
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier: 8bSPnmYNLCtxd6mXGchxPoDSUL18EItKrpAu6cvcHy8=
Subject key identifier: 5C:69:F8:BE:BD:91:54:BF:76:23:3C:40:01:F7:71:F0:FD:54:CF:88
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number: 02BB
Signing time: Fri 17 Apr 2026 01:19:51 +0000
Manifest this update: Fri 17 Apr 2026 01:19:50 +0000
Manifest next update: Fri 24 Apr 2026 01:19:50 +0000
Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: 1dFraX3147gPzbAkfVD0G53SLqCHxH8HTZRtalr5HJA=)
2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Validity
Not Before: Apr 17 01:19:50 2026 GMT
Not After : Apr 24 01:19:50 2026 GMT
Subject: CN=69e18ab7-1ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:8a:f6:4b:06:57:d4:8c:cf:49:97:6f:79:
a1:fb:f5:32:4d:68:b8:6f:9f:ef:2c:4e:d1:bf:1c:
ca:2d:a4:1a:8e:19:17:19:00:d2:d2:ca:5c:3d:5a:
3b:e1:e3:f9:aa:b1:88:b3:b7:f9:45:b2:dd:43:34:
9d:3a:95:b8:54:27:87:47:59:74:af:4e:fa:9c:ec:
29:f2:58:b9:e6:33:0b:f7:d3:70:17:10:05:a5:9d:
d1:d9:f3:2a:23:08:93:aa:b1:5b:b0:6d:13:23:51:
3f:e8:bf:22:95:e4:4f:86:12:01:ec:58:cf:ed:fa:
44:6a:b5:77:2f:87:31:36:bd:50:b1:62:a2:03:78:
d5:9d:ec:02:bf:fc:da:e7:72:c3:d6:3f:5f:f4:dc:
94:79:f0:fb:95:4a:2b:a1:84:0d:ae:ce:80:2f:5e:
a9:10:48:e4:6a:a6:34:08:ad:d7:a6:df:e4:8b:1e:
29:f2:f9:db:c1:cb:8c:13:a1:a2:1d:53:f4:c4:6d:
36:fd:0a:91:19:63:81:0a:04:f1:ed:fc:42:97:04:
db:99:b8:18:6d:78:53:55:65:a1:4a:ce:bb:80:a5:
64:f1:59:91:f7:f0:bb:e3:6f:52:7d:27:73:be:1f:
e1:48:70:a8:21:47:06:77:47:56:98:90:96:c7:05:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:F8:BE:BD:91:54:BF:76:23:3C:40:01:F7:71:F0:FD:54:CF:88
X509v3 Authority Key Identifier:
keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:ac:2b:29:5e:0c:bd:a2:c7:e7:20:00:3e:ea:a4:0c:12:
a3:3c:4b:d2:98:21:b1:65:98:eb:23:33:40:42:ae:cd:8d:f5:
ca:0c:72:62:d1:47:e9:74:20:d9:35:7a:7c:0d:99:4e:dc:5a:
cd:a1:69:d5:94:67:31:e4:d2:86:65:43:6e:4f:8d:62:7b:68:
d7:6e:b8:e0:65:f0:6b:56:f9:8a:80:30:5d:29:63:ed:80:74:
9a:36:fe:19:10:fe:4a:c7:9f:59:77:82:93:0f:b6:43:21:70:
92:e4:bd:d8:07:a2:a2:0e:bd:fd:03:3e:28:37:e9:64:66:31:
df:3a:f8:2e:7d:21:cd:eb:b8:41:4b:b6:7b:c1:4d:92:16:28:
06:63:32:63:d6:37:ff:70:eb:7e:f5:3b:6e:36:87:01:5a:db:
6f:05:14:b9:38:93:ca:5d:82:50:5f:60:a3:4b:16:84:59:e6:
17:52:54:94:84:66:08:ee:85:90:c1:fd:c5:89:76:51:26:bf:
2a:ee:d2:72:a7:cb:18:28:bb:f5:eb:66:55:14:dd:7e:0f:cc:
02:e0:6d:92:cc:f3:b7:d0:96:cf:d5:6a:8b:00:ca:82:47:55:
9b:72:6d:b9:e8:e5:66:49:88:20:11:72:93:35:eb:67:84:f9:
46:18:24:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE
OEE0OUQ4NEUwHhcNMjYwNDE3MDExOTUwWhcNMjYwNDI0MDExOTUwWjAYMRYwFAYD
VQQDEw02OWUxOGFiNy0xZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooaK9ksGV9SMz0mXb3mh+/UyTWi4b5/vLE7RvxzKLaQajhkXGQDS0spcPVo7
4eP5qrGIs7f5RbLdQzSdOpW4VCeHR1l0r076nOwp8li55jML99NwFxAFpZ3R2fMq
IwiTqrFbsG0TI1E/6L8ileRPhhIB7FjP7fpEarV3L4cxNr1QsWKiA3jVnewCv/za
53LD1j9f9NyUefD7lUoroYQNrs6AL16pEEjkaqY0CK3Xpt/kix4p8vnbwcuME6Gi
HVP0xG02/QqRGWOBCgTx7fxClwTbmbgYbXhTVWWhSs67gKVk8VmR9/C7429SfSdz
vh/hSHCoIUcGd0dWmJCWxwUucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxp+L69
kVS/diM8QAH3cfD9VM+IMB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz
RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY
MjlodVlyRXBxWlRZcEoyRTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQqsKyleDL2ix+cgAD7qpAwSozxL0pghsWWY6yMzQEKuzY31ygxyYtFH6XQg
2TV6fA2ZTtxazaFp1ZRnMeTShmVDbk+NYnto12644GXwa1b5ioAwXSlj7YB0mjb+
GRD+SsefWXeCkw+2QyFwkuS92Aeiog69/QM+KDfpZGYx3zr4Ln0hzeu4QUu2e8FN
khYoBmMyY9Y3/3DrfvU7bjaHAVrbbwUUuTiTyl2CUF9go0sWhFnmF1JUlIRmCO6F
kMH9xYl2USa/Ku7ScqfLGCi79etmVRTdfg/MAuBtkszzt9CWz9VqiwDKgkdVm3Jt
uejlZkmIIBFykzXrZ4T5RhgkxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:06 2026 by rpki-client