgzwTMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo
UnpVSGpQMGh4ampnY1ZlMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf9aQbbCup2HSvbOb8FCQNqTOVZ8m38+18pagudYnateuO7snvmyUhk8JCxt/
Lcj8c9sISPxjxgm2M54K3+VSHvN7RjlLMV+2eYVziP8IZqEDlowTer6np+n8CoEa
MAD+7oJuVNWrBxRQFUkJWMGtmZAjMQkeFsZLhMgy94Vm9J9RD/79qSh+dTW3YeYC
Wzdrl4PHCFuarT4OwqJqNkk+WMLuzfWiyOq6PQw5SERkew8r19Asv00MbCjRPggP
R1LlHXkINdrI/dLJUVAp6K7DACRCEKz0Bt6rxKhTj6MovbgDSDQ3/zUNERus6MO0
gFA0iL0y8kJ99b2yt70ScxNnWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:36:42 2026 by rpki-client