
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json)
Hash identifier: LYFwFsZ1ni/hIVuEqxi7RWJVMyOwbDHCYcwVRSVCAeg=
Subject key identifier: F9:9D:95:4E:62:5A:DB:95:68:43:C7:AE:CD:96:8E:D2:D7:B2:ED:86
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
Manifest number: 0206
Signing time: Wed 25 Mar 2026 02:33:47 +0000
Manifest this update: Wed 25 Mar 2026 02:33:46 +0000
Manifest next update: Wed 01 Apr 2026 02:33:46 +0000
Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: 39ZNFwTFucCHOphepSDvkYQVel7+R4tkGHEDwpl6oeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Mar 25 02:33:46 2026 GMT
Not After : Apr 1 02:33:46 2026 GMT
Subject: CN=69c3498b-da1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:d9:21:bf:86:d3:94:c6:61:2c:0e:62:0c:
49:13:49:41:80:84:51:f5:b9:2f:b6:f2:6c:89:78:
73:5d:35:05:c1:18:f4:5f:71:1c:8e:d0:e0:f6:1b:
b2:2b:81:41:d8:48:82:aa:af:4c:3f:6c:58:13:e1:
ad:9b:15:65:f6:0c:0e:45:33:ce:02:f8:62:02:32:
8d:8d:df:42:d0:79:3c:8e:85:0d:4b:26:00:9e:3a:
d1:1c:90:8c:11:ae:9e:47:cd:73:09:f7:9e:75:bf:
70:52:0a:f8:05:dc:74:7b:21:de:97:eb:1d:9e:97:
de:64:a3:41:01:aa:8e:0a:b7:5d:74:7f:03:59:1f:
e5:53:58:9d:a5:93:98:b5:58:6b:a6:5d:c3:87:af:
a4:d3:5f:54:d3:e2:d3:d8:36:41:8e:22:25:e8:c3:
29:40:f9:ef:c3:ef:8a:f9:ab:7a:25:16:56:ba:20:
3a:6b:58:c3:8f:fe:dd:99:1a:4d:e5:79:e8:61:cc:
e8:d0:99:fb:45:2e:e5:46:fa:1a:0b:f9:37:83:17:
78:74:8f:a0:d0:30:72:5d:70:2c:30:10:c9:d7:61:
ae:b7:91:7a:f1:0b:63:d0:50:8f:a0:e2:84:96:f8:
f9:7f:d3:20:1e:bf:c9:84:ee:ed:60:58:d3:0f:c5:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:95:4E:62:5A:DB:95:68:43:C7:AE:CD:96:8E:D2:D7:B2:ED:86
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:56:a8:a4:de:29:02:40:f7:e8:22:f5:01:c7:f6:10:1f:
44:e6:0c:87:09:95:b4:2f:ee:ef:c3:40:81:b4:e4:15:0c:52:
05:91:4a:04:cb:44:92:a5:6c:e0:6c:c8:c8:01:06:38:37:94:
43:f2:4b:61:01:d3:5b:4f:7f:92:81:64:19:95:6e:e1:a9:9c:
f8:b7:43:1c:57:32:4b:d5:42:fa:7e:e2:c6:7f:13:e6:58:a4:
eb:54:37:2f:e9:1e:da:5d:74:49:53:1b:2d:52:73:7b:50:3d:
0b:c7:d0:31:31:62:c2:ac:be:ec:88:b1:6f:cd:92:a4:2b:c7:
d9:59:f0:d3:69:64:96:b8:07:f1:0a:6d:12:0d:80:08:e0:1e:
55:78:b2:08:33:04:37:cf:7e:a8:89:ec:51:8c:3c:fd:94:27:
e6:98:b6:22:75:66:d1:18:63:83:74:99:5f:96:08:27:4b:2e:
5e:2e:49:2f:b2:3e:ba:61:80:20:d3:f7:16:f2:ae:69:0d:f1:
3c:a1:d4:22:47:43:5f:12:e4:fb:de:16:25:68:98:03:70:35:
a2:00:bb:3b:5e:fe:86:d0:61:fa:93:51:a3:1d:0a:99:6e:74:
13:89:62:61:1f:73:b4:8a:5c:74:41:98:a9:2f:48:d3:13:13:
3b:51:6f:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0
RTcxMEQxMzUwHhcNMjYwMzI1MDIzMzQ2WhcNMjYwNDAxMDIzMzQ2WjAYMRYwFAYD
VQQDEw02OWMzNDk4Yi1kYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocrZIb+G05TGYSwOYgxJE0lBgIRR9bkvtvJsiXhzXTUFwRj0X3EcjtDg9huy
K4FB2EiCqq9MP2xYE+GtmxVl9gwORTPOAvhiAjKNjd9C0Hk8joUNSyYAnjrRHJCM
Ea6eR81zCfeedb9wUgr4Bdx0eyHel+sdnpfeZKNBAaqOCrdddH8DWR/lU1idpZOY
tVhrpl3Dh6+k019U0+LT2DZBjiIl6MMpQPnvw++K+at6JRZWuiA6a1jDj/7dmRpN
5XnoYczo0Jn7RS7lRvoaC/k3gxd4dI+g0DByXXAsMBDJ12Gut5F68Qtj0FCPoOKE
lvj5f9MgHr/JhO7tYFjTD8UcDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmdlU5i
WtuVaEPHrs2WjtLXsu2GMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC
QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh
U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALBVWqKTeKQJA9+gi9QHH9hAfROYMhwmVtC/u78NAgbTkFQxSBZFKBMtEkqVs
4GzIyAEGODeUQ/JLYQHTW09/koFkGZVu4amc+LdDHFcyS9VC+n7ixn8T5lik61Q3
L+ke2l10SVMbLVJze1A9C8fQMTFiwqy+7Iixb82SpCvH2Vnw02lklrgH8QptEg2A
COAeVXiyCDMEN89+qInsUYw8/ZQn5pi2InVm0Rhjg3SZX5YIJ0suXi5JL7I+umGA
INP3FvKuaQ3xPKHUIkdDXxLk+94WJWiYA3A1ogC7O17+htBh+pNRox0KmW50E4li
YR9ztIpcdEGYqS9I0xMTO1FvjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:08 2026 by rpki-client