
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier: xaUcM8nFiZ1u7Q7TlKMw6pRS9rA+eLZbdaj0GsKoX3w=
Subject key identifier: F9:09:F3:59:14:17:D7:D4:D1:87:47:DA:20:9E:A6:AA:DE:4B:BA:35
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number: 0111
Signing time: Mon 02 Mar 2026 13:48:02 +0000
Manifest this update: Mon 02 Mar 2026 13:48:01 +0000
Manifest next update: Mon 09 Mar 2026 13:48:01 +0000
Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: piQg7E5DZuRLK5T2jqWD0hPPL3SR0UrjG9MFetN8onM=)
2: C276060084F011EF9D52F573C4F9AE02.roa (hash: bXHiUY7HCBEaQA+nusZ6DmYQdogq8krgBrFJi6+mw0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Validity
Not Before: Mar 2 13:48:01 2026 GMT
Not After : Mar 9 13:48:01 2026 GMT
Subject: CN=69a59512-13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:73:10:12:7b:c9:97:8f:a4:af:b7:ca:86:
13:03:ef:e8:68:a9:98:82:5e:41:9f:c3:f3:ce:22:
99:02:5c:06:f5:06:1d:53:ae:bf:b6:bf:b9:93:91:
71:66:10:61:b2:71:b6:78:6f:6f:dc:14:47:ed:2d:
b7:0d:9f:29:1b:02:35:28:d4:fc:d7:77:2f:c5:b9:
ba:4d:b3:89:6b:68:48:5d:56:eb:fd:b8:a2:39:ff:
71:3c:3f:1a:8d:58:8b:00:2d:b7:35:aa:24:5c:93:
a0:1a:98:5b:e1:91:d2:51:b1:82:22:5e:03:27:1a:
38:90:3d:f9:eb:91:6d:cd:9f:1c:fd:8e:4d:fc:ed:
69:d0:b2:6b:84:51:f0:91:d0:ec:55:09:6c:bf:88:
54:7f:24:06:f3:48:27:30:7f:42:43:38:8e:4a:c4:
51:11:5e:62:ae:0b:37:9f:b6:93:5e:44:2d:83:ba:
16:94:6b:71:42:9f:5d:39:38:00:6a:f8:30:86:df:
a7:fc:88:61:05:03:c5:17:2a:44:27:b8:f7:37:19:
57:5e:95:9d:42:07:17:2f:b1:1f:89:18:2b:b5:eb:
11:56:d6:f9:4c:bf:35:49:f0:b3:0c:60:ea:b5:e4:
3d:c4:e2:0f:51:bc:8f:4e:4d:06:7a:02:db:2e:75:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:F3:59:14:17:D7:D4:D1:87:47:DA:20:9E:A6:AA:DE:4B:BA:35
X509v3 Authority Key Identifier:
keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:53:97:23:93:ba:61:00:32:89:dd:30:cd:75:8d:6e:f1:04:
ca:78:23:7d:9d:6a:03:f2:28:a1:e4:7f:04:10:aa:08:5c:ad:
c6:23:69:b6:2e:06:37:ff:18:6e:90:d1:94:04:b0:93:b4:61:
04:e3:cd:e1:7f:31:8a:72:6b:49:4d:90:75:99:f8:0c:05:1f:
97:86:e3:1d:03:16:94:20:bf:4b:8d:62:0a:5f:8b:3d:72:ed:
21:56:e6:5f:7c:be:0c:ab:8f:2c:0c:9c:0c:90:9a:e0:31:4d:
34:ed:a4:8b:2d:f0:c0:27:32:04:6c:29:d1:8a:1a:6f:65:77:
6b:69:fa:eb:35:ae:93:30:b8:79:4e:b4:e6:b2:a9:b8:5e:fe:
c2:a1:62:3f:39:5a:bc:7b:92:42:87:b2:73:1c:02:58:9c:de:
ce:af:33:d6:fd:cd:1a:85:e4:d5:4d:0e:54:c7:08:0f:06:16:
db:49:51:b1:c9:b5:eb:8c:cc:5a:82:97:38:ab:6e:a0:44:c7:
34:20:b9:57:25:0a:45:f6:9f:dc:62:35:50:12:0c:36:8d:f0:
2d:18:29:69:f7:6e:7f:f2:18:42:73:40:82:36:f9:ae:7e:6c:
62:53:8f:af:a6:68:87:29:8e:b4:4a:8b:9c:b8:01:c5:24:b1:
e5:cf:bd:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE
NTdBQUFDMEIwHhcNMjYwMzAyMTM0ODAxWhcNMjYwMzA5MTM0ODAxWjAYMRYwFAYD
VQQDEw02OWE1OTUxMi0xM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkf1zEBJ7yZePpK+3yoYTA+/oaKmYgl5Bn8PzziKZAlwG9QYdU66/tr+5k5Fx
ZhBhsnG2eG9v3BRH7S23DZ8pGwI1KNT813cvxbm6TbOJa2hIXVbr/biiOf9xPD8a
jViLAC23NaokXJOgGphb4ZHSUbGCIl4DJxo4kD3565FtzZ8c/Y5N/O1p0LJrhFHw
kdDsVQlsv4hUfyQG80gnMH9CQziOSsRREV5irgs3n7aTXkQtg7oWlGtxQp9dOTgA
avgwht+n/IhhBQPFFypEJ7j3NxlXXpWdQgcXL7EfiRgrtesRVtb5TL81SfCzDGDq
teQ9xOIPUbyPTk0GegLbLnXKYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkJ81kU
F9fU0YdH2iCepqreS7o1MB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0
RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv
bXpKQlJiX21PM1RWZXFyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFVOXI5O6YQAyid0wzXWNbvEEyngjfZ1qA/IooeR/BBCqCFytxiNpti4GN/8Y
bpDRlASwk7RhBOPN4X8xinJrSU2QdZn4DAUfl4bjHQMWlCC/S41iCl+LPXLtIVbm
X3y+DKuPLAycDJCa4DFNNO2kiy3wwCcyBGwp0Yoab2V3a2n66zWukzC4eU605rKp
uF7+wqFiPzlavHuSQoeycxwCWJzezq8z1v3NGoXk1U0OVMcIDwYW20lRscm164zM
WoKXOKtuoETHNCC5VyUKRfaf3GI1UBIMNo3wLRgpafduf/IYQnNAgjb5rn5sYlOP
r6ZohymOtEqLnLgBxSSx5c+9Sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:16 2026 by rpki-client