
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: PXAQQQ6hQ7buJZGTNw+NQ6Ot4/D4n3w9BQE3I7ZWPP0=
Subject key identifier: AD:CA:F4:95:F9:36:AF:3C:0F:AD:F1:32:A5:BE:99:09:FC:93:5D:2D
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0433
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 03FE
Signing time: Fri 17 Apr 2026 00:26:14 +0000
Manifest this update: Fri 17 Apr 2026 00:26:13 +0000
Manifest next update: Fri 24 Apr 2026 00:26:13 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: i5YsXvZjtcrQPSc0iGs+cF3q7qygw+x4iOxPv9Pofss=)
2: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: VbN+n5edtiV3lpqSvWR3nBuTc2AbtPGsLppcFv4e+iE=)
3: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: Ergbmg1vWNlvxJ4XapptircO+YMYpEasJPvQKeLaESU=)
4: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: H55tA7yyGV6m4fFeS15FhsBPX6z+L2HeV9VUsULd9Q4=)
5: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: vZosPve5XEPfEcrx7/RXcywONMO85inn+gfn1MqjGIQ=)
6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: ci4lFYENiNfb5UuSt75Scv3I9VEuzf0ST0vqCXE0cZ0=)
7: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: CEhPrG7NEPUU+dLb+jSC6SEpeViY72/PdQAvCWxM9IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Apr 17 00:26:13 2026 GMT
Not After : Apr 24 00:26:13 2026 GMT
Subject: CN=69e17e26-4ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:80:7e:ea:12:48:b5:92:f0:8c:18:c8:ff:
61:a0:7c:3a:b1:56:14:66:84:37:12:80:58:66:e1:
dd:01:d0:2f:81:09:de:62:36:f9:63:24:a9:de:9c:
b1:2e:54:81:f6:1c:c4:cd:f5:bb:fd:82:af:c0:36:
84:86:ad:a7:9f:71:93:10:6b:8c:11:2d:20:d4:69:
13:ba:c6:6b:e5:83:5a:3a:92:1a:1d:71:b7:11:72:
db:61:2c:30:b2:31:f7:9c:cb:e6:21:4a:8c:8a:f3:
3a:a1:35:61:83:2a:70:b8:2a:c6:fe:58:8f:b2:d1:
a3:8c:dd:1d:f5:31:00:67:08:ed:c7:8c:41:ff:87:
f0:27:7f:92:12:54:fd:b0:3a:17:8b:5d:b4:40:8d:
f0:0d:90:d2:99:0f:f2:89:60:a3:b9:05:4c:85:1d:
c4:5a:6f:ef:0a:b9:cb:5f:75:b1:9d:d2:07:91:db:
74:a1:4e:06:59:63:9c:8a:fe:ae:87:55:82:05:b8:
e7:e0:3f:90:3d:cc:62:89:7f:b1:c9:89:94:12:61:
65:ac:60:3d:18:bf:a1:11:91:c6:ce:16:69:ca:37:
7f:98:f8:db:02:b4:5d:88:fb:ff:d5:f8:8e:72:d0:
cc:16:e6:d3:59:1d:f7:9f:89:a5:f5:f6:85:84:a8:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:F4:95:F9:36:AF:3C:0F:AD:F1:32:A5:BE:99:09:FC:93:5D:2D
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:91:24:cf:2d:41:d7:7e:b1:b8:b2:42:45:70:bc:e0:c1:
20:fe:9e:ad:6f:29:50:ca:41:2d:2c:a7:3d:71:e0:18:43:62:
43:82:82:de:53:c1:3f:97:a1:38:c4:fe:b8:9b:bb:4a:5c:de:
25:75:9e:04:5f:41:85:37:77:f1:56:2e:b0:35:08:0f:d6:e8:
91:11:d2:4d:57:16:ec:ee:89:6e:83:1a:0c:e6:a6:e8:45:8a:
44:bc:1a:fe:24:a2:8e:67:48:fd:23:32:03:f0:bb:56:72:fd:
13:91:18:62:24:ee:ba:b0:72:f0:d6:c0:a9:59:4f:10:6e:41:
a9:21:12:0b:d7:62:e5:a1:23:a7:4d:d7:49:f1:12:0d:68:1a:
44:b2:dd:a0:9d:ac:88:e0:f4:87:62:32:e6:5c:cf:80:a0:fa:
23:8c:61:44:81:e4:80:81:47:46:fe:e2:ad:b2:0c:62:fe:b3:
1d:67:7e:c2:50:bd:1a:cf:e0:c4:d2:68:70:bf:67:c5:c4:ae:
68:ef:29:ba:db:c9:89:e5:1c:64:80:8f:6b:54:fc:66:bb:20:
e5:0c:65:af:1b:30:99:28:f2:2c:4f:6f:93:f6:38:77:28:27:
4f:90:43:d9:95:f4:3c:f5:f2:41:99:4c:54:06:2a:3a:85:29:
12:f7:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:19 2026 by rpki-client