
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier: k4GKBo46NIe4ecd/JFfajYXukCMJ/7WXWyxXDCquTys=
Subject key identifier: 0C:F5:BD:69:DB:46:6F:68:56:EE:B6:1F:E3:80:B5:6D:63:00:8E:39
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial: 0CB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number: 0CAC
Signing time: Sat 18 Apr 2026 18:23:08 +0000
Manifest this update: Sat 18 Apr 2026 18:23:08 +0000
Manifest next update: Sat 25 Apr 2026 18:23:08 +0000
Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: POomIimpzD8OtfN2AHW2yY0V5o3GWcDs58xMCD//j7k=)
2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 0Hmli8aWk0dgV3lUCCWGP1GJukUHiPUwNOV3a1obzec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Validity
Not Before: Apr 18 18:23:08 2026 GMT
Not After : Apr 25 18:23:08 2026 GMT
Subject: CN=69e3cc0c-dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:a6:4d:6a:e8:bc:85:8e:f5:de:7a:47:66:
82:03:b7:05:61:dc:eb:54:85:b4:57:05:62:d1:5c:
17:c2:cb:be:45:53:0d:0a:0b:95:2a:66:b4:a0:ac:
d8:ed:1b:90:c8:22:c7:81:53:0b:22:82:f8:f7:bd:
20:79:96:b7:e5:00:5f:81:fc:30:46:c6:bf:82:27:
e2:d1:f2:f7:7c:52:b0:ef:9c:5c:8a:92:24:3a:8f:
01:7d:22:eb:4a:a5:0f:10:87:4e:d7:7d:ae:58:3e:
91:12:a7:b6:d5:da:a1:b4:f4:73:2b:70:e4:f7:6f:
9c:a7:a1:6b:a6:a0:a5:fd:d5:d1:26:99:6d:cb:08:
5f:ec:d9:4b:7c:79:ea:7e:f6:bb:d2:9d:ea:f2:f5:
7a:81:48:a9:55:84:6e:de:b5:44:5a:9b:14:43:69:
42:b6:00:24:c8:b5:d8:ed:24:f3:bc:75:00:e3:d2:
ff:2f:13:70:65:b0:2e:77:93:65:10:73:da:14:1a:
4e:37:f3:0b:83:22:85:95:22:7c:8f:8f:8e:f7:9b:
f6:3b:75:68:7b:2a:0a:3a:73:f7:0d:ad:7e:27:41:
0f:1c:36:f4:a1:52:fc:79:a9:b5:e6:41:f0:bc:ed:
c2:21:5d:14:75:90:59:62:6b:eb:41:38:8e:06:2f:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:BD:69:DB:46:6F:68:56:EE:B6:1F:E3:80:B5:6D:63:00:8E:39
X509v3 Authority Key Identifier:
keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:91:fd:b0:34:45:6a:4e:96:1e:6f:d8:b3:e9:54:70:1b:
a4:42:eb:52:e5:34:98:43:5a:ec:0e:20:50:80:db:99:35:a5:
48:5b:60:a7:bf:b6:f4:3a:eb:cf:2e:38:cc:12:43:50:05:9b:
a0:2b:c6:e4:6d:b9:17:5c:7c:f3:ed:f2:5f:3b:95:ba:f1:b0:
a0:13:bb:9b:f4:bc:fe:df:d3:95:62:60:cc:8a:ca:1f:8c:9f:
64:67:35:c7:c5:94:80:9d:1c:89:f9:8c:9c:91:75:ee:38:65:
4f:f8:cf:dc:af:d2:97:5b:5e:d7:36:f3:1f:1a:e3:81:fb:d4:
0f:bf:46:33:5b:45:24:31:f3:2a:0f:7a:a7:e2:37:54:4d:73:
98:d7:69:2f:dd:67:1e:3f:b3:f0:50:90:c3:97:77:10:ac:27:
d7:81:c9:03:08:2c:83:f0:df:de:fe:3a:93:c7:67:39:3c:07:
e4:0d:b1:c5:31:d3:00:8a:dd:18:66:e7:c5:59:08:42:2f:46:
97:c7:30:9e:69:d5:59:6c:cc:18:96:a5:a8:d5:70:d9:8a:a1:
10:fc:ec:6d:8e:05:38:fe:45:5e:02:cd:01:23:3e:d1:84:74:
5f:44:7b:ca:13:9a:87:de:ac:e0:77:f7:4c:4f:b1:fc:e1:12:
58:e2:c8:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4
QzRGM0M3NEUwHhcNMjYwNDE4MTgyMzA4WhcNMjYwNDI1MTgyMzA4WjAYMRYwFAYD
VQQDEw02OWUzY2MwYy1kY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkaCmTWrovIWO9d56R2aCA7cFYdzrVIW0VwVi0VwXwsu+RVMNCguVKma0oKzY
7RuQyCLHgVMLIoL4970geZa35QBfgfwwRsa/gifi0fL3fFKw75xcipIkOo8BfSLr
SqUPEIdO132uWD6REqe21dqhtPRzK3Dk92+cp6FrpqCl/dXRJpltywhf7NlLfHnq
fva70p3q8vV6gUipVYRu3rVEWpsUQ2lCtgAkyLXY7STzvHUA49L/LxNwZbAud5Nl
EHPaFBpON/MLgyKFlSJ8j4+O95v2O3VoeyoKOnP3Da1+J0EPHDb0oVL8eam15kHw
vO3CIV0UdZBZYmvrQTiOBi/zqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz1vWnb
Rm9oVu62H+OAtW1jAI45MB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx
NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ
cTZNWjJyckwzcVNNVHp4MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALTqR/bA0RWpOlh5v2LPpVHAbpELrUuU0mENa7A4gUIDbmTWlSFtgp7+29Drr
zy44zBJDUAWboCvG5G25F1x88+3yXzuVuvGwoBO7m/S8/t/TlWJgzIrKH4yfZGc1
x8WUgJ0cifmMnJF17jhlT/jP3K/Sl1te1zbzHxrjgfvUD79GM1tFJDHzKg96p+I3
VE1zmNdpL91nHj+z8FCQw5d3EKwn14HJAwgsg/Df3v46k8dnOTwH5A2xxTHTAIrd
GGbnxVkIQi9Gl8cwnmnVWWzMGJalqNVw2YqhEPzsbY4FOP5FXgLNASM+0YR0X0R7
yhOah96s4Hf3TE+x/OESWOLI4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:36 2026 by rpki-client