
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier: JT3OUJHkRrdIihtgrieqHPSAVYvDLamHD9feBYTapIc=
Subject key identifier: A6:29:08:19:0E:A1:35:24:1B:C4:FD:96:8E:24:B6:95:7E:E0:4B:E6
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number: 0297
Signing time: Fri 17 Apr 2026 01:24:26 +0000
Manifest this update: Fri 17 Apr 2026 01:24:25 +0000
Manifest next update: Fri 24 Apr 2026 01:24:25 +0000
Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: iaV9x6tkkCB/c/i/oc5clQv4iFo/JYukFMDGDkTWpQk=)
2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: gD3cKaCeij6TV/lz5LfYhJg/3abihcMPlSP3fLdyyRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Validity
Not Before: Apr 17 01:24:25 2026 GMT
Not After : Apr 24 01:24:25 2026 GMT
Subject: CN=69e18bca-3d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:8c:2f:19:69:88:76:da:f3:3a:5d:c0:e3:
92:ec:23:9b:7e:12:1d:86:00:cd:7e:ce:27:de:ce:
ed:43:ab:c0:17:3b:40:67:65:f1:0b:54:3f:f1:52:
d2:d9:3f:50:02:a4:b3:c6:2a:98:ae:3c:82:d4:a3:
89:f3:78:7f:18:ff:99:e0:6f:2f:5e:93:41:ae:06:
0d:4c:40:96:80:9c:66:df:5d:ed:9a:7b:61:03:98:
2a:f3:e0:2a:18:0a:50:8e:35:b6:5f:7c:b6:89:8f:
4f:c5:e4:30:3c:b6:9f:4c:27:53:79:78:c7:6b:a9:
af:07:78:b9:f8:6c:ca:f0:cd:de:27:e8:d2:99:5c:
c7:86:83:eb:49:92:18:af:65:cd:cf:01:f0:44:cd:
f8:b0:92:d4:70:dc:07:f5:cf:0d:ff:32:c9:fe:ea:
9d:ee:25:a8:17:7c:62:cc:e3:cb:ff:12:56:16:02:
ff:5a:3e:b7:93:3f:f8:df:9f:65:c9:f6:15:cf:1c:
d7:72:31:9a:1f:19:a1:8d:e4:1c:52:7c:50:0c:20:
cf:df:cd:44:8c:3a:e5:66:77:51:0e:4a:8b:94:8b:
f0:5c:1f:92:ee:8d:a8:6f:1d:34:55:05:87:7b:46:
bb:48:1d:95:25:23:a6:b8:ca:ef:84:50:10:9d:80:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:08:19:0E:A1:35:24:1B:C4:FD:96:8E:24:B6:95:7E:E0:4B:E6
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c5:83:bd:96:a5:34:fe:ca:68:92:87:80:6c:34:4a:4e:97:
17:1a:ac:c9:8f:59:f7:d0:62:f7:c6:b8:6e:c8:a8:b0:46:18:
20:48:f1:8c:d8:2c:c0:1d:a4:0b:30:b4:9c:a2:eb:01:c3:4f:
8d:26:7f:64:17:4a:ae:12:50:40:a1:8c:30:e2:44:49:8d:70:
dd:16:1b:bf:34:44:15:da:d4:42:d2:cd:ce:ae:20:0d:30:5b:
d2:b3:f1:08:ea:f3:57:78:e7:8f:b5:a2:60:7a:81:b4:58:31:
3d:4c:d2:23:64:3a:9f:8b:09:3f:a3:a0:0e:b8:3a:3b:32:cb:
09:a8:f8:89:0c:30:2b:63:38:11:b9:70:1f:34:0d:72:b3:8e:
b0:2a:23:8f:75:4c:e3:9a:97:18:ec:3c:bb:50:c4:20:66:e4:
b9:fc:d3:44:0c:88:02:f1:9a:78:af:2c:45:27:76:5d:4b:c4:
92:97:c4:c6:89:22:70:67:c5:e8:0a:32:a6:a2:ae:63:53:67:
39:27:c3:f0:1f:f6:2b:d6:ab:1f:f6:24:fc:5f:d2:7b:72:c8:
96:47:fa:c1:83:c9:fd:5b:a9:3f:d7:62:3c:d7:8f:15:7d:d7:
5f:dd:63:5d:24:c2:72:30:bf:d7:68:78:07:a9:01:6c:4f:db:
cb:9b:3e:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx
NURBNzRENjcwHhcNMjYwNDE3MDEyNDI1WhcNMjYwNDI0MDEyNDI1WjAYMRYwFAYD
VQQDEw02OWUxOGJjYS0zZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKeMLxlpiHba8zpdwOOS7CObfhIdhgDNfs4n3s7tQ6vAFztAZ2XxC1Q/8VLS
2T9QAqSzxiqYrjyC1KOJ83h/GP+Z4G8vXpNBrgYNTECWgJxm313tmnthA5gq8+Aq
GApQjjW2X3y2iY9PxeQwPLafTCdTeXjHa6mvB3i5+GzK8M3eJ+jSmVzHhoPrSZIY
r2XNzwHwRM34sJLUcNwH9c8N/zLJ/uqd7iWoF3xizOPL/xJWFgL/Wj63kz/4359l
yfYVzxzXcjGaHxmhjeQcUnxQDCDP381EjDrlZndRDkqLlIvwXB+S7o2obx00VQWH
e0a7SB2VJSOmuMrvhFAQnYA18QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYpCBkO
oTUkG8T9lo4ktpV+4EvmMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy
OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo
TW02MXpia0xHR0VWMm5UV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnMWDvZalNP7KaJKHgGw0Sk6XFxqsyY9Z99Bi98a4bsiosEYYIEjxjNgswB2k
CzC0nKLrAcNPjSZ/ZBdKrhJQQKGMMOJESY1w3RYbvzREFdrUQtLNzq4gDTBb0rPx
COrzV3jnj7WiYHqBtFgxPUzSI2Q6n4sJP6OgDrg6OzLLCaj4iQwwK2M4EblwHzQN
crOOsCojj3VM45qXGOw8u1DEIGbkufzTRAyIAvGaeK8sRSd2XUvEkpfExokicGfF
6AoypqKuY1NnOSfD8B/2K9arH/Yk/F/Se3LIlkf6wYPJ/VupP9diPNePFX3XX91j
XSTCcjC/12h4B6kBbE/by5s+mQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:59 2026 by rpki-client