
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier: TznXnZSZdhVRZ0jjYC8cPXyUPYjHBZOGLaEvHJ1mzus=
Subject key identifier: CF:97:28:2D:26:C0:5A:28:F7:F7:74:5B:F8:8C:29:28:B9:75:ED:2F
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial: 0353
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number: 0327
Signing time: Sun 01 Mar 2026 02:07:41 +0000
Manifest this update: Sun 01 Mar 2026 02:07:41 +0000
Manifest next update: Sun 08 Mar 2026 02:07:41 +0000
Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: 5sJFBK22tDfiSLX/d3mdoD6nVDtrlNkCE8DE6Hu7CME=)
2: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=)
3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: xvHNzzMV7f1gxQWEGQg7Uu7grR61uCNrb99drLaVCJw=)
4: 6C92164E8E7111F095FEDD1FC4F9AE02.roa (hash: p9Kse7D2GRgFk2ojVpA2GrgFV3dn4x52lP6u7UEBcJM=)
5: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Validity
Not Before: Mar 1 02:07:41 2026 GMT
Not After : Mar 8 02:07:41 2026 GMT
Subject: CN=69a39f6d-a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:64:5a:bb:8a:39:77:16:55:c8:01:a5:33:
29:32:cf:44:76:61:53:88:9e:2e:91:1e:71:41:9c:
87:2b:52:7b:ba:0d:65:37:2f:44:a9:f2:92:12:05:
6c:e4:fa:8e:69:7c:fd:0a:a0:40:22:a0:86:f8:d0:
f8:c9:82:13:84:c7:c1:04:14:a3:44:b2:49:3c:e6:
36:38:da:19:d4:c0:80:f6:d1:14:25:9d:42:df:0e:
94:ce:ab:af:bb:15:1d:08:ac:e0:b0:39:d7:62:97:
5b:e3:1a:17:a6:e4:9a:cc:60:60:78:63:bd:f8:b4:
39:5d:54:8a:77:0e:fc:a1:8f:9e:6f:8e:d3:9f:e1:
f8:85:24:30:ec:86:cc:9c:84:88:96:bd:57:9d:7f:
ed:8b:8d:e2:4b:76:d5:ed:6f:c1:a6:a2:db:a5:20:
c6:c3:22:3a:b9:f5:ca:9f:f4:a9:c8:b7:4c:d9:67:
98:02:17:60:16:cd:37:32:39:9e:ca:69:61:c9:73:
22:a8:99:2e:e4:35:d3:a1:91:60:25:34:d7:d1:9a:
23:3b:55:39:09:3c:a6:19:0d:6b:2f:93:df:f5:d3:
8b:e7:da:f2:46:09:0d:8f:a6:b7:39:c9:ed:61:a9:
74:dd:04:66:3f:0c:91:cb:9f:07:27:6c:0e:f8:c2:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:97:28:2D:26:C0:5A:28:F7:F7:74:5B:F8:8C:29:28:B9:75:ED:2F
X509v3 Authority Key Identifier:
keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:68:c2:26:25:a4:17:74:9a:49:1e:fa:c0:25:5f:98:81:
89:59:24:91:fe:e0:61:ae:14:ca:78:0f:f1:bb:cf:69:7a:37:
79:d5:89:a3:2a:31:3c:16:c8:3b:40:b7:23:1e:de:58:80:09:
5e:03:79:78:a8:b3:26:56:10:4d:f6:30:c6:78:a4:ad:cf:f2:
83:f9:a8:7a:6a:32:cc:57:b3:c0:8e:60:e0:99:6c:fe:6b:56:
f9:a1:38:30:f4:2b:75:6b:97:48:24:a3:19:d1:89:72:f7:4b:
04:88:48:49:2c:c6:5a:d6:e4:b9:a6:e6:d6:09:b6:a4:b5:1f:
5a:05:1f:1e:78:6b:65:4c:21:da:8a:ae:85:32:d3:16:e5:39:
68:2d:5c:84:e3:58:7f:63:04:2a:74:af:30:d0:6c:48:8b:1c:
24:63:8a:c2:9d:57:03:3c:c1:36:d9:f6:72:fa:f9:6c:75:18:
76:2d:0c:76:a3:c4:ef:06:06:95:80:4b:d1:32:80:e4:b4:a5:
18:1d:f7:49:2f:73:66:58:54:94:1f:de:a6:7f:fe:49:11:9d:
35:d0:f5:39:7f:28:c9:82:ad:7c:56:05:ed:f8:ec:cc:37:0c:
74:17:8e:61:f0:60:03:2a:be:12:16:e6:b9:aa:d8:fd:87:a8:
65:d7:b3:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjYwMzAxMDIwNzQxWhcNMjYwMzA4MDIwNzQxWjAYMRYwFAYD
VQQDDA02OWEzOWY2ZC1hNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMFkWruKOXcWVcgBpTMpMs9EdmFTiJ4ukR5xQZyHK1J7ug1lNy9EqfKSEgVs
5PqOaXz9CqBAIqCG+ND4yYIThMfBBBSjRLJJPOY2ONoZ1MCA9tEUJZ1C3w6Uzquv
uxUdCKzgsDnXYpdb4xoXpuSazGBgeGO9+LQ5XVSKdw78oY+eb47Tn+H4hSQw7IbM
nISIlr1XnX/ti43iS3bV7W/BpqLbpSDGwyI6ufXKn/SpyLdM2WeYAhdgFs03Mjme
ymlhyXMiqJku5DXToZFgJTTX0ZojO1U5CTymGQ1rL5Pf9dOL59ryRgkNj6a3Ocnt
Yal03QRmPwyRy58HJ2wO+MK3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+XKC0m
wFoo9/d0W/iMKSi5de0vMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ
Ul93TlQwY0ktZFFVa3hxNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACudowiYlpBd0mkke+sAlX5iBiVkkkf7gYa4UyngP8bvPaXo3edWJoyoxPBbI
O0C3Ix7eWIAJXgN5eKizJlYQTfYwxnikrc/yg/moemoyzFezwI5g4Jls/mtW+aE4
MPQrdWuXSCSjGdGJcvdLBIhISSzGWtbkuabm1gm2pLUfWgUfHnhrZUwh2oquhTLT
FuU5aC1chONYf2MEKnSvMNBsSIscJGOKwp1XAzzBNtn2cvr5bHUYdi0MdqPE7wYG
lYBL0TKA5LSlGB33SS9zZlhUlB/epn/+SRGdNdD1OX8oyYKtfFYF7fjszDcMdBeO
YfBgAyq+EhbmuarY/YeoZdezug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:27 2026 by rpki-client