
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: YwDAtOcWQ/yWrZGCNCZk0wIlqAkUXPAfpltacqmJwyc=
Subject key identifier: 99:97:C1:10:5A:4C:5C:84:28:39:D8:43:BF:87:AF:1D:34:33:C1:F0
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: 0153
Signing time: Fri 25 Sep 2026 05:21:38 +0000
Manifest this update: Fri 25 Sep 2026 05:21:37 +0000
Manifest next update: Fri 02 Oct 2026 05:21:37 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: LgHuTV7wkClKTAzk2uklmWDgpXNJKEtCBRP9OyaOSnE=)
2: CCD3E270633311F1B8FA0C5C8D47A888.roa (hash: WNyFu7dMv+Z7bLOkmH8GMK0F61nUEfi8GoAz10fbi3Y=)
3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Sep 25 05:21:37 2026 GMT
Not After : Oct 2 05:21:37 2026 GMT
Subject: CN=6ab604e2-f9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:b1:8a:14:20:22:35:d8:27:1e:74:49:97:
45:c1:3c:84:cb:f4:2e:38:30:09:86:ed:03:ff:52:
2b:84:a2:19:02:17:ab:57:59:5f:b0:c9:19:fd:5c:
27:9e:73:65:56:cf:72:59:32:e0:46:3c:fa:bc:83:
9e:be:8b:bf:46:17:96:4c:07:3e:ee:75:51:db:0d:
52:b1:85:ae:0a:34:3d:1b:0b:20:44:e3:78:7a:55:
1c:d1:b8:3f:fe:e5:7b:60:67:59:b5:05:f7:98:54:
e4:21:c0:ab:ab:07:31:02:ab:3a:a1:46:17:8b:df:
08:56:7c:5b:3a:a1:9e:45:39:8b:d3:96:09:f7:d9:
e2:5d:84:c9:63:c7:ec:21:8b:ea:c5:90:4c:6c:14:
53:32:c7:4f:ed:0b:b1:d8:b6:de:52:39:05:7a:f5:
c2:14:64:04:a2:60:c4:be:30:a0:45:ed:12:ba:81:
04:3c:6d:24:b4:d1:4f:d4:0d:a9:9e:62:46:54:fa:
c0:b1:22:da:0e:f3:e5:72:6b:e8:62:c9:dd:b8:58:
7a:89:26:8a:4b:90:70:6a:78:b9:0f:a8:b8:2e:8f:
9a:20:30:bf:da:80:59:6f:d3:c3:df:bd:7b:83:70:
ab:f5:48:3e:ec:b6:2b:83:40:2a:8f:33:3a:d2:3f:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:C1:10:5A:4C:5C:84:28:39:D8:43:BF:87:AF:1D:34:33:C1:F0
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f0:a6:a0:bc:ce:9a:00:90:90:f6:3e:23:be:37:34:11:17:
0a:74:4e:8c:ca:3e:75:f7:dc:9f:d9:b3:84:db:9c:c4:a0:3d:
7f:0c:80:84:bc:ca:1e:31:81:9c:39:db:86:03:b7:e4:96:e9:
68:53:bf:c0:a8:0b:54:63:eb:cd:25:91:61:fb:db:3c:55:31:
6a:ec:94:d8:b4:f0:d8:03:9f:54:99:d1:48:25:9c:cd:11:8c:
15:42:4e:d1:1a:d5:a1:95:ce:62:df:20:e1:b9:5b:90:4c:7e:
70:79:45:22:8f:3c:7b:80:23:96:9d:ce:80:35:97:f1:78:36:
10:08:55:ea:33:07:be:34:52:10:25:78:89:69:c4:f8:81:26:
a9:d4:19:d9:33:3f:47:1e:68:ab:33:80:89:54:e0:71:2c:08:
37:9e:ae:cc:49:b0:2c:ee:be:41:07:b2:92:ae:ac:1c:48:8d:
2b:56:64:ab:9d:9e:e5:79:b3:2e:49:15:6d:21:f6:c1:3a:2f:
e1:df:38:30:de:03:1e:cb:2b:ad:9b:99:66:13:11:71:9e:ba:
08:b3:d0:ee:61:42:37:3b:70:5c:2f:c4:cc:6c:43:9a:43:02:
43:3f:65:9a:f1:e5:2f:63:9b:bf:97:50:fe:df:40:0f:b1:7b:
ad:64:ea:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC
MTY0NENCOEEwHhcNMjYwOTI1MDUyMTM3WhcNMjYxMDAyMDUyMTM3WjAYMRYwFAYD
VQQDEw02YWI2MDRlMi1mOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFOxihQgIjXYJx50SZdFwTyEy/QuODAJhu0D/1IrhKIZAherV1lfsMkZ/Vwn
nnNlVs9yWTLgRjz6vIOevou/RheWTAc+7nVR2w1SsYWuCjQ9GwsgRON4elUc0bg/
/uV7YGdZtQX3mFTkIcCrqwcxAqs6oUYXi98IVnxbOqGeRTmL05YJ99niXYTJY8fs
IYvqxZBMbBRTMsdP7Qux2LbeUjkFevXCFGQEomDEvjCgRe0SuoEEPG0ktNFP1A2p
nmJGVPrAsSLaDvPlcmvoYsnduFh6iSaKS5Bwani5D6i4Lo+aIDC/2oBZb9PD3717
g3Cr9Ug+7LYrg0AqjzM60j8feQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmXwRBa
TFyEKDnYQ7+Hrx00M8HwMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE
RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE
MWozX2I4WkFsX0t4WkV5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADvCmoLzOmgCQkPY+I743NBEXCnROjMo+dffcn9mzhNucxKA9fwyAhLzKHjGB
nDnbhgO35JbpaFO/wKgLVGPrzSWRYfvbPFUxauyU2LTw2AOfVJnRSCWczRGMFUJO
0RrVoZXOYt8g4blbkEx+cHlFIo88e4Ajlp3OgDWX8Xg2EAhV6jMHvjRSECV4iWnE
+IEmqdQZ2TM/Rx5oqzOAiVTgcSwIN56uzEmwLO6+QQeykq6sHEiNK1Zkq52e5Xmz
LkkVbSH2wTov4d84MN4DHssrrZuZZhMRcZ66CLPQ7mFCNztwXC/EzGxDmkMCQz9l
mvHlL2Obv5dQ/t9AD7F7rWTq1Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:36 2026 by rpki-client