
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: oLaE6vVZgrgyjm42BvhOOdLm9yU6XMXfyWzus1ZaMUE=
Subject key identifier: 6A:A3:D4:04:74:3D:2F:92:98:31:33:C9:53:54:1D:05:80:F4:A0:E4
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 025D
Signing time: Sun 01 Mar 2026 02:54:27 +0000
Manifest this update: Sun 01 Mar 2026 02:54:27 +0000
Manifest next update: Sun 08 Mar 2026 02:54:27 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: zLWvZyrtqvPF7ZoOdzIwTYvS/FhhzCAZIWJtYdRAFA8=)
2: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: wg6Q4h/v3LMSoNgbZxex/vD8M4kpBo+G/wOM4or/cs4=)
3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: I6jmeK85QWhNrAIYYs7dw4q23XGihItLNS21A6NTDVo=)
4: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: vnWU1mWb+i0E/bntkMY5zIuJ2E9zqlEO5QP5NKRbGKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Mar 1 02:54:27 2026 GMT
Not After : Mar 8 02:54:27 2026 GMT
Subject: CN=69a3aa63-c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:82:9c:90:87:7e:23:ef:38:bd:6e:d2:dd:
33:48:d1:03:cc:1c:a3:56:b0:e7:2b:c2:9d:46:f5:
a5:7e:fe:ab:3d:a3:c5:7b:5e:ab:e9:c2:29:9f:be:
91:6e:ea:85:04:8c:28:1a:1d:e7:ca:55:f6:49:3d:
6f:60:e5:ee:f9:e7:e3:c5:62:18:a8:83:94:39:a1:
54:47:4c:c2:b9:8e:cc:96:f2:56:eb:fb:96:f3:21:
47:59:d4:26:6e:c1:8c:0c:10:57:52:54:19:d6:c3:
9b:26:03:a7:f5:c9:7d:f1:6e:83:be:0a:9e:79:f9:
54:88:f5:7c:87:23:c6:f2:e1:dc:3b:02:a2:76:b8:
ff:dd:9e:73:a2:39:a4:eb:0b:14:3c:de:d0:51:97:
35:b9:d9:fe:4f:93:5a:c8:cf:f4:66:f9:b5:23:0e:
d2:ce:08:9b:f5:46:f3:51:5b:c3:88:29:68:2c:d3:
89:87:fd:61:e3:23:aa:8c:a1:37:11:97:6e:26:d1:
92:36:c3:a1:db:28:65:9f:e3:e4:24:38:1d:5d:12:
80:da:6d:d3:e4:be:e3:7d:9a:22:8d:3c:e5:93:81:
14:07:ab:52:14:58:b3:bc:06:f3:99:63:ba:9e:f5:
b8:df:00:f7:e2:07:54:5e:83:16:3d:30:f5:2c:d9:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:D4:04:74:3D:2F:92:98:31:33:C9:53:54:1D:05:80:F4:A0:E4
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:5c:8e:fb:ed:3e:ef:84:d0:be:8a:c9:77:6f:01:5c:9a:
4e:c5:be:7f:23:f1:30:ac:61:2c:dd:ad:11:9e:09:0c:64:07:
f5:7b:35:24:66:31:a7:07:62:be:47:c2:d4:91:04:2b:b0:7c:
12:5f:d1:a0:cf:b7:98:71:eb:75:d0:09:21:d3:b2:52:e1:3a:
9b:7b:d8:e1:9f:a9:59:a8:71:7f:92:56:ea:bc:52:c6:67:f3:
83:40:f0:b8:b6:14:38:9e:6d:74:3c:2e:e0:09:cc:96:6d:8c:
b7:0c:9b:9b:d7:8d:e5:09:1c:e4:8f:bb:7e:f5:7c:88:f4:86:
39:dc:c0:ff:54:b7:41:43:a6:b3:8d:7a:59:af:10:28:57:4f:
3a:b1:7b:36:2f:3a:5c:38:98:76:9a:0d:02:06:fd:b3:38:cf:
3d:4d:df:2b:26:94:fd:77:ae:ff:d3:6b:e8:0e:07:c4:4f:db:
84:1c:73:1e:9a:67:70:14:5a:89:a5:96:04:28:98:5a:55:d7:
ea:b4:e7:b8:e4:fd:14:3a:df:88:49:26:40:cf:80:6f:7b:ae:
b3:8a:bf:17:a9:74:f4:51:be:06:99:93:dd:e7:f9:24:f4:72:
13:0a:cf:b1:0c:b6:58:81:c5:0a:5a:e6:88:b5:23:87:4d:cc:
9f:e6:85:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjYwMzAxMDI1NDI3WhcNMjYwMzA4MDI1NDI3WjAYMRYwFAYD
VQQDDA02OWEzYWE2My1jOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNuCnJCHfiPvOL1u0t0zSNEDzByjVrDnK8KdRvWlfv6rPaPFe16r6cIpn76R
buqFBIwoGh3nylX2ST1vYOXu+efjxWIYqIOUOaFUR0zCuY7MlvJW6/uW8yFHWdQm
bsGMDBBXUlQZ1sObJgOn9cl98W6DvgqeeflUiPV8hyPG8uHcOwKidrj/3Z5zojmk
6wsUPN7QUZc1udn+T5NayM/0Zvm1Iw7Szgib9UbzUVvDiCloLNOJh/1h4yOqjKE3
EZduJtGSNsOh2yhln+PkJDgdXRKA2m3T5L7jfZoijTzlk4EUB6tSFFizvAbzmWO6
nvW43wD34gdUXoMWPTD1LNkr9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqj1AR0
PS+SmDEzyVNUHQWA9KDkMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI
UnVhRU8yRW8zU0NjVVNJdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVKpcjvvtPu+E0L6KyXdvAVyaTsW+fyPxMKxhLN2tEZ4JDGQH9Xs1JGYxpwdi
vkfC1JEEK7B8El/RoM+3mHHrddAJIdOyUuE6m3vY4Z+pWahxf5JW6rxSxmfzg0Dw
uLYUOJ5tdDwu4AnMlm2Mtwybm9eN5Qkc5I+7fvV8iPSGOdzA/1S3QUOms416Wa8Q
KFdPOrF7Ni86XDiYdpoNAgb9szjPPU3fKyaU/Xeu/9Nr6A4HxE/bhBxzHppncBRa
iaWWBCiYWlXX6rTnuOT9FDrfiEkmQM+Ab3uus4q/F6l09FG+BpmT3ef5JPRyEwrP
sQy2WIHFClrmiLUjh03Mn+aFtQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:51 2026 by rpki-client