
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: BFkLUa2AnmYKUlRJGokfZlF0SEhDePyRCgFIOzbAr9w=
Subject key identifier: E2:B2:E4:88:6F:7D:1F:A7:1B:81:14:94:8F:79:A8:FD:A4:09:F9:A5
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1AE6
Signing time: Sun 01 Mar 2026 23:47:08 +0000
Manifest this update: Sun 01 Mar 2026 23:47:07 +0000
Manifest next update: Sun 08 Mar 2026 23:47:07 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: HSWHD6ru/sWwAl2jNbJEefHuq8vk3eN5NOYpfgOFa5k=)
2: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: ar4CjDKEwiv8hNV8LHXTUs+z+lADBs8QY5ug8DjXXe4=)
3: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: iL5if3fKju/R7iAzf9zF9TJsTs13/ku7HzfTITgSLX4=)
4: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: M8zWm6WUKawoHzJimLR5O8wEYXt57GS8vbOPe6J/SyA=)
5: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: +E60rSGUYX8GfoBZfNcoqE6lK5JivMoN19MLhP10yWo=)
6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: TBuvrNVeBsJKro4CZ3FR9nUNf80lrjnYo0JImSNFCnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6966 (0x1b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Mar 1 23:47:07 2026 GMT
Not After : Mar 8 23:47:07 2026 GMT
Subject: CN=69a4cffc-fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:14:37:61:31:5d:45:93:f7:bf:ed:5a:56:
53:f7:4d:f4:b4:f5:8f:91:17:ec:38:d0:68:25:7a:
be:a5:7c:9c:7f:d6:78:86:be:a2:c6:9e:db:ae:42:
66:55:bb:ab:8d:6a:e6:c2:d8:4e:0b:20:a0:cc:49:
7d:33:d7:be:b6:8b:28:41:25:64:f0:d8:71:3b:54:
d2:11:36:e5:9d:b8:ee:dc:75:1c:c7:07:90:3e:b6:
65:39:79:1c:0e:d1:1e:8f:42:ed:8c:65:f0:79:6c:
4e:69:2e:55:09:ff:57:3e:20:4c:6a:49:68:e2:05:
53:27:03:bd:44:71:1c:1c:5f:61:05:10:dd:c3:4a:
23:91:14:de:1f:ba:08:47:d0:89:05:0e:31:82:41:
7c:41:9d:5d:48:cc:dc:5a:f7:94:91:4d:80:74:2b:
06:c9:e2:1d:a8:9c:a7:d5:52:68:94:cd:b4:0c:91:
9f:3e:42:76:98:16:9c:74:e8:d7:db:79:7f:bd:71:
8b:73:da:ef:48:4a:70:bc:9a:50:62:9e:23:8d:e4:
3e:3f:1a:b0:c2:a5:96:ce:64:5c:b8:73:0a:23:27:
8d:6f:7a:10:df:86:4b:6e:f5:01:42:96:93:e0:a4:
c3:0a:95:0d:fc:03:3a:aa:1f:11:dd:bd:a4:9a:80:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:E4:88:6F:7D:1F:A7:1B:81:14:94:8F:79:A8:FD:A4:09:F9:A5
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:a8:65:96:d3:29:0c:6c:47:8e:09:c7:ee:81:24:c5:31:
80:9e:c8:8a:1a:25:9d:30:e1:00:36:01:82:bc:7a:e5:1f:b9:
0a:42:82:c9:52:c5:90:74:13:4b:90:d9:5e:b5:9b:cb:8c:70:
3f:5d:11:11:24:f7:8e:7a:fc:3b:10:24:d4:d2:89:7e:41:f1:
cc:bf:cb:74:24:fb:06:2f:bd:a1:5d:ad:71:2e:b6:26:bc:8c:
b7:20:87:4d:f4:a8:19:10:27:f5:2e:e7:b2:f8:4f:08:22:90:
f4:38:44:d6:b8:31:0a:5e:82:d5:ac:70:d1:be:94:a2:39:da:
77:57:6f:e4:58:29:cf:cb:21:8a:86:2c:e2:81:13:ea:05:37:
c5:24:96:20:78:1f:16:7e:18:38:66:fc:b6:86:e0:df:0c:9a:
21:32:3c:9c:64:5a:da:2d:ad:87:5e:51:fa:83:f1:67:92:86:
c6:36:59:50:bd:d0:37:31:fe:c6:d6:bb:f2:08:07:a7:15:8e:
a3:24:f7:f7:b4:4f:c5:f9:59:86:78:1b:c7:62:94:fe:e3:55:
d1:a8:ca:d1:46:89:1c:d0:fc:40:ce:af:ef:67:d2:ef:36:1e:
41:81:46:4b:59:bf:1c:83:15:a5:04:54:3a:6f:64:c0:e5:bc:
9b:67:17:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG
ODhFMzlFRUYwHhcNMjYwMzAxMjM0NzA3WhcNMjYwMzA4MjM0NzA3WjAYMRYwFAYD
VQQDEw02OWE0Y2ZmYy1mYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bwUN2ExXUWT97/tWlZT9030tPWPkRfsONBoJXq+pXycf9Z4hr6ixp7brkJm
VburjWrmwthOCyCgzEl9M9e+tosoQSVk8NhxO1TSETblnbju3HUcxweQPrZlOXkc
DtEej0LtjGXweWxOaS5VCf9XPiBMaklo4gVTJwO9RHEcHF9hBRDdw0ojkRTeH7oI
R9CJBQ4xgkF8QZ1dSMzcWveUkU2AdCsGyeIdqJyn1VJolM20DJGfPkJ2mBacdOjX
23l/vXGLc9rvSEpwvJpQYp4jjeQ+PxqwwqWWzmRcuHMKIyeNb3oQ34ZLbvUBQpaT
4KTDCpUN/AM6qh8R3b2kmoCsaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKy5Ihv
fR+nG4EUlI95qP2kCfmlMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5
Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1
X0RZMXpVNDFCSXI0ampudTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWQioZZbTKQxsR44Jx+6BJMUxgJ7IiholnTDhADYBgrx65R+5CkKCyVLFkHQT
S5DZXrWby4xwP10REST3jnr8OxAk1NKJfkHxzL/LdCT7Bi+9oV2tcS62JryMtyCH
TfSoGRAn9S7nsvhPCCKQ9DhE1rgxCl6C1axw0b6Uojnad1dv5Fgpz8shioYs4oET
6gU3xSSWIHgfFn4YOGb8tobg3wyaITI8nGRa2i2th15R+oPxZ5KGxjZZUL3QNzH+
xta78ggHpxWOoyT397RPxflZhngbx2KU/uNV0ajK0UaJHND8QM6v72fS7zYeQYFG
S1m/HIMVpQRUOm9kwOW8m2cXzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:23 2026 by rpki-client