
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier: 9yb7THWreKlGz4XpthF7qBrcyMXwIVEt+AIuLCxsQ+E=
Subject key identifier: 0A:5E:EB:BD:64:3E:49:2E:36:5E:F3:CF:DE:BF:C3:76:79:B4:9F:4C
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial: 0C9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number: 0C94
Signing time: Mon 02 Mar 2026 18:27:21 +0000
Manifest this update: Mon 02 Mar 2026 18:27:21 +0000
Manifest next update: Mon 09 Mar 2026 18:27:21 +0000
Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: FoIL2zqEucwj9SwIb8ZUhsqKfrTQpA4dMGM5Xn0JtOw=)
2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 0Hmli8aWk0dgV3lUCCWGP1GJukUHiPUwNOV3a1obzec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Validity
Not Before: Mar 2 18:27:21 2026 GMT
Not After : Mar 9 18:27:21 2026 GMT
Subject: CN=69a5d689-73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:a3:0a:9b:59:06:e1:14:54:96:90:cc:22:
42:83:46:59:ef:e3:27:ce:b8:4e:72:b7:23:9f:e4:
2a:2d:ac:0f:6c:fb:89:ea:94:bf:b3:c9:95:55:79:
fd:22:da:48:18:10:db:04:ee:cc:93:9f:84:23:db:
86:06:ad:4d:76:6e:68:4a:48:67:b4:cd:ad:63:f3:
67:29:ab:11:f5:d2:f9:ef:21:ff:b6:c6:d7:4a:33:
99:6a:be:88:c7:99:b9:83:6e:1a:b8:20:5a:d3:e1:
32:ff:35:1d:eb:d6:e0:55:c7:e5:75:81:1a:2b:bf:
ec:7a:26:60:f0:03:33:45:29:d6:47:b5:bf:e5:bc:
e6:eb:b6:5c:ba:85:b1:cc:2f:c0:5f:1c:4d:99:e7:
c2:b0:96:bb:7a:9c:83:2f:3b:fa:f8:4a:c8:e1:4b:
d0:17:c9:5b:60:3b:17:e1:91:8b:1a:f5:63:db:05:
c8:dc:53:79:5a:d5:e6:d4:45:7d:15:e6:43:e4:15:
8a:bf:f0:55:dd:03:4e:ac:20:80:b8:31:61:dd:7f:
75:c4:77:af:e2:21:9b:b5:a8:4a:6b:15:ca:f2:11:
44:69:fa:72:ca:d8:87:69:e1:87:ee:b0:af:9a:b3:
cc:ce:d4:ca:4d:bc:9c:1f:62:3f:be:94:2d:ab:06:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:EB:BD:64:3E:49:2E:36:5E:F3:CF:DE:BF:C3:76:79:B4:9F:4C
X509v3 Authority Key Identifier:
keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:24:13:a1:33:db:62:58:2e:91:54:de:a1:d4:66:29:ef:73:
90:dd:01:a2:5c:f9:bd:30:c8:03:6d:17:26:02:aa:a3:f3:a7:
95:d9:ba:f1:a9:35:08:e7:3d:4f:38:4c:58:23:f5:72:65:19:
af:b3:ba:d4:67:55:9f:a8:2e:a6:dd:63:08:f0:4d:c0:92:8b:
cb:7e:8c:5c:6f:4e:f6:5e:d3:2c:a7:5f:c4:ad:87:e4:06:a4:
20:b8:d2:5c:f8:3d:8c:c1:62:8c:67:84:92:92:57:6b:41:cc:
24:44:a3:69:59:06:36:0f:07:bb:f7:a7:42:70:29:36:81:a1:
41:18:7a:71:be:b5:be:7a:b0:2b:26:44:39:3c:2b:13:de:b5:
27:34:06:3a:82:0d:7c:68:24:1f:bf:b4:5e:2f:48:e7:86:6d:
0b:b0:2d:81:69:90:e6:57:c2:7d:2e:8c:13:a0:bf:0c:5a:e8:
6c:d7:aa:df:cc:77:91:d7:f2:43:04:f5:59:56:05:9a:3a:d4:
a9:01:ad:42:ef:75:dd:58:2f:41:6e:94:a7:10:7f:fd:c6:f9:
3c:f6:42:91:1c:79:28:38:67:d4:0d:26:80:2b:30:6d:11:8b:
3b:62:14:70:65:96:e2:d3:8b:f5:85:19:dc:cf:93:ee:0d:7e:
96:61:69:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4
QzRGM0M3NEUwHhcNMjYwMzAyMTgyNzIxWhcNMjYwMzA5MTgyNzIxWjAYMRYwFAYD
VQQDEw02OWE1ZDY4OS03M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4v2jCptZBuEUVJaQzCJCg0ZZ7+MnzrhOcrcjn+QqLawPbPuJ6pS/s8mVVXn9
ItpIGBDbBO7Mk5+EI9uGBq1Ndm5oSkhntM2tY/NnKasR9dL57yH/tsbXSjOZar6I
x5m5g24auCBa0+Ey/zUd69bgVcfldYEaK7/seiZg8AMzRSnWR7W/5bzm67ZcuoWx
zC/AXxxNmefCsJa7epyDLzv6+ErI4UvQF8lbYDsX4ZGLGvVj2wXI3FN5WtXm1EV9
FeZD5BWKv/BV3QNOrCCAuDFh3X91xHev4iGbtahKaxXK8hFEafpyytiHaeGH7rCv
mrPMztTKTbycH2I/vpQtqwZINwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFApe671k
PkkuNl7zz96/w3Z5tJ9MMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx
NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ
cTZNWjJyckwzcVNNVHp4MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsiQToTPbYlgukVTeodRmKe9zkN0Bolz5vTDIA20XJgKqo/Onldm68ak1COc9
TzhMWCP1cmUZr7O61GdVn6gupt1jCPBNwJKLy36MXG9O9l7TLKdfxK2H5AakILjS
XPg9jMFijGeEkpJXa0HMJESjaVkGNg8Hu/enQnApNoGhQRh6cb61vnqwKyZEOTwr
E961JzQGOoINfGgkH7+0Xi9I54ZtC7AtgWmQ5lfCfS6ME6C/DFrobNeq38x3kdfy
QwT1WVYFmjrUqQGtQu913VgvQW6UpxB//cb5PPZCkRx5KDhn1A0mgCswbRGLO2IU
cGWW4tOL9YUZ3M+T7g1+lmFp4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:54 2026 by rpki-client