
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: vYss+olaupTNnCtHn/8hH3lCZdWB+Fy/Ct5BJEj5KrM=
Subject key identifier: FE:77:57:84:C8:CB:45:DD:E4:BD:6C:1C:11:66:5C:10:1A:B7:33:85
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 197E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 196A
Signing time: Sat 18 Apr 2026 16:20:31 +0000
Manifest this update: Sat 18 Apr 2026 16:20:31 +0000
Manifest next update: Sat 25 Apr 2026 16:20:31 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: pqp6f2acER4NnPtIStdi3T3TFQVsVA+ICgULbxkXgLI=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6526 (0x197e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Apr 18 16:20:31 2026 GMT
Not After : Apr 25 16:20:31 2026 GMT
Subject: CN=69e3af4f-51af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:bc:f2:12:80:92:6b:03:37:c4:a5:3d:f3:
67:66:92:03:3a:d5:23:e6:e6:63:6d:12:c7:e6:02:
aa:69:58:b5:8c:57:53:e3:e2:00:63:20:42:74:b6:
d9:db:86:ab:f2:26:38:36:66:87:04:a2:40:10:38:
2f:5b:6e:22:f7:71:20:48:54:94:b1:aa:bd:88:38:
23:9d:0e:9d:2f:ad:91:30:00:90:e4:de:6b:40:a0:
78:ad:5b:ec:f2:ba:fb:5d:e3:ae:73:b2:8a:77:1d:
5a:b2:0b:25:cf:0a:b5:6f:73:e7:77:8b:48:79:2f:
f2:a5:96:82:cb:fb:76:df:38:fd:0f:64:87:db:70:
93:0a:f3:df:59:a8:79:02:6a:34:85:46:a8:f1:fe:
f3:f1:2f:53:e6:06:5f:8c:5c:d9:c5:8b:c4:c4:6b:
a7:eb:3e:55:2f:a0:3f:f0:38:b5:5c:0d:de:15:d1:
12:36:00:da:88:4e:d3:3d:ed:17:05:7a:37:27:97:
e8:17:01:8b:58:33:e2:8b:ec:ec:d5:57:0a:e4:51:
59:5c:c5:a4:45:2d:b1:3a:a5:60:4b:6d:60:66:ba:
52:78:0f:7b:e4:c2:65:df:e2:9b:b4:79:96:73:4b:
8f:67:62:71:91:5a:12:f9:5c:d6:0e:53:1b:14:5e:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:57:84:C8:CB:45:DD:E4:BD:6C:1C:11:66:5C:10:1A:B7:33:85
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:3b:58:61:ed:33:c6:e1:51:bb:36:14:1c:1a:3e:c7:1b:
94:78:a1:34:7b:78:bd:6d:f3:dd:11:ca:04:1a:36:40:2b:d3:
64:47:3f:c8:8c:a0:89:19:8d:bd:e3:2f:d0:a2:17:1a:bd:d7:
83:81:61:b1:75:bd:d8:71:07:73:02:56:79:96:62:24:8f:c2:
c0:0a:74:47:8c:7d:a4:d7:44:07:c1:ec:21:4a:22:fc:f0:6c:
07:a2:1d:95:8c:f7:1a:d6:d1:7b:16:78:cd:96:2e:c0:63:e0:
27:b2:9b:c0:4e:79:78:bb:c1:e3:19:71:19:a3:5d:79:c3:bb:
80:ce:46:f5:9e:69:18:f8:2f:10:d2:b7:88:51:04:f1:75:eb:
2f:cd:22:57:2f:2f:58:54:a3:9b:b9:8f:2f:f4:fc:06:a4:7a:
a3:2a:5b:a3:3e:ee:97:2c:3e:64:bb:24:c2:c2:a4:86:59:6f:
ac:45:d9:36:96:d8:f5:31:47:46:ef:60:63:9f:19:33:e4:89:
98:aa:dc:15:23:50:95:69:f4:c9:0a:5e:c6:34:7d:e4:32:0d:
59:02:ed:fc:65:0a:91:80:cb:4f:9d:89:d2:eb:66:8a:d6:bf:
c1:14:d6:83:e6:76:ff:29:bb:08:6c:99:e2:8f:ef:88:bf:7f:
21:bf:b3:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1
RTE4RkUxRTIwHhcNMjYwNDE4MTYyMDMxWhcNMjYwNDI1MTYyMDMxWjAYMRYwFAYD
VQQDEw02OWUzYWY0Zi01MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06+88hKAkmsDN8SlPfNnZpIDOtUj5uZjbRLH5gKqaVi1jFdT4+IAYyBCdLbZ
24ar8iY4NmaHBKJAEDgvW24i93EgSFSUsaq9iDgjnQ6dL62RMACQ5N5rQKB4rVvs
8rr7XeOuc7KKdx1asgslzwq1b3Pnd4tIeS/ypZaCy/t23zj9D2SH23CTCvPfWah5
Amo0hUao8f7z8S9T5gZfjFzZxYvExGun6z5VL6A/8Di1XA3eFdESNgDaiE7TPe0X
BXo3J5foFwGLWDPii+zs1VcK5FFZXMWkRS2xOqVgS21gZrpSeA975MJl3+KbtHmW
c0uPZ2JxkVoS+VzWDlMbFF6kWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP53V4TI
y0Xd5L1sHBFmXBAatzOFMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky
RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy
eXpWM1VwZk90VnBlR1A0ZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANLc7WGHtM8bhUbs2FBwaPscblHihNHt4vW3z3RHKBBo2QCvTZEc/yIygiRmN
veMv0KIXGr3Xg4FhsXW92HEHcwJWeZZiJI/CwAp0R4x9pNdEB8HsIUoi/PBsB6Id
lYz3GtbRexZ4zZYuwGPgJ7KbwE55eLvB4xlxGaNdecO7gM5G9Z5pGPgvENK3iFEE
8XXrL80iVy8vWFSjm7mPL/T8BqR6oypboz7ulyw+ZLskwsKkhllvrEXZNpbY9TFH
Ru9gY58ZM+SJmKrcFSNQlWn0yQpexjR95DINWQLt/GUKkYDLT52J0utmita/wRTW
g+Z2/ym7CGyZ4o/viL9/Ib+zQw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:45 2026 by rpki-client