
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier: +5ys50bNeiWro1VR4yryBhIgKecmFRF953xD89L+hFk=
Subject key identifier: E5:89:91:39:ED:69:1B:3B:0D:9A:2F:C8:C4:8C:8E:D8:DF:C7:DE:C4
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number: 27
Signing time: Wed 15 Apr 2026 08:23:07 +0000
Manifest this update: Wed 15 Apr 2026 08:23:07 +0000
Manifest next update: Wed 22 Apr 2026 08:23:07 +0000
Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: Ro7uEgz53VNWsEiIvhLnHRIS+P9FoiWx+OAI9PMZlF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Validity
Not Before: Apr 15 08:23:07 2026 GMT
Not After : Apr 22 08:23:07 2026 GMT
Subject: CN=69df4aeb-910a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:85:48:92:f9:00:97:8b:5c:dc:32:b6:0e:
a4:1a:a5:cc:9f:42:6e:4c:f7:da:14:13:4c:cf:e8:
97:9d:89:43:69:74:ef:9a:b2:69:35:f6:07:47:20:
56:a7:53:de:12:fb:36:e0:0d:b4:75:3e:60:ce:e3:
b2:af:e5:23:79:10:e8:aa:cc:99:b2:99:0a:21:1b:
38:4d:e8:a9:b6:38:2f:f6:20:df:fc:81:da:cb:fe:
56:96:d0:6d:29:10:29:54:19:67:32:61:17:6e:70:
61:f9:d5:fe:a1:88:2e:ea:fb:ca:ef:c9:1a:a4:80:
9c:f8:f3:a0:dd:93:1f:ae:5b:55:85:e9:39:15:ae:
2a:a1:b2:49:8c:a2:dc:4b:94:fb:49:41:b8:54:68:
37:74:cb:68:79:c3:fd:97:f7:93:a6:1d:b7:84:11:
3e:f9:08:2a:09:a8:5d:e7:22:30:3d:09:84:d1:51:
39:fa:2c:52:3d:6b:fb:ef:e6:43:16:b9:7a:bd:20:
59:df:91:e1:8b:be:88:f3:08:4c:3b:ac:98:dc:97:
43:00:42:d3:a3:0c:2e:e3:0a:84:eb:3f:85:ea:26:
99:56:f0:ee:6c:f9:ee:f6:3d:ac:da:00:fa:5b:22:
01:48:7e:a8:a3:e1:d2:98:b2:0d:95:03:55:de:38:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:91:39:ED:69:1B:3B:0D:9A:2F:C8:C4:8C:8E:D8:DF:C7:DE:C4
X509v3 Authority Key Identifier:
keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:67:4d:3f:60:13:19:60:9a:1a:b6:20:9b:0b:33:10:5c:80:
72:32:bb:c8:97:71:39:3b:75:39:1f:b0:cd:83:e0:54:53:41:
d3:58:f8:3d:a2:7c:0f:9f:c5:ae:b9:5d:cf:94:e2:b1:d5:d5:
e3:18:a3:07:0d:53:c9:ea:5a:ed:61:61:7a:04:c3:d9:8d:e8:
ce:6a:ae:03:6d:13:38:77:d9:c0:04:e9:5c:77:89:6c:6f:01:
00:ff:25:8f:ab:7f:0c:04:30:66:80:ae:ba:eb:96:cb:a1:e6:
78:87:c6:9e:38:20:7b:a7:38:79:1a:53:db:cb:9d:20:ce:8b:
40:4b:a5:c5:b4:83:5a:40:3e:92:38:9b:50:05:4a:44:9b:8d:
d7:b6:f7:73:ee:88:5c:38:2e:d3:73:db:2c:d2:37:6f:ad:08:
36:00:03:0f:13:f6:43:8d:ea:8e:5d:a7:30:c8:d7:fc:fd:8e:
f3:64:9f:c5:9a:3a:53:cb:f5:58:b5:ce:6c:86:a1:9f:76:a8:
29:d3:56:77:d8:5f:8e:2f:c2:4c:ce:54:d9:5b:af:3f:04:a7:
01:c8:5e:00:53:63:04:01:02:3e:6e:05:3d:0b:33:42:c1:16:
3c:74:85:83:53:86:9a:b6:3b:a7:b7:d8:82:84:6c:76:c8:2d:
b2:b1:22:46
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODA2NDExMC8GA1UEBRMoMDJGQjQwRjVGMzRDRjJFNTdDMjE0RjBDRDcxNDFCNEQ4
REE0MkI2QjAeFw0yNjA0MTUwODIzMDdaFw0yNjA0MjIwODIzMDdaMBgxFjAUBgNV
BAMTDTY5ZGY0YWViLTkxMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9PYVIkvkAl4tc3DK2DqQapcyfQm5M99oUE0zP6JediUNpdO+asmk19gdHIFan
U94S+zbgDbR1PmDO47Kv5SN5EOiqzJmymQohGzhN6Km2OC/2IN/8gdrL/laW0G0p
EClUGWcyYRducGH51f6hiC7q+8rvyRqkgJz486Ddkx+uW1WF6TkVriqhskmMotxL
lPtJQbhUaDd0y2h5w/2X95OmHbeEET75CCoJqF3nIjA9CYTRUTn6LFI9a/vv5kMW
uXq9IFnfkeGLvojzCEw7rJjcl0MAQtOjDC7jCoTrP4XqJplW8O5s+e72PazaAPpb
IgFIfqij4dKYsg2VA1XeOJFhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5YmROe1p
GzsNmi/IxIyO2N/H3sQwHwYDVR0jBBgwFoAUAvtA9fNM8uV8IU8M1xQbTY2kK2sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MDY0L0YwQUY4NUU0MDI0
NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVWOElVOE0xeFFiVFkya0sy
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXZ0QTlmTk04dVY4SVU4TTF4UWJUWTJrSzJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
MDY0L0YwQUY4NUU0MDI0NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVW
OElVOE0xeFFiVFkya0sycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBuZ00/YBMZYJoatiCbCzMQXIByMrvIl3E5O3U5H7DNg+BUU0HTWPg9onwPn8Wu
uV3PlOKx1dXjGKMHDVPJ6lrtYWF6BMPZjejOaq4DbRM4d9nABOlcd4lsbwEA/yWP
q38MBDBmgK6665bLoeZ4h8aeOCB7pzh5GlPby50gzotAS6XFtINaQD6SOJtQBUpE
m43Xtvdz7ohcOC7Tc9ss0jdvrQg2AAMPE/ZDjeqOXacwyNf8/Y7zZJ/FmjpTy/VY
tc5shqGfdqgp01Z32F+OL8JMzlTZW68/BKcByF4AU2MEAQI+bgU9CzNCwRY8dIWD
U4aatjunt9iChGx2yC2ysSJG
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:29 2026 by rpki-client