
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: LTTkDMwe2HgKu7anCVxrJ4KPo/pBNpMLhHQCPKEidXA=
Subject key identifier: C4:83:38:C8:24:9C:DD:65:8E:65:67:AD:8F:7C:8E:5A:14:9C:4E:D0
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: F9
Signing time: Wed 15 Apr 2026 05:58:56 +0000
Manifest this update: Wed 15 Apr 2026 05:58:55 +0000
Manifest next update: Wed 22 Apr 2026 05:58:55 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: fP5qmJtGJ9zTE7pqDlNVssqQZdYVlGHzYzMwYdwTjVA=)
2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: 8RwXImvokvSX9GnVWZYfh0skm/ZCGYwhT4s+TGjd6Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Apr 15 05:58:55 2026 GMT
Not After : Apr 22 05:58:55 2026 GMT
Subject: CN=69df291f-4aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:28:7f:91:ca:00:f7:83:5f:4d:05:42:e4:
63:81:57:2c:4a:ac:25:51:85:f4:7b:99:d1:35:19:
32:10:37:04:f1:35:dd:54:17:f0:41:07:32:c5:3f:
51:7c:6f:ff:b7:9c:f8:44:63:a1:59:c7:63:5c:8f:
77:c4:c6:75:45:45:91:fc:b2:2c:48:ac:dd:9a:1b:
6e:20:c6:e1:9e:78:88:46:a8:8c:4d:85:34:ad:6b:
4f:84:ac:cf:d4:ab:c0:ef:51:f1:85:82:bd:a8:cb:
0e:14:35:86:14:da:a9:b8:76:b3:33:7b:2d:fa:03:
38:3e:bb:06:62:1e:08:2c:aa:ba:21:21:d5:6b:ba:
b3:c5:c5:61:e2:dd:43:61:7f:bb:01:46:5a:7c:3e:
7d:be:9b:e2:a2:03:60:5e:f7:5b:4a:e7:e0:d0:9d:
8c:29:85:67:a7:c0:a1:b2:95:a0:d0:0a:85:6f:9d:
e5:f0:73:d0:eb:34:c8:3e:43:a2:cc:0c:e5:40:e9:
82:67:d2:7a:a5:1f:98:f5:04:87:34:52:fb:07:c1:
4c:91:b9:6e:32:1d:bd:9f:34:6f:01:6f:6f:56:b8:
4f:d3:60:61:9f:20:5a:99:15:45:5a:19:74:a2:71:
7f:25:3e:df:b2:04:f1:89:1f:37:27:a3:14:5e:4c:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:38:C8:24:9C:DD:65:8E:65:67:AD:8F:7C:8E:5A:14:9C:4E:D0
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:80:5a:bb:43:77:39:be:55:d7:db:18:0b:c7:8a:7e:00:67:
cf:4d:32:21:dd:6f:bb:ea:2b:71:1d:bb:41:f3:43:e8:e1:6d:
73:9f:70:26:d8:3c:32:b0:13:8d:41:25:43:d5:7d:6e:39:be:
33:40:4a:32:3b:c6:4f:19:8d:b4:41:2b:be:af:79:d9:52:b0:
9c:cb:7c:07:bd:ca:0c:29:fa:91:85:33:30:bb:ee:a5:e6:4c:
0b:d8:fa:a1:bf:8d:70:39:ef:4c:df:43:f4:01:d8:2f:99:cb:
bf:23:7a:37:62:c2:14:e5:4f:20:85:71:52:f9:da:9c:1e:03:
2a:e8:f2:34:03:ee:d6:90:1e:c8:0a:5f:5c:90:ca:ab:4a:49:
a9:ef:2d:ad:c1:e3:2a:de:0b:d1:40:21:fd:42:aa:01:83:64:
d4:20:ce:ee:d2:74:bc:51:8f:ba:f3:34:b9:f2:0c:e7:ed:2f:
68:5e:df:9b:98:cb:3a:31:2d:22:15:77:63:b1:9a:6a:45:c6:
1b:0e:70:66:56:e0:25:08:ed:4c:e0:11:82:db:ef:14:ab:2f:
b1:ab:f9:08:c1:c5:9b:f6:3c:f5:d8:b7:13:c3:d2:77:86:2c:
1a:1a:73:a9:4d:4e:c4:8f:32:95:53:5d:98:68:3a:31:16:0e:
1a:30:cc:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw
QkVFQTQ4RDAwHhcNMjYwNDE1MDU1ODU1WhcNMjYwNDIyMDU1ODU1WjAYMRYwFAYD
VQQDEw02OWRmMjkxZi00YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUUof5HKAPeDX00FQuRjgVcsSqwlUYX0e5nRNRkyEDcE8TXdVBfwQQcyxT9R
fG//t5z4RGOhWcdjXI93xMZ1RUWR/LIsSKzdmhtuIMbhnniIRqiMTYU0rWtPhKzP
1KvA71HxhYK9qMsOFDWGFNqpuHazM3st+gM4PrsGYh4ILKq6ISHVa7qzxcVh4t1D
YX+7AUZafD59vpviogNgXvdbSufg0J2MKYVnp8ChspWg0AqFb53l8HPQ6zTIPkOi
zAzlQOmCZ9J6pR+Y9QSHNFL7B8FMkbluMh29nzRvAW9vVrhP02BhnyBamRVFWhl0
onF/JT7fsgTxiR83J6MUXkzu6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSDOMgk
nN1ljmVnrY98jloUnE7QMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2
c05zTjVsWmZBc2tMN3FTTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS4Bau0N3Ob5V19sYC8eKfgBnz00yId1vu+orcR27QfND6OFtc59wJtg8MrAT
jUElQ9V9bjm+M0BKMjvGTxmNtEErvq952VKwnMt8B73KDCn6kYUzMLvupeZMC9j6
ob+NcDnvTN9D9AHYL5nLvyN6N2LCFOVPIIVxUvnanB4DKujyNAPu1pAeyApfXJDK
q0pJqe8trcHjKt4L0UAh/UKqAYNk1CDO7tJ0vFGPuvM0ufIM5+0vaF7fm5jLOjEt
IhV3Y7GaakXGGw5wZlbgJQjtTOARgtvvFKsvsav5CMHFm/Y89di3E8PSd4YsGhpz
qU1OxI8ylVNdmGg6MRYOGjDMsg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:01 2026 by rpki-client