
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: a3+Fw1u1uogcsnZEIX87rKEOUnsosjXnWPP7Z/Di3o0=
Subject key identifier: 98:E5:63:DF:1A:16:00:51:30:67:AC:DD:CE:57:FA:51:8F:8E:E2:FE
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 14D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 14A4
Signing time: Mon 02 Mar 2026 02:10:36 +0000
Manifest this update: Mon 02 Mar 2026 02:10:33 +0000
Manifest next update: Mon 09 Mar 2026 02:10:33 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: iTOptjuzt+YcM/o49sNa1TUpPLSxupY0qDQwn6Y0v+s=)
2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=)
3: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=)
4: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=)
5: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=)
6: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=)
7: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=)
8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=)
9: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5329 (0x14d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Mar 2 02:10:33 2026 GMT
Not After : Mar 9 02:10:33 2026 GMT
Subject: CN=69a4f19b-030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:2e:9f:c5:8f:21:6d:02:6a:6b:fe:eb:6c:
dd:61:e2:b3:3b:9a:3b:b9:43:68:ba:a2:b2:86:7e:
32:be:a8:b4:4c:bb:2f:93:6f:2d:9f:da:98:d2:9d:
90:23:9d:05:b3:33:c2:fd:de:19:a2:62:c4:c1:c3:
71:c9:ea:3c:a0:52:5f:ec:5c:93:2e:2c:54:00:66:
c0:b0:c8:9f:32:0e:58:b8:67:d9:33:8d:b4:9e:58:
7d:a8:57:81:cd:81:13:9f:c0:a2:b6:52:25:5d:69:
42:11:6a:22:89:84:4d:bc:c1:3c:83:d2:59:d4:cd:
61:13:be:a6:bf:a0:ac:63:d7:42:75:cb:e0:f8:7e:
6f:f8:39:ac:44:7d:e6:28:9e:eb:6d:98:2c:3a:05:
1f:ef:e3:64:1b:c7:20:99:20:ba:24:10:af:c2:2f:
6d:23:d3:97:bd:9c:1d:05:73:25:cc:ac:0d:a1:57:
77:84:24:25:72:21:0c:a7:f5:90:a3:1b:b6:fb:b5:
cd:79:25:91:ed:48:8c:db:00:5b:ea:cd:56:3b:09:
64:a9:ab:b2:41:0e:09:ab:db:ce:59:14:d7:f0:9a:
b6:b8:b4:f2:fa:b5:0f:09:a7:f2:a7:85:99:bd:29:
90:85:79:b2:79:88:40:d1:26:04:15:4e:42:3a:64:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:63:DF:1A:16:00:51:30:67:AC:DD:CE:57:FA:51:8F:8E:E2:FE
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:f1:63:b7:63:bb:5f:40:5c:32:f6:e8:3e:29:7c:9d:9c:
01:75:f6:e7:3a:04:5e:8b:0f:3f:e0:52:75:ce:ec:00:23:97:
63:ec:9f:06:e2:11:67:c1:3f:99:04:70:37:b6:62:d8:b5:a0:
94:48:05:14:bf:97:b9:cf:79:0f:96:d4:11:27:45:8e:d1:00:
76:ef:9b:79:38:20:00:25:0b:9c:3b:13:75:d7:1b:f7:a8:8b:
b6:1d:7b:5e:f9:57:4e:2f:05:9a:20:b8:2d:5f:87:2c:18:86:
6f:0c:08:04:88:1e:7f:dc:f6:e7:09:af:07:14:8e:df:fe:e3:
34:51:a0:67:63:dd:ef:a6:22:0a:20:19:66:ae:61:c0:86:c1:
ff:e6:c9:06:bd:42:a8:93:77:7e:d6:da:16:62:7b:42:d0:ae:
a6:8c:ec:75:67:62:46:c0:76:a7:e0:f4:f3:a7:73:aa:d1:5f:
22:b7:e6:60:a5:2a:1c:e5:b0:ba:b6:84:24:4e:7a:fb:d6:75:
04:03:2f:90:dc:2a:7f:f5:ff:11:60:33:df:d5:6a:2a:21:10:
33:d2:93:c7:20:74:08:a1:a8:3a:d4:00:cc:ca:9a:6b:ed:4a:
e3:49:9c:8f:c3:b4:11:98:47:8d:b9:64:0a:ca:07:1b:b4:bc:
41:fe:4c:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC
RDY0MDBFMDkwHhcNMjYwMzAyMDIxMDMzWhcNMjYwMzA5MDIxMDMzWjAYMRYwFAYD
VQQDEw02OWE0ZjE5Yi0wMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCIun8WPIW0Camv+62zdYeKzO5o7uUNouqKyhn4yvqi0TLsvk28tn9qY0p2Q
I50FszPC/d4ZomLEwcNxyeo8oFJf7FyTLixUAGbAsMifMg5YuGfZM420nlh9qFeB
zYETn8CitlIlXWlCEWoiiYRNvME8g9JZ1M1hE76mv6CsY9dCdcvg+H5v+DmsRH3m
KJ7rbZgsOgUf7+NkG8cgmSC6JBCvwi9tI9OXvZwdBXMlzKwNoVd3hCQlciEMp/WQ
oxu2+7XNeSWR7UiM2wBb6s1WOwlkqauyQQ4Jq9vOWRTX8Jq2uLTy+rUPCafyp4WZ
vSmQhXmyeYhA0SYEFU5COmT39QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjlY98a
FgBRMGes3c5X+lGPjuL+MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw
MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4
RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmX3xY7dju19AXDL26D4pfJ2cAXX25zoEXosPP+BSdc7sACOXY+yfBuIRZ8E/
mQRwN7Zi2LWglEgFFL+Xuc95D5bUESdFjtEAdu+beTggACULnDsTddcb96iLth17
XvlXTi8FmiC4LV+HLBiGbwwIBIgef9z25wmvBxSO3/7jNFGgZ2Pd76YiCiAZZq5h
wIbB/+bJBr1CqJN3ftbaFmJ7QtCupozsdWdiRsB2p+D086dzqtFfIrfmYKUqHOWw
uraEJE56+9Z1BAMvkNwqf/X/EWAz39VqKiEQM9KTxyB0CKGoOtQAzMqaa+1K40mc
j8O0EZhHjblkCsoHG7S8Qf5M7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:47 2026 by rpki-client