
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier: fsQ7iZmLKkY7JFLgjMZSTtFboloH6DgPHHm/6d1c9gc=
Subject key identifier: BA:BA:D9:9E:ED:BB:82:A7:9E:D3:94:B0:51:6D:DA:D4:29:CD:C1:E5
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number: 084C
Signing time: Tue 12 May 2026 20:57:29 +0000
Manifest this update: Tue 12 May 2026 20:57:28 +0000
Manifest next update: Tue 19 May 2026 20:57:28 +0000
Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: VW0LJ+b/8FRMJQDREUbVDvTGq3HFEGxq3emnocaHvKM=)
2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: BdATbPDfE/iZAiRXCrZ7rIo/NSEdNWqhiAdwuIU9JvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Validity
Not Before: May 12 20:57:28 2026 GMT
Not After : May 19 20:57:28 2026 GMT
Subject: CN=6a039438-3d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:65:50:bd:29:69:9f:04:6f:ef:02:96:0d:
63:22:ed:07:9a:ab:fd:c2:6a:45:e2:68:82:07:36:
3c:c7:4f:2f:7d:6f:a6:7d:e5:d5:e6:c6:76:ff:4b:
09:e9:e3:a2:dd:b2:94:fd:e6:df:b1:d9:d3:1b:18:
2d:f0:6f:86:9a:e3:15:b4:b5:0a:07:0b:10:16:88:
2c:c3:98:90:ba:c6:60:5c:b8:78:4b:32:9a:d5:2e:
ef:09:21:bd:90:17:0c:6e:98:f4:2e:76:a4:b4:28:
8f:2b:2a:0a:fa:93:c1:99:3f:2a:6f:f0:52:f5:6e:
aa:80:12:1d:6a:99:0a:6a:9c:fd:6c:8a:9d:cf:4d:
7a:0d:c9:c7:dc:ed:23:2c:76:0f:bf:53:1c:7b:46:
63:14:17:1d:39:3d:95:4e:b5:f6:99:df:75:ca:47:
3f:13:36:47:3c:bf:f8:69:28:2b:4a:d3:6c:17:5b:
79:d5:a8:2d:0a:1a:7f:69:54:70:ab:44:ec:4a:bf:
e2:21:04:59:07:d7:04:76:45:61:b2:9b:1b:33:9e:
f7:a0:65:e2:2d:a0:6f:a1:94:ff:28:c0:63:98:9a:
9a:ff:b0:12:40:ef:00:1a:f8:1a:32:be:91:3c:86:
98:6b:5a:de:42:fb:49:bb:4e:48:8c:a3:f0:16:00:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:D9:9E:ED:BB:82:A7:9E:D3:94:B0:51:6D:DA:D4:29:CD:C1:E5
X509v3 Authority Key Identifier:
keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:a9:26:6d:24:52:1c:4f:48:f0:a4:f6:59:f0:35:37:94:
15:e3:1a:79:49:3f:c2:8d:a8:29:d9:8e:80:82:c1:52:cc:34:
e1:8c:8c:b9:49:2c:8f:3c:85:ad:2c:6f:98:b4:8c:c6:5f:88:
a0:1f:1b:41:5a:bf:80:e9:94:1b:e4:dd:68:a5:31:04:a2:c6:
6e:8d:d1:8b:5f:a1:c5:cc:d1:5c:5c:98:0b:87:64:ce:79:24:
b6:ab:11:4d:b9:9c:db:34:64:be:dd:eb:cc:d6:e4:03:07:89:
ee:c4:24:51:43:94:a3:3e:a4:be:61:cc:de:93:70:f8:5f:ca:
95:b2:25:7a:2f:3a:32:b7:06:f7:f9:f4:d1:40:43:c9:05:75:
a9:9b:53:d9:e1:ed:02:2f:61:06:39:75:25:78:c0:97:5b:0d:
77:0d:80:ed:06:74:f3:d1:f9:62:7b:0f:73:ae:79:1b:af:74:
b7:aa:e2:15:0d:30:b3:68:32:bd:8a:1f:e0:53:4d:39:89:0a:
7c:30:da:b3:4c:07:ab:43:f3:2e:1d:6c:de:c3:43:c7:4b:27:
af:2a:b0:dc:42:c0:23:a6:d9:bd:b4:26:bf:a0:a1:37:b5:86:
2a:6f:f4:8a:77:6b:26:2b:c1:59:09:32:39:76:73:c5:54:68:
85:f5:c1:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk2ODAxMTAvBgNVBAUTKEI3NTkwOTJBNjkxOEY0NUVBQ0QwRENGREY5NzFEMEQz
RkE1MDIxQUEwHhcNMjYwNTEyMjA1NzI4WhcNMjYwNTE5MjA1NzI4WjAYMRYwFAYD
VQQDEw02YTAzOTQzOC0zZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkplUL0paZ8Eb+8Clg1jIu0Hmqv9wmpF4miCBzY8x08vfW+mfeXV5sZ2/0sJ
6eOi3bKU/ebfsdnTGxgt8G+GmuMVtLUKBwsQFogsw5iQusZgXLh4SzKa1S7vCSG9
kBcMbpj0LnaktCiPKyoK+pPBmT8qb/BS9W6qgBIdapkKapz9bIqdz016DcnH3O0j
LHYPv1Mce0ZjFBcdOT2VTrX2md91ykc/EzZHPL/4aSgrStNsF1t51agtChp/aVRw
q0TsSr/iIQRZB9cEdkVhspsbM573oGXiLaBvoZT/KMBjmJqa/7ASQO8AGvgaMr6R
PIaYa1reQvtJu05IjKPwFgC3lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLq62Z7t
u4KnntOUsFFt2tQpzcHlMB8GA1UdIwQYMBaAFLdZCSppGPRerNDc/flx0NP6UCGq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTY4MC83NEY3QkJGQzBC
QTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlGNnMwTno5LVhIUTBfcFFJ
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Qxa0pLbWtZOUY2czBOejktWEhRMF9wUUlhby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTY4MC83NEY3QkJGQzBCQTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlG
NnMwTno5LVhIUTBfcFFJYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADuWpJm0kUhxPSPCk9lnwNTeUFeMaeUk/wo2oKdmOgILBUsw04YyMuUksjzyF
rSxvmLSMxl+IoB8bQVq/gOmUG+TdaKUxBKLGbo3Ri1+hxczRXFyYC4dkznkktqsR
Tbmc2zRkvt3rzNbkAweJ7sQkUUOUoz6kvmHM3pNw+F/KlbIlei86MrcG9/n00UBD
yQV1qZtT2eHtAi9hBjl1JXjAl1sNdw2A7QZ089H5YnsPc655G690t6riFQ0ws2gy
vYof4FNNOYkKfDDas0wHq0PzLh1s3sNDx0snryqw3ELAI6bZvbQmv6ChN7WGKm/0
indrJivBWQkyOXZzxVRohfXB3A==
-----END CERTIFICATE-----
Generated at Wed May 13 16:06:53 2026 by rpki-client