
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: 7KXB2V1vj9yJTLMZGgcKTiDtTN4g7FAn6iDA7mpcZmY=
Subject key identifier: 93:57:A4:D5:79:94:DB:94:B9:A0:DF:A6:E2:AF:8B:7C:36:34:EF:F7
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 025F
Signing time: Mon 02 Mar 2026 01:13:29 +0000
Manifest this update: Mon 02 Mar 2026 01:13:28 +0000
Manifest next update: Mon 09 Mar 2026 01:13:28 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: /vRCeP3Z58yH1ufpSoBVecU4PUUciP70TNHc6uQGSaA=)
2: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
4: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Mar 2 01:13:28 2026 GMT
Not After : Mar 9 01:13:28 2026 GMT
Subject: CN=69a4e439-f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:80:f6:67:ce:50:e9:07:3f:6d:dd:cf:7c:
1c:65:97:31:08:f8:90:7f:4b:53:58:6d:fb:8a:d9:
c0:e1:d8:f0:d3:ae:ed:5d:7c:97:7d:4d:47:00:87:
c4:aa:ab:d8:38:1d:c5:de:dd:e5:10:c7:4d:9e:01:
fa:7d:9a:26:af:6e:84:26:0f:09:9d:73:be:38:8a:
fc:af:70:a4:a7:5b:c4:ec:27:00:15:05:64:d0:42:
d7:29:01:0e:aa:5d:35:f7:dc:76:33:ef:56:61:e5:
5a:17:d9:8c:3d:fe:bb:92:ec:36:07:3e:cc:c3:e9:
f0:e7:2c:91:da:60:8d:98:c9:32:63:1e:9c:a4:73:
b8:e2:9c:f8:61:b3:fc:b7:ec:6e:31:dd:4e:a6:1c:
57:eb:6a:9f:2f:cd:39:b3:da:01:86:ad:c0:e0:47:
3a:85:7d:60:0c:bd:51:10:35:43:e8:ac:c4:5f:36:
a5:b6:af:29:42:7d:3f:b4:2a:2a:6f:bc:67:2a:44:
0c:6b:e0:3b:bb:76:f8:b3:0e:7c:11:c4:63:bc:99:
d2:68:83:0a:26:8a:c6:69:a6:dd:a9:12:b1:52:61:
cc:d1:5c:7b:6d:af:0d:b2:ea:31:2e:d8:7e:6f:0d:
b7:80:df:d0:63:35:6a:ba:a9:98:da:13:e4:d9:29:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:A4:D5:79:94:DB:94:B9:A0:DF:A6:E2:AF:8B:7C:36:34:EF:F7
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:a5:c6:9c:1a:13:00:9d:46:6a:94:2a:dd:bb:65:21:c8:
9f:a0:5d:ac:55:78:f2:47:8c:c5:4c:cb:f7:b9:7e:6a:66:43:
8b:ff:12:d5:42:d3:2e:f3:fc:a8:8e:0b:b0:c5:5b:2d:01:64:
73:3c:4d:95:0e:e0:13:4a:45:ad:a7:cc:1d:48:4e:fb:0e:b4:
8b:82:92:d3:b5:8a:56:b7:57:62:7a:86:2d:4c:78:fb:ae:ed:
ce:a7:e0:67:98:ed:12:30:ae:47:ef:d2:21:23:28:76:9e:4f:
a4:e4:b8:e4:8f:84:9a:b9:1e:4e:01:99:1e:ee:9f:5a:88:8b:
42:eb:f1:fb:3c:89:2b:5b:6a:66:81:83:2f:9c:eb:e4:64:94:
2e:a3:85:10:cf:c5:82:f2:69:16:60:6a:4f:20:de:c5:96:78:
ea:e6:cc:3f:41:e2:02:c0:ee:e6:3d:fa:f5:e3:5b:2c:23:05:
28:1c:99:02:d2:55:78:39:d7:92:10:b7:6e:34:ff:b2:58:60:
5f:2d:f6:df:57:ee:43:c9:5f:eb:52:80:4b:d8:bb:f9:80:0f:
b8:8c:d4:dd:9a:ab:7d:4d:10:0d:2c:98:46:5f:87:64:e1:1a:
4e:39:fd:da:3e:8f:51:96:fc:f1:10:67:69:d2:3a:be:ed:59:
fc:ec:34:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjYwMzAyMDExMzI4WhcNMjYwMzA5MDExMzI4WjAYMRYwFAYD
VQQDEw02OWE0ZTQzOS1mMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IeA9mfOUOkHP23dz3wcZZcxCPiQf0tTWG37itnA4djw067tXXyXfU1HAIfE
qqvYOB3F3t3lEMdNngH6fZomr26EJg8JnXO+OIr8r3Ckp1vE7CcAFQVk0ELXKQEO
ql0199x2M+9WYeVaF9mMPf67kuw2Bz7Mw+nw5yyR2mCNmMkyYx6cpHO44pz4YbP8
t+xuMd1OphxX62qfL805s9oBhq3A4Ec6hX1gDL1REDVD6KzEXzaltq8pQn0/tCoq
b7xnKkQMa+A7u3b4sw58EcRjvJnSaIMKJorGaabdqRKxUmHM0Vx7ba8NsuoxLth+
bw23gN/QYzVquqmY2hPk2SmPJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNXpNV5
lNuUuaDfpuKvi3w2NO/3MB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI
UnVhRU8yRW8zU0NjVVNJdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfsalxpwaEwCdRmqUKt27ZSHIn6BdrFV48keMxUzL97l+amZDi/8S1ULTLvP8
qI4LsMVbLQFkczxNlQ7gE0pFrafMHUhO+w60i4KS07WKVrdXYnqGLUx4+67tzqfg
Z5jtEjCuR+/SISModp5PpOS45I+EmrkeTgGZHu6fWoiLQuvx+zyJK1tqZoGDL5zr
5GSULqOFEM/FgvJpFmBqTyDexZZ46ubMP0HiAsDu5j369eNbLCMFKByZAtJVeDnX
khC3bjT/slhgXy3231fuQ8lf61KAS9i7+YAPuIzU3ZqrfU0QDSyYRl+HZOEaTjn9
2j6PUZb88RBnadI6vu1Z/Ow0DA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:53 2026 by rpki-client