
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier: DNqtU2Ldw9I7Zh81ZN8AFgxxiSBYh5uv/+B6hqpoAlg=
Subject key identifier: FB:FF:30:32:BB:52:2C:B5:46:CD:9D:73:CF:34:3D:46:33:C6:DB:A7
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number: 0100
Signing time: Sun 01 Mar 2026 07:13:25 +0000
Manifest this update: Sun 01 Mar 2026 07:13:25 +0000
Manifest next update: Sun 08 Mar 2026 07:13:25 +0000
Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: otn1SQXSb8KGHGXTXZZ8OKcmgmu0zWrpodfQiVOkxYg=)
2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: GgkYKX0rvLLAl9jFjsCJGv7qCn12Qh8j9soV+v0r+iY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Validity
Not Before: Mar 1 07:13:25 2026 GMT
Not After : Mar 8 07:13:25 2026 GMT
Subject: CN=69a3e715-7bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:04:b9:e4:bb:a9:f6:a1:f2:c7:76:f7:88:
83:e2:0b:a1:d6:19:8e:fb:80:57:7c:9a:71:8b:88:
72:8b:11:b6:c2:95:2b:a2:6d:0f:d1:4f:b8:25:d1:
23:8b:20:5d:ba:47:92:3d:82:71:24:94:8d:a9:3a:
1b:aa:95:68:6b:19:23:41:23:c1:c9:97:15:50:5a:
d2:82:01:ec:ad:bd:ce:46:43:31:8c:87:8b:9c:e1:
1e:37:f3:08:c4:ee:05:eb:5e:f9:9a:9f:79:b7:95:
70:65:f5:20:3d:4f:69:66:f1:9b:31:90:7a:f3:8b:
e7:4f:2c:28:1b:ac:fd:36:21:f4:31:9d:d0:c8:05:
ff:6c:ec:5d:ab:41:34:64:06:ce:3d:13:f3:be:e6:
3f:57:ed:22:de:a7:85:5d:5b:7d:c7:9d:0d:06:0d:
7f:88:c2:58:ff:ec:d8:33:4b:fd:7a:54:ca:0b:23:
4e:1f:50:ed:62:19:1a:5d:18:ab:0e:8d:e1:66:73:
2a:a0:01:a4:a9:d2:32:55:61:7c:71:77:2b:62:61:
5e:29:6a:0b:c9:d6:0c:1b:07:6f:70:92:53:4a:3e:
d9:87:04:2a:a4:eb:f7:fe:5e:3c:36:4c:ee:31:e9:
9b:c6:b7:e3:31:70:a6:50:da:af:a8:c5:fc:92:d3:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:30:32:BB:52:2C:B5:46:CD:9D:73:CF:34:3D:46:33:C6:DB:A7
X509v3 Authority Key Identifier:
keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:18:b3:bb:62:8e:4b:cf:a3:13:4d:78:0d:94:6b:91:71:1d:
d1:0e:a6:e5:27:c0:4d:ce:a0:f9:a5:76:76:db:07:23:c0:5d:
02:e7:c6:48:d9:dc:f8:26:18:0f:75:96:bf:d7:2b:be:f2:ec:
4a:4c:85:43:34:11:06:df:0e:9d:ab:1b:bd:39:75:1f:c0:d2:
80:c2:15:57:eb:d0:00:5b:b9:7f:e2:ec:10:cf:e4:9a:30:3e:
7a:1e:5d:77:e0:01:52:d0:54:0e:a9:1a:a5:f5:5f:11:3f:15:
8b:50:fc:42:e0:31:c6:83:d8:38:33:19:75:41:fb:c0:78:1a:
8f:0e:84:a6:59:39:23:7d:75:0e:82:45:2b:36:42:34:75:7a:
1a:1c:ad:64:44:b0:4f:08:8e:92:0a:34:0e:0f:65:88:dd:f1:
f6:e1:f6:70:66:3a:9e:a9:63:67:69:f9:b7:d6:d0:e6:ec:6c:
0f:29:11:ee:06:ef:4d:8f:21:44:92:c7:c7:a5:29:a2:8c:df:
c5:5f:e1:e9:37:7c:1c:51:1a:e1:48:14:39:96:16:5f:9a:1c:
dc:4c:b2:36:e7:55:e7:50:44:e1:76:35:a9:c3:7d:a8:9d:78:
96:e6:cb:f9:b5:a3:86:50:bb:74:3e:02:5e:8e:07:1e:31:e1:
ea:e6:8a:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx
M0Q4QzMxMTMwHhcNMjYwMzAxMDcxMzI1WhcNMjYwMzA4MDcxMzI1WjAYMRYwFAYD
VQQDEw02OWEzZTcxNS03YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlBkEueS7qfah8sd294iD4guh1hmO+4BXfJpxi4hyixG2wpUrom0P0U+4JdEj
iyBdukeSPYJxJJSNqTobqpVoaxkjQSPByZcVUFrSggHsrb3ORkMxjIeLnOEeN/MI
xO4F6175mp95t5VwZfUgPU9pZvGbMZB684vnTywoG6z9NiH0MZ3QyAX/bOxdq0E0
ZAbOPRPzvuY/V+0i3qeFXVt9x50NBg1/iMJY/+zYM0v9elTKCyNOH1DtYhkaXRir
Do3hZnMqoAGkqdIyVWF8cXcrYmFeKWoLydYMGwdvcJJTSj7ZhwQqpOv3/l48Nkzu
MembxrfjMXCmUNqvqMX8ktPVRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv/MDK7
Uiy1Rs2dc880PUYzxtunMB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw
NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND
UHloMlJLUnpYdndUMk1NUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1Bizu2KOS8+jE014DZRrkXEd0Q6m5SfATc6g+aV2dtsHI8BdAufGSNnc+CYY
D3WWv9crvvLsSkyFQzQRBt8OnasbvTl1H8DSgMIVV+vQAFu5f+LsEM/kmjA+eh5d
d+ABUtBUDqkapfVfET8Vi1D8QuAxxoPYODMZdUH7wHgajw6Eplk5I311DoJFKzZC
NHV6GhytZESwTwiOkgo0Dg9liN3x9uH2cGY6nqljZ2n5t9bQ5uxsDykR7gbvTY8h
RJLHx6UpoozfxV/h6Td8HFEa4UgUOZYWX5oc3EyyNudV51BE4XY1qcN9qJ14lubL
+bWjhlC7dD4CXo4HHjHh6uaKpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:31 2026 by rpki-client