
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json)
Hash identifier: yfZw2EmgcKia2Kt+pc604iZxhzmuZ0IeoyDr7otiXxI=
Subject key identifier: 4B:D5:80:01:EC:0B:19:D2:51:DB:7B:A7:CE:EB:14:A0:C2:79:B5:EC
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
Manifest number: 0609
Signing time: Sat 28 Feb 2026 23:27:34 +0000
Manifest this update: Sat 28 Feb 2026 23:27:34 +0000
Manifest next update: Sat 07 Mar 2026 23:27:34 +0000
Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: lnksT/RjgCjHTRFbOreKQixuDE8Rr6UyE6QcCIw/qMQ=)
2: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: lxZNfyimV3NQpo4JPb58fRVzNwdRpPB3SMYQ8hq+yFg=)
3: 368F5308A27311EFA8731822C4F9AE02.roa (hash: Hs0kfftH2V+1dVTeEFiwGCNE8QZlZWgBetHvEQLVaTU=)
4: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: n04Y3sGneIDc0gFY4gtPPq0L4eOtSWnQu7Ei64M+chk=)
5: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: vy2TZeybvxjXMBwVfAEFXRXQN3w7mLcQMjLoNDfW68Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Validity
Not Before: Feb 28 23:27:34 2026 GMT
Not After : Mar 7 23:27:34 2026 GMT
Subject: CN=69a379e6-8e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:e4:86:03:c0:68:42:e3:c1:1c:86:f3:d3:
a9:3f:36:52:db:f4:6f:da:e5:4b:c6:b0:93:45:a9:
57:62:3a:4d:bc:e5:1d:00:36:87:35:6a:fa:71:a2:
c1:e0:e6:4d:97:73:f2:96:fb:a1:f4:83:8c:f0:b1:
44:cd:13:28:ae:6d:42:29:0a:12:90:a3:7a:6c:9c:
3a:85:22:8a:e1:b7:cd:3b:51:1d:74:ba:61:38:55:
e4:4d:f1:d0:89:e8:54:ec:a9:b3:09:82:25:da:45:
fc:81:a4:f8:7c:02:87:7d:be:29:a3:6b:92:a8:80:
1d:62:99:e5:ec:22:dd:ce:3b:c5:3b:5a:e9:3a:4e:
57:69:48:03:de:b4:28:3a:d1:99:c0:3a:32:1a:28:
05:13:d4:df:82:b0:ca:10:bc:3e:e1:a3:06:99:75:
51:34:d9:93:14:06:4b:42:4b:7c:57:ad:b9:52:52:
4d:a2:96:3e:e6:92:2d:1b:a3:05:a3:50:f9:e2:4b:
c8:2f:b8:39:c8:d6:a4:55:c5:d4:db:82:ee:87:da:
53:01:1c:55:a8:9d:be:b4:7d:ff:53:4e:ec:2a:19:
12:94:9c:7c:69:82:70:ce:ef:7a:0f:98:bc:2e:09:
aa:a3:9e:b9:9c:30:bb:cc:1e:cc:70:c6:36:0b:22:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:80:01:EC:0B:19:D2:51:DB:7B:A7:CE:EB:14:A0:C2:79:B5:EC
X509v3 Authority Key Identifier:
keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:41:ae:2d:63:73:c5:9d:04:fe:27:f6:de:6d:cb:c2:83:
f6:24:db:12:c8:ec:50:23:04:01:f8:97:08:d6:02:5a:dc:13:
41:12:f7:d3:17:63:9e:55:82:40:7c:39:a4:9b:b9:f9:4b:98:
15:1b:7a:3b:f7:7b:7a:b2:9d:67:c5:03:7c:f8:f4:aa:1f:32:
36:69:7a:a4:af:3b:14:b4:a6:c8:de:6e:ab:93:6e:57:c1:f4:
77:2d:72:48:c9:7e:17:90:99:03:be:1b:61:ee:9a:40:ec:3e:
6e:32:a9:3f:b3:38:1b:83:0d:10:25:4b:0a:a7:bf:55:a8:50:
f6:a0:de:0a:f6:04:2e:e4:ec:f5:84:87:07:35:05:9e:83:88:
0c:e3:94:a3:a4:68:da:c2:91:d2:ec:24:e4:2a:72:c2:13:c6:
d5:17:e0:29:b7:ec:50:1c:bb:d8:2f:e5:de:01:88:51:d2:b8:
07:ff:8e:58:df:20:8d:5f:86:44:16:b8:64:16:cd:81:5c:26:
1e:38:71:4f:df:31:7b:f9:ca:5b:8d:2c:d5:71:6a:b7:13:e3:
ad:c1:99:64:78:fc:cc:88:96:4b:6d:14:d1:cf:f6:17:d3:f5:
7b:03:e1:b7:7d:94:19:7f:73:e7:a3:7d:fe:4d:a5:eb:29:af:
fe:e1:35:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2
QzRDM0I0N0UwHhcNMjYwMjI4MjMyNzM0WhcNMjYwMzA3MjMyNzM0WjAYMRYwFAYD
VQQDDA02OWEzNzllNi04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDPkhgPAaELjwRyG89OpPzZS2/Rv2uVLxrCTRalXYjpNvOUdADaHNWr6caLB
4OZNl3Pylvuh9IOM8LFEzRMorm1CKQoSkKN6bJw6hSKK4bfNO1EddLphOFXkTfHQ
iehU7KmzCYIl2kX8gaT4fAKHfb4po2uSqIAdYpnl7CLdzjvFO1rpOk5XaUgD3rQo
OtGZwDoyGigFE9TfgrDKELw+4aMGmXVRNNmTFAZLQkt8V625UlJNopY+5pItG6MF
o1D54kvIL7g5yNakVcXU24Luh9pTARxVqJ2+tH3/U07sKhkSlJx8aYJwzu96D5i8
Lgmqo565nDC7zB7McMY2CyKGnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvVgAHs
CxnSUdt7p87rFKDCebXsMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG
RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ
cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcDZBri1jc8WdBP4n9t5ty8KD9iTbEsjsUCMEAfiXCNYCWtwTQRL30xdjnlWC
QHw5pJu5+UuYFRt6O/d7erKdZ8UDfPj0qh8yNml6pK87FLSmyN5uq5NuV8H0dy1y
SMl+F5CZA74bYe6aQOw+bjKpP7M4G4MNECVLCqe/VahQ9qDeCvYELuTs9YSHBzUF
noOIDOOUo6Ro2sKR0uwk5CpywhPG1RfgKbfsUBy72C/l3gGIUdK4B/+OWN8gjV+G
RBa4ZBbNgVwmHjhxT98xe/nKW40s1XFqtxPjrcGZZHj8zIiWS20U0c/2F9P1ewPh
t32UGX9z56N9/k2l6ymv/uE10g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:14 2026 by rpki-client