
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json)
Hash identifier: NbOLP1POQMIaX5AZyoaxFK7vuc4XAwuqj8mjvCiIupI=
Subject key identifier: 4B:76:46:E1:66:E7:5F:BE:B9:49:86:12:EE:4F:A0:C2:3C:AE:CD:8F
Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
Manifest number: 0173
Signing time: Sun 19 Apr 2026 04:22:49 +0000
Manifest this update: Sun 19 Apr 2026 04:22:48 +0000
Manifest next update: Sun 26 Apr 2026 04:22:48 +0000
Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: fv3Q+RZ5dfUEXEQE4qG7NGQXEuQhROijrCRxnCOKidU=)
2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: azgv5HUouBSzeJCqhBiVx7l2DMcjckvftnPv6POqMdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Validity
Not Before: Apr 19 04:22:48 2026 GMT
Not After : Apr 26 04:22:48 2026 GMT
Subject: CN=69e45899-1fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:2d:b5:41:46:ad:30:85:c5:50:6d:30:4c:
0b:09:9f:c2:82:d3:b0:60:6a:b0:8c:ca:90:da:6f:
a9:27:85:f9:7b:3b:d7:52:1d:c9:0b:3c:df:7b:6f:
50:3e:c9:7f:30:af:7c:e8:01:9c:84:04:a0:15:e0:
3a:1e:21:d6:08:9e:d1:ea:86:ed:97:fc:1f:b5:4c:
fd:09:53:b9:87:21:b0:6c:29:41:a7:fd:55:eb:67:
9b:6f:68:ab:0d:17:c8:69:2f:f5:9b:6b:e5:97:cf:
6d:fe:9f:5f:97:74:fe:f2:72:b9:97:98:b6:aa:80:
0a:93:4b:ee:c2:ae:7a:8c:13:00:6b:a9:86:9c:de:
70:d6:d3:d2:6c:29:bb:14:ff:69:cc:9c:63:b6:0f:
1b:1d:28:f9:0b:b5:91:aa:aa:1e:1b:7d:b8:37:e9:
97:b1:5a:5c:aa:62:b5:96:c4:bb:38:d7:17:61:07:
3e:35:bd:35:35:b1:52:fe:f2:39:13:92:5c:26:4a:
cd:e8:13:43:43:a1:48:33:84:90:28:0d:9d:d6:1e:
49:70:b1:45:a7:06:82:77:09:16:36:69:f6:a5:3e:
1b:54:d2:4a:1e:1b:62:90:79:e0:39:d4:1a:10:81:
40:06:cc:80:32:5b:28:ca:d1:f8:8b:71:1d:48:43:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:76:46:E1:66:E7:5F:BE:B9:49:86:12:EE:4F:A0:C2:3C:AE:CD:8F
X509v3 Authority Key Identifier:
keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:cb:20:a2:79:ad:c5:4b:61:fd:16:7d:91:83:3e:d7:29:
a8:7e:c0:06:9b:62:38:d4:ed:2a:9c:69:08:b3:0c:39:fd:ac:
f8:cb:fd:70:4b:26:61:01:8a:f3:3b:9f:3d:28:3c:cb:86:3a:
d6:17:83:a1:ee:67:e8:b8:b1:79:4c:c5:b7:c8:15:d2:af:90:
b7:0c:b9:7d:33:16:27:a0:c0:29:a7:e1:44:d1:b3:c8:e4:41:
20:23:8d:f0:8a:7b:44:c8:bc:b2:4c:ae:62:71:5d:84:94:e1:
e8:51:fd:dc:0b:0e:2c:b5:22:91:18:46:17:9f:86:11:00:bb:
0a:fc:75:50:1b:75:6b:27:7c:13:44:04:48:ca:1c:26:91:13:
9d:71:3b:f4:f0:86:84:1f:cf:96:82:e4:44:14:3d:c0:57:d3:
e1:5f:ad:7e:cb:b2:ed:bb:cc:f5:9b:71:02:e9:1e:6e:f4:5a:
e0:45:cb:6e:76:ab:10:00:df:11:2d:06:fc:2d:28:31:bc:3d:
9f:33:c6:92:d7:05:14:81:13:31:d5:62:2f:53:54:f4:e3:56:
31:81:67:26:38:55:76:54:3c:b1:6b:1b:aa:8d:32:85:2e:03:
b8:ac:3b:e2:4b:a8:8d:0d:7f:6c:b3:0c:67:31:78:9b:6a:14:
e3:de:f8:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky
RTczQTA4OTkwHhcNMjYwNDE5MDQyMjQ4WhcNMjYwNDI2MDQyMjQ4WjAYMRYwFAYD
VQQDEw02OWU0NTg5OS0xZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1AttUFGrTCFxVBtMEwLCZ/CgtOwYGqwjMqQ2m+pJ4X5ezvXUh3JCzzfe29Q
Psl/MK986AGchASgFeA6HiHWCJ7R6obtl/wftUz9CVO5hyGwbClBp/1V62ebb2ir
DRfIaS/1m2vll89t/p9fl3T+8nK5l5i2qoAKk0vuwq56jBMAa6mGnN5w1tPSbCm7
FP9pzJxjtg8bHSj5C7WRqqoeG324N+mXsVpcqmK1lsS7ONcXYQc+Nb01NbFS/vI5
E5JcJkrN6BNDQ6FIM4SQKA2d1h5JcLFFpwaCdwkWNmn2pT4bVNJKHhtikHngOdQa
EIFABsyAMlsoytH4i3EdSEMRSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEt2RuFm
51++uUmGEu5PoMI8rs2PMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2
NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK
WE9wV1hMRjB6UGt1YzZDSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu1/LIKJ5rcVLYf0WfZGDPtcpqH7ABptiONTtKpxpCLMMOf2s+Mv9cEsmYQGK
8zufPSg8y4Y61heDoe5n6LixeUzFt8gV0q+Qtwy5fTMWJ6DAKafhRNGzyORBICON
8Ip7RMi8skyuYnFdhJTh6FH93AsOLLUikRhGF5+GEQC7Cvx1UBt1ayd8E0QESMoc
JpETnXE79PCGhB/PloLkRBQ9wFfT4V+tfsuy7bvM9ZtxAukebvRa4EXLbnarEADf
ES0G/C0oMbw9nzPGktcFFIETMdViL1NU9ONWMYFnJjhVdlQ8sWsbqo0yhS4DuKw7
4kuojQ1/bLMMZzF4m2oU4974dg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:33 2026 by rpki-client