
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File: SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier: 1XWioBEO2njtT50LO/lBf5ITbBTU0fxZbXZN4OpJGdw=
Subject key identifier: FE:00:A0:7A:C2:B6:AB:BB:0D:59:03:8B:95:D2:70:79:A5:56:A1:16
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer: /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number: 09
Signing time: Wed 25 Mar 2026 08:20:47 +0000
Manifest this update: Wed 25 Mar 2026 08:20:46 +0000
Manifest next update: Wed 01 Apr 2026 08:20:46 +0000
Files and hashes: 1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: YMTJBtuMtfkL+EosWXNG3AlwaPQRhAcjvSU0mr/0peI=)
2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Validity
Not Before: Mar 25 08:20:46 2026 GMT
Not After : Apr 1 08:20:46 2026 GMT
Subject: CN=69c39adf-9b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:0c:46:ee:b4:3d:10:92:42:29:61:30:4d:
ad:50:cf:a7:20:7c:6a:12:98:0c:07:69:96:8b:ed:
d0:38:e9:64:da:4e:54:7b:92:22:2b:dc:47:4a:34:
3e:bc:6b:8c:26:da:0c:06:89:3a:76:16:ac:08:74:
dd:e9:a6:37:f6:5d:98:55:0a:c6:f7:23:b5:6e:ff:
e7:76:64:c7:54:4d:19:33:7e:cc:12:a7:48:53:ea:
c8:8f:c8:41:56:d7:3e:cf:f2:01:d6:c5:51:62:27:
33:1c:5f:b0:07:1d:07:bb:48:90:70:d6:4d:71:ee:
4f:33:97:54:53:b2:67:28:3a:ad:e9:c6:73:de:f4:
ed:c4:48:fb:40:e5:5a:b6:96:da:f1:e3:72:ef:cc:
6b:5f:78:af:7b:ce:92:28:eb:36:c9:1f:8a:99:e8:
b8:ca:b7:48:ce:1a:01:b4:dc:d1:21:8f:01:52:0f:
03:48:a2:f1:dc:ce:14:f3:6d:55:3d:94:35:a6:a7:
69:8d:b5:89:e2:bd:0e:17:02:88:57:11:1e:d7:93:
6d:3d:61:2b:bc:19:39:05:34:7e:21:98:fa:81:77:
10:4f:6d:d7:1b:b6:07:21:4b:8f:f7:9d:46:6b:de:
c1:20:18:36:4b:e7:0e:c3:01:67:f7:03:c2:0c:83:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:A0:7A:C2:B6:AB:BB:0D:59:03:8B:95:D2:70:79:A5:56:A1:16
X509v3 Authority Key Identifier:
keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:66:22:38:25:97:7c:29:8a:40:04:c0:22:e2:9b:4b:fd:10:
ba:fe:11:e9:40:ea:33:87:32:62:b1:36:f4:43:89:ad:44:c9:
aa:b9:09:2e:0f:f4:e0:d9:b2:91:61:2b:8c:d2:56:97:79:05:
1c:a8:3f:a1:17:d5:f0:54:61:22:c8:5b:18:e0:2e:64:d9:74:
1e:2a:88:07:ee:3c:1d:a1:4a:04:00:24:19:f9:03:48:b3:2a:
c2:5f:0c:aa:fa:d3:43:59:8c:03:71:e8:f8:38:c1:47:68:9b:
f5:be:f8:57:6e:3c:80:c5:af:f3:2d:7e:1c:7a:b7:ab:4d:45:
d7:6b:cd:99:60:0b:a5:34:b6:ec:01:31:d0:eb:0d:33:68:29:
14:fb:34:33:93:21:b9:e8:37:1e:6c:9d:7a:44:6f:f1:3a:c4:
c8:d2:34:eb:b8:c4:89:d1:74:c8:c2:10:ef:9f:58:32:b2:d3:
93:6a:7a:f7:ed:e0:9a:5c:c7:32:b2:40:6e:59:ef:6d:c0:89:
2d:48:fa:42:93:a1:cc:c4:11:b3:cb:99:86:c5:7c:88:4f:d9:
e0:58:9e:d7:91:45:75:be:7b:61:42:ce:91:cf:f8:0a:91:61:
d3:47:fc:b7:4c:1c:6b:ea:fe:25:48:d3:ca:69:c8:65:78:b2:
9b:5f:1c:05
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NjAzOTExMC8GA1UEBRMoNDg5OTBFNTcxNTk1ODJFNjREQkUwQ0Y2MUM0OTk4MjlE
QzJERjQ2NzAeFw0yNjAzMjUwODIwNDZaFw0yNjA0MDEwODIwNDZaMBgxFjAUBgNV
BAMTDTY5YzM5YWRmLTliMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBdQxG7rQ9EJJCKWEwTa1Qz6cgfGoSmAwHaZaL7dA46WTaTlR7kiIr3EdKND68
a4wm2gwGiTp2FqwIdN3ppjf2XZhVCsb3I7Vu/+d2ZMdUTRkzfswSp0hT6siPyEFW
1z7P8gHWxVFiJzMcX7AHHQe7SJBw1k1x7k8zl1RTsmcoOq3pxnPe9O3ESPtA5Vq2
ltrx43LvzGtfeK97zpIo6zbJH4qZ6LjKt0jOGgG03NEhjwFSDwNIovHczhTzbVU9
lDWmp2mNtYnivQ4XAohXER7Xk209YSu8GTkFNH4hmPqBdxBPbdcbtgchS4/3nUZr
3sEgGDZL5w7DAWf3A8IMgy2zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/gCgesK2
q7sNWQOLldJweaVWoRYwHwYDVR0jBBgwFoAUSJkOVxWVguZNvgz2HEmYKdwt9Gcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MDM5LzdCMzZGRDU4MUQ1
NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1NKa09WeFdWZ3VaTnZnejJIRW1ZS2R3dDlH
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU0prT1Z4V1ZndVpOdmd6MkhFbVlLZHd0OUdjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
MDM5LzdCMzZGRDU4MUQ1NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1NKa09WeFdWZ3Va
TnZnejJIRW1ZS2R3dDlHYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCiZiI4JZd8KYpABMAi4ptL/RC6/hHpQOozhzJisTb0Q4mtRMmquQkuD/Tg2bKR
YSuM0laXeQUcqD+hF9XwVGEiyFsY4C5k2XQeKogH7jwdoUoEACQZ+QNIsyrCXwyq
+tNDWYwDcej4OMFHaJv1vvhXbjyAxa/zLX4cererTUXXa82ZYAulNLbsATHQ6w0z
aCkU+zQzkyG56DcebJ16RG/xOsTI0jTruMSJ0XTIwhDvn1gystOTanr37eCaXMcy
skBuWe9twIktSPpCk6HMxBGzy5mGxXyIT9ngWJ7XkUV1vnthQs6Rz/gKkWHTR/y3
TBxr6v4lSNPKachleLKbXxwF
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:22 2026 by rpki-client