
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json)
Hash identifier: Vrd1BkqSww+PvRtKgka326uamW1n7+a28cbCNvS8mrM=
Subject key identifier: C1:4B:04:26:3F:34:DC:2A:A0:EA:42:75:C5:2E:F0:72:9D:C3:73:A4
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
Manifest number: 01BA
Signing time: Sun 01 Mar 2026 23:55:22 +0000
Manifest this update: Sun 01 Mar 2026 23:55:20 +0000
Manifest next update: Sun 08 Mar 2026 23:55:20 +0000
Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: 45qv7vIzgzq58EcN4NpD2fCDvvw0IWQDglhO/K0IHwo=)
2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: m9fdpbDTR93o1zzYBL+SbEGylXvjw7lehcZZpxx/N4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Validity
Not Before: Mar 1 23:55:20 2026 GMT
Not After : Mar 8 23:55:20 2026 GMT
Subject: CN=69a4d1e9-fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:a7:40:ea:cf:e3:ee:8e:35:c4:d8:57:f3:
f2:de:e5:3f:84:8f:e6:4d:2e:f7:e9:eb:74:7c:83:
df:ff:84:82:49:46:90:39:18:b4:7e:28:53:c4:31:
01:42:c7:8c:5a:6d:eb:74:59:a5:71:5d:5c:99:3c:
8f:15:34:69:e8:39:80:9a:95:b4:c0:bd:32:43:95:
22:fe:ed:97:49:27:c9:5b:06:82:76:2d:bb:d6:1e:
8c:7a:8a:b2:71:8f:ad:fa:34:d1:c8:90:ab:c4:ad:
aa:84:e9:44:eb:57:33:d9:62:52:db:5b:1b:cd:a3:
d5:77:83:a7:df:15:0f:f5:ec:b8:b4:91:9e:b1:12:
b8:bd:59:13:d2:bb:35:f2:65:46:6d:c2:1f:f0:6f:
d2:c1:ec:d0:87:a4:2c:32:16:36:f2:03:11:91:0c:
f9:74:28:29:58:fa:03:7d:8f:57:08:30:3b:7f:f0:
83:f3:11:be:32:c7:c9:d8:3e:fc:21:a0:70:c7:56:
77:ea:62:17:22:65:67:a2:5f:84:e6:7b:01:c8:d2:
c6:1b:f0:2b:b6:9d:9b:cb:7a:52:af:fa:cb:22:c2:
7f:a9:a1:1f:a3:5f:f3:7f:6c:2b:24:15:d6:8b:5f:
5d:3f:07:d1:1a:52:b7:e6:7c:d3:aa:91:96:85:70:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:04:26:3F:34:DC:2A:A0:EA:42:75:C5:2E:F0:72:9D:C3:73:A4
X509v3 Authority Key Identifier:
keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:15:36:37:4f:8d:a7:c9:eb:a0:eb:06:12:32:9c:42:e2:39:
33:db:81:ee:50:83:b4:2c:11:53:0f:e4:1b:8c:61:80:b0:4c:
5c:f9:f1:5b:20:ba:db:74:cc:23:7c:cd:76:7e:26:f3:ad:24:
12:b3:25:08:24:52:ae:1f:90:04:10:e3:d8:67:85:5b:1f:38:
6f:74:b5:57:54:79:9f:03:4b:c6:43:1c:70:92:9e:a2:82:f9:
02:e5:f3:19:31:ab:f9:04:4f:58:be:e3:0f:62:0f:ae:82:a7:
e9:23:5e:b5:33:bd:54:0f:4b:47:77:a4:66:ad:ad:df:e5:6f:
53:bd:df:55:98:d3:32:e1:d7:e8:48:dd:a7:53:b7:f6:e4:fb:
7c:e1:cd:5d:bf:b7:b3:ec:34:20:ce:23:90:12:13:3e:d7:a4:
52:b1:0f:e6:13:4d:46:9c:27:09:35:14:4f:92:56:df:bd:96:
9f:3f:7f:74:02:cd:55:f5:a6:6f:02:1f:9f:25:9a:20:6d:25:
78:62:62:5b:a1:7c:72:a4:c2:8f:4c:8f:ec:e2:09:00:de:3b:
a9:a8:48:b0:53:ae:f6:c5:70:d4:3e:5b:58:70:1b:74:9a:ac:
07:9c:0b:b9:67:7c:c7:b2:11:8b:89:42:39:9f:dd:70:80:84:
a4:97:43:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz
NkQxN0QwNEIwHhcNMjYwMzAxMjM1NTIwWhcNMjYwMzA4MjM1NTIwWjAYMRYwFAYD
VQQDEw02OWE0ZDFlOS1mZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmGnQOrP4+6ONcTYV/Py3uU/hI/mTS736et0fIPf/4SCSUaQORi0fihTxDEB
QseMWm3rdFmlcV1cmTyPFTRp6DmAmpW0wL0yQ5Ui/u2XSSfJWwaCdi271h6Meoqy
cY+t+jTRyJCrxK2qhOlE61cz2WJS21sbzaPVd4On3xUP9ey4tJGesRK4vVkT0rs1
8mVGbcIf8G/SwezQh6QsMhY28gMRkQz5dCgpWPoDfY9XCDA7f/CD8xG+MsfJ2D78
IaBwx1Z36mIXImVnol+E5nsByNLGG/Artp2by3pSr/rLIsJ/qaEfo1/zf2wrJBXW
i19dPwfRGlK35nzTqpGWhXCJfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFLBCY/
NNwqoOpCdcUu8HKdw3OkMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy
NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0
NTh4MmR4bTZaOUEyMFgwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASxU2N0+Np8nroOsGEjKcQuI5M9uB7lCDtCwRUw/kG4xhgLBMXPnxWyC623TM
I3zNdn4m860kErMlCCRSrh+QBBDj2GeFWx84b3S1V1R5nwNLxkMccJKeooL5AuXz
GTGr+QRPWL7jD2IProKn6SNetTO9VA9LR3ekZq2t3+VvU73fVZjTMuHX6Ejdp1O3
9uT7fOHNXb+3s+w0IM4jkBITPtekUrEP5hNNRpwnCTUUT5JW372Wnz9/dALNVfWm
bwIfnyWaIG0leGJiW6F8cqTCj0yP7OIJAN47qahIsFOu9sVw1D5bWHAbdJqsB5wL
uWd8x7IRi4lCOZ/dcICEpJdD+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:04 2026 by rpki-client