
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json)
Hash identifier: NPoPmH5DmClasz5rVokwj/zY+aVtNG1s7g58enqiwZw=
Subject key identifier: 9C:29:A5:C3:7F:68:3A:FF:7F:1A:45:BA:F8:9F:71:89:38:D6:41:48
Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B
Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
Manifest number: 0888
Signing time: Sat 28 Feb 2026 20:56:04 +0000
Manifest this update: Sat 28 Feb 2026 20:56:04 +0000
Manifest next update: Sat 07 Mar 2026 20:56:04 +0000
Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: tQQq4MpuKGD6pV7C50NmeIGe3nXyQ/cozwKhExV8mD8=)
2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: s2s36tPsVayQvyzrmiPTLM0ItU8BPdhPyK3m7KjQ7po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl
rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B
Validity
Not Before: Feb 28 20:56:04 2026 GMT
Not After : Mar 7 20:56:04 2026 GMT
Subject: CN=69a35664-f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:c3:99:4d:ba:38:d3:dc:b8:3c:cd:a8:74:
6d:51:a2:c5:77:28:fb:ec:f0:9d:30:fe:e1:a6:9b:
87:01:c3:75:cd:39:85:89:c7:98:f5:17:d0:66:fb:
94:3f:1c:1c:64:c1:e4:2d:c3:fc:3f:d7:d6:53:23:
af:3c:96:1d:c9:4d:13:d7:9a:3c:d8:70:6e:1f:25:
9b:bc:b6:0f:95:8b:d4:ef:5e:26:5f:bf:c3:f3:7c:
8e:2b:b9:fa:66:bb:01:17:c4:41:c2:88:8e:2e:04:
e3:3a:20:d9:19:c9:23:b0:60:93:8c:e4:94:67:08:
f1:72:cf:2a:1a:96:90:1b:1b:4b:c0:f0:e2:c1:26:
da:f5:aa:14:b4:e6:ec:38:f7:32:e0:dd:c0:2f:ea:
d7:96:78:44:3a:bf:09:b7:92:cb:29:ad:a0:18:52:
5a:58:43:d8:91:18:65:07:9c:cd:7b:ff:13:98:a2:
75:3f:7b:ee:3b:67:99:f8:5d:98:e7:64:22:3b:78:
a4:fc:f5:9b:5d:8b:2b:37:d0:a9:de:4a:68:b6:54:
5a:a8:b9:71:3c:fc:a7:3d:dd:52:8d:74:80:3f:40:
9d:1e:d7:66:44:98:13:29:3c:73:68:48:f6:4c:e6:
42:27:62:1d:cb:91:b5:56:bf:8b:b2:65:71:76:6a:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:A5:C3:7F:68:3A:FF:7F:1A:45:BA:F8:9F:71:89:38:D6:41:48
X509v3 Authority Key Identifier:
keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:96:9f:ba:60:0f:58:7f:f5:7c:8f:a8:cc:25:71:f1:7a:7d:
ac:10:b0:80:ab:74:de:f6:fb:09:c2:75:f5:13:3f:97:79:10:
02:e5:9d:ac:d7:dd:56:c2:b8:ab:5b:92:66:66:24:4e:d6:e6:
dd:90:99:64:2e:04:cc:a5:5b:f4:41:e8:f3:2b:0d:11:f5:e9:
63:00:c1:7e:e9:48:19:36:18:a1:e9:0f:e9:64:9f:6b:69:f6:
f7:3e:4d:31:89:47:1e:fd:22:e3:0e:b1:b4:95:82:47:41:44:
49:b2:28:23:7f:b4:30:79:57:74:e9:91:f2:98:2b:70:63:c2:
c4:09:b3:54:7f:95:08:0f:bc:59:cb:a0:8c:c7:d8:65:ff:9a:
2b:4c:49:af:2c:b4:aa:63:e5:23:65:79:41:11:02:4a:bc:86:
6f:3c:90:c1:0b:54:52:23:32:9a:5a:27:25:b5:5f:ae:79:f5:
96:78:0c:4a:a9:77:e5:10:69:cb:dc:af:5e:85:d3:42:db:18:
6e:03:a2:e3:91:ce:df:a4:2b:6f:53:f2:36:ff:16:a9:83:19:
32:57:a5:45:81:ef:25:aa:13:f1:7a:76:d5:2f:2a:c0:ca:69:
56:c2:f2:0b:34:ae:c6:32:44:f5:0f:0d:75:67:05:a1:7a:84:
91:99:40:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4
QkQwMzUyNkIwHhcNMjYwMjI4MjA1NjA0WhcNMjYwMzA3MjA1NjA0WjAYMRYwFAYD
VQQDDA02OWEzNTY2NC1mNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA09TDmU26ONPcuDzNqHRtUaLFdyj77PCdMP7hppuHAcN1zTmFiceY9RfQZvuU
PxwcZMHkLcP8P9fWUyOvPJYdyU0T15o82HBuHyWbvLYPlYvU714mX7/D83yOK7n6
ZrsBF8RBwoiOLgTjOiDZGckjsGCTjOSUZwjxcs8qGpaQGxtLwPDiwSba9aoUtObs
OPcy4N3AL+rXlnhEOr8Jt5LLKa2gGFJaWEPYkRhlB5zNe/8TmKJ1P3vuO2eZ+F2Y
52QiO3ik/PWbXYsrN9Cp3kpotlRaqLlxPPynPd1SjXSAP0CdHtdmRJgTKTxzaEj2
TOZCJ2Idy5G1Vr+LsmVxdmoSdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwppcN/
aDr/fxpFuvifcYk41kFIMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2
RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0
eVU2b1dtTHJqckdMMERVbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJafumAPWH/1fI+ozCVx8Xp9rBCwgKt03vb7CcJ19RM/l3kQAuWdrNfdVsK4
q1uSZmYkTtbm3ZCZZC4EzKVb9EHo8ysNEfXpYwDBfulIGTYYoekP6WSfa2n29z5N
MYlHHv0i4w6xtJWCR0FESbIoI3+0MHlXdOmR8pgrcGPCxAmzVH+VCA+8WcugjMfY
Zf+aK0xJryy0qmPlI2V5QRECSryGbzyQwQtUUiMymlonJbVfrnn1lngMSql35RBp
y9yvXoXTQtsYbgOi45HO36Qrb1PyNv8WqYMZMlelRYHvJaoT8Xp21S8qwMppVsLy
CzSuxjJE9Q8NdWcFoXqEkZlAbg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:09 2026 by rpki-client