
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier: kaYmMt+oUrsrVhs0e4DsiLyjyO5A3DxEOYBt9c1k8Zo=
Subject key identifier: C7:49:7B:9D:8C:3D:3F:F7:00:15:ED:0C:E4:62:26:EE:EA:E8:D4:FE
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number: 10
Signing time: Sun 01 Mar 2026 10:36:01 +0000
Manifest this update: Sun 01 Mar 2026 10:36:01 +0000
Manifest next update: Sun 08 Mar 2026 10:36:01 +0000
Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: 6PT2+wSAKxDYkJQlX4Ub8CGbTR/514mz/AVxE7RXJeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Validity
Not Before: Mar 1 10:36:01 2026 GMT
Not After : Mar 8 10:36:01 2026 GMT
Subject: CN=69a41691-4ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:ca:17:1c:8a:63:b2:19:ea:04:10:b7:53:
98:04:94:6e:42:e6:4f:07:1c:16:4d:ed:d0:1c:15:
3c:f6:8a:d1:27:83:30:9e:a6:66:a7:69:f2:fc:64:
3a:0b:3c:8f:89:1a:de:1f:0e:5c:1b:22:19:bc:86:
d0:20:fd:88:40:8f:c9:74:d9:26:a9:5e:ca:dd:69:
e2:5a:d4:0d:a3:f5:ac:43:d3:bc:ec:34:f1:e7:7c:
1e:33:6d:17:48:74:51:c2:f0:a0:b9:18:13:6c:92:
0c:71:a9:ef:3f:c2:2b:f5:dd:7c:49:50:a9:3f:98:
28:c7:ba:63:27:e5:94:33:c2:de:29:51:aa:10:b4:
47:b2:a7:7e:0f:1b:6e:a0:52:36:8f:70:bb:a0:74:
cf:02:3a:63:1c:bf:22:6e:97:44:4f:50:a4:92:63:
a3:b3:e0:a3:3d:2d:28:2f:bf:85:7e:65:ae:75:b9:
e0:3f:22:47:b4:a9:2a:72:61:84:8b:f7:57:f6:c7:
77:b7:bc:b3:64:0f:d0:79:a7:04:1a:09:57:2b:5e:
dc:72:c4:0d:17:76:ba:c7:be:4c:53:41:1a:b0:d4:
f4:3a:98:02:f1:ac:b7:f4:ae:1c:20:b7:a5:b7:95:
69:cf:90:3c:f0:5b:c6:52:f0:1b:2d:df:05:e9:08:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:7B:9D:8C:3D:3F:F7:00:15:ED:0C:E4:62:26:EE:EA:E8:D4:FE
X509v3 Authority Key Identifier:
keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:94:7d:7d:62:56:95:c9:ed:9f:92:36:db:e0:82:ca:50:
7c:64:c9:ab:9a:04:af:e9:0c:0b:47:4c:fa:00:b8:75:cf:87:
c7:b0:f1:60:81:8b:0a:54:8f:e2:f5:29:31:5a:0c:a6:67:51:
f5:69:6c:f2:dd:9f:d6:64:ca:25:2f:3b:51:b5:64:65:51:94:
fb:a0:4c:db:3f:de:59:b5:b4:cd:3b:b1:9f:4c:e6:0a:40:34:
4b:9a:f4:e7:1b:38:32:94:5f:24:d1:52:46:77:7e:eb:86:7d:
fa:37:be:5f:74:2f:a6:35:4c:0b:68:0f:9f:e8:eb:fb:41:c6:
30:be:dc:0b:1b:a0:4b:d4:b8:74:f8:8c:6b:e9:a9:e1:a4:90:
e1:56:8b:88:f1:88:81:ed:bb:08:30:36:be:13:22:ec:8c:e4:
e9:3a:33:ab:4c:7f:b0:b7:41:8f:50:74:38:34:0c:d0:33:db:
9e:42:b5:18:c6:cd:37:e2:f1:37:b4:30:12:91:84:75:c6:a6:
db:a7:e0:10:51:6a:d2:0c:04:23:ae:12:83:da:60:a4:b2:66:
6a:99:ad:d5:ee:e0:07:28:e6:3f:ae:83:cd:19:e1:ce:ee:c0:
dc:09:9f:80:db:5f:c9:fa:3f:aa:da:8e:5f:f4:8b:e7:33:98:
88:6e:ce:47
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODA2NDExMC8GA1UEBRMoMDJGQjQwRjVGMzRDRjJFNTdDMjE0RjBDRDcxNDFCNEQ4
REE0MkI2QjAeFw0yNjAzMDExMDM2MDFaFw0yNjAzMDgxMDM2MDFaMBgxFjAUBgNV
BAMTDTY5YTQxNjkxLTRlZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVzsoXHIpjshnqBBC3U5gElG5C5k8HHBZN7dAcFTz2itEngzCepmanafL8ZDoL
PI+JGt4fDlwbIhm8htAg/YhAj8l02SapXsrdaeJa1A2j9axD07zsNPHnfB4zbRdI
dFHC8KC5GBNskgxxqe8/wiv13XxJUKk/mCjHumMn5ZQzwt4pUaoQtEeyp34PG26g
UjaPcLugdM8COmMcvyJul0RPUKSSY6Oz4KM9LSgvv4V+Za51ueA/Ike0qSpyYYSL
91f2x3e3vLNkD9B5pwQaCVcrXtxyxA0XdrrHvkxTQRqw1PQ6mALxrLf0rhwgt6W3
lWnPkDzwW8ZS8Bst3wXpCM5LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx0l7nYw9
P/cAFe0M5GIm7uro1P4wHwYDVR0jBBgwFoAUAvtA9fNM8uV8IU8M1xQbTY2kK2sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MDY0L0YwQUY4NUU0MDI0
NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVWOElVOE0xeFFiVFkya0sy
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXZ0QTlmTk04dVY4SVU4TTF4UWJUWTJrSzJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
MDY0L0YwQUY4NUU0MDI0NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVW
OElVOE0xeFFiVFkya0sycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIBpR9fWJWlcntn5I22+CCylB8ZMmrmgSv6QwLR0z6ALh1z4fHsPFggYsKVI/i
9SkxWgymZ1H1aWzy3Z/WZMolLztRtWRlUZT7oEzbP95ZtbTNO7GfTOYKQDRLmvTn
GzgylF8k0VJGd37rhn36N75fdC+mNUwLaA+f6Ov7QcYwvtwLG6BL1Lh0+Ixr6anh
pJDhVouI8YiB7bsIMDa+EyLsjOTpOjOrTH+wt0GPUHQ4NAzQM9ueQrUYxs034vE3
tDASkYR1xqbbp+AQUWrSDAQjrhKD2mCksmZqma3V7uAHKOY/roPNGeHO7sDcCZ+A
21/J+j+q2o5f9IvnM5iIbs5H
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:47 2026 by rpki-client