
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json)
Hash identifier: OdDDHgVR7JJ5BqOKzDg/j1qxXVxahCxkr5/59EXqqIA=
Subject key identifier: 61:4B:94:4A:D7:16:4B:D7:26:9C:E2:AC:F5:74:35:E3:4D:E9:BB:C6
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 13DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
Manifest number: 135E
Signing time: Mon 02 Mar 2026 00:48:01 +0000
Manifest this update: Mon 02 Mar 2026 00:47:59 +0000
Manifest next update: Mon 09 Mar 2026 00:47:59 +0000
Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: XVzi+5oT+7JWFpdiT1TaxsvQlzRhnlG/n52Qfs1+Lnk=)
2: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: iO0xE2UtBvE5+i7ZRf0a9YDAIJvC3bCNCIiuNjHXEb8=)
3: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: WY5dp56B11oooCh5zG5Zx7ghAU+bzbf6ON8StCgFnrs=)
4: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: SjD28KoEmm6FZe8EGDlexQbpkNAIGBBVOWojtwIhdnI=)
5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: YcNeOX0Z2+Cs+dGhhc9+O2DMKLTZ+Dv6Y6kIHhzrUIQ=)
6: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: IBdF/b7AGqrLWFihxnUVhbaT/f9Dju/d5m8UNf3vwk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5082 (0x13da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Mar 2 00:47:59 2026 GMT
Not After : Mar 9 00:47:59 2026 GMT
Subject: CN=69a4de40-88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:03:e3:7e:15:90:c4:f3:e2:8b:1d:52:18:
43:95:b6:44:45:9c:b9:29:21:ba:bb:ec:3b:85:3f:
ae:2d:d1:4e:a2:11:a9:af:28:f3:bf:74:d5:5d:35:
86:99:3e:c2:1f:63:34:8e:62:ed:ee:c4:ad:81:3e:
5a:91:9a:dc:08:b7:cb:e0:82:6e:19:24:55:41:34:
ce:d4:98:15:5b:2d:ce:47:e7:d6:2a:02:ea:1d:07:
40:65:72:e4:66:6e:7e:6a:85:e3:9f:fc:a6:0c:9a:
de:ab:b8:b1:99:31:3c:26:90:e1:68:a2:a8:ed:dc:
f8:62:94:dd:e8:4c:c5:5e:93:19:92:b5:77:5b:12:
44:96:11:56:49:b7:c0:75:cc:f0:55:27:6e:2b:59:
1b:61:6c:d7:cf:3c:3a:5c:ed:8a:56:63:c4:75:04:
38:c1:ff:8c:79:be:ab:4c:b5:ea:3d:10:ad:d1:8d:
86:b6:cf:56:e2:26:1e:f8:86:86:98:1e:04:76:e2:
f3:78:9f:78:b9:6e:35:50:90:08:05:85:af:c8:02:
54:22:e6:fe:09:d5:9e:29:1c:5b:42:6d:47:07:a6:
b3:33:00:47:1c:96:17:8d:b5:63:50:67:17:90:d7:
b7:90:77:d9:cf:ee:31:7b:d5:12:c6:34:21:cb:e6:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:94:4A:D7:16:4B:D7:26:9C:E2:AC:F5:74:35:E3:4D:E9:BB:C6
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:a4:5b:7c:e0:d0:9c:28:95:1f:c3:7e:03:b2:3d:30:d1:
b7:8f:6f:bb:be:3d:43:9f:7c:b0:31:59:05:cd:97:89:16:a6:
99:44:a6:4f:eb:d8:7c:29:9c:12:8a:66:c1:ed:ad:ca:85:9d:
4c:33:a9:ca:a2:e8:1b:59:7e:eb:94:6c:df:2c:88:14:2d:96:
b1:4c:dd:0b:bd:31:42:f6:62:d4:49:ae:db:11:21:b8:3a:9e:
82:1a:d3:3e:7d:ed:e2:be:3e:65:4e:7b:76:4e:02:d7:73:c4:
9a:13:dc:36:08:f0:a4:37:74:44:9f:e1:4e:d8:35:aa:37:64:
a3:cc:7c:70:d9:dc:69:6e:5b:78:40:90:e2:1b:41:e5:6b:8e:
36:a5:d0:48:96:50:1a:e3:9b:01:b0:4d:11:fc:50:1b:90:d4:
29:77:e9:60:68:a3:fa:6e:8a:8b:aa:96:43:6e:58:a5:c7:86:
f7:91:33:9b:40:47:32:3b:64:a2:82:06:ea:fd:ad:61:05:63:
82:0f:83:8a:c4:15:4e:e1:f3:cd:fc:10:9b:af:40:da:97:e2:
dd:79:ae:48:ed:51:dd:ab:73:39:3e:5a:00:24:bb:70:27:ca:
a4:d0:03:fe:40:01:7b:66:f8:e7:8e:ab:bd:c9:43:de:a4:3a:
99:79:14:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB
OTAzQzcxQjUwHhcNMjYwMzAyMDA0NzU5WhcNMjYwMzA5MDA0NzU5WjAYMRYwFAYD
VQQDEw02OWE0ZGU0MC04OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rUD434VkMTz4osdUhhDlbZERZy5KSG6u+w7hT+uLdFOohGpryjzv3TVXTWG
mT7CH2M0jmLt7sStgT5akZrcCLfL4IJuGSRVQTTO1JgVWy3OR+fWKgLqHQdAZXLk
Zm5+aoXjn/ymDJreq7ixmTE8JpDhaKKo7dz4YpTd6EzFXpMZkrV3WxJElhFWSbfA
dczwVSduK1kbYWzXzzw6XO2KVmPEdQQ4wf+Meb6rTLXqPRCt0Y2Gts9W4iYe+IaG
mB4EduLzeJ94uW41UJAIBYWvyAJUIub+CdWeKRxbQm1HB6azMwBHHJYXjbVjUGcX
kNe3kHfZz+4xe9USxjQhy+ajswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFLlErX
FkvXJpzirPV0NeNN6bvGMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz
SERad1pPSUVtMmlwQThjYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASoukW3zg0JwolR/DfgOyPTDRt49vu749Q598sDFZBc2XiRammUSmT+vYfCmc
Eopmwe2tyoWdTDOpyqLoG1l+65Rs3yyIFC2WsUzdC70xQvZi1Emu2xEhuDqeghrT
Pn3t4r4+ZU57dk4C13PEmhPcNgjwpDd0RJ/hTtg1qjdko8x8cNncaW5beECQ4htB
5WuONqXQSJZQGuObAbBNEfxQG5DUKXfpYGij+m6Ki6qWQ25YpceG95Ezm0BHMjtk
ooIG6v2tYQVjgg+DisQVTuHzzfwQm69A2pfi3XmuSO1R3atzOT5aACS7cCfKpNAD
/kABe2b4546rvclD3qQ6mXkU5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:47 2026 by rpki-client