
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File: 99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier: HM0gX5xnJxdtU01ljq+mOQD8E3N3CzMiDJDKAQCSuJs=
Subject key identifier: 3C:B5:96:C0:6B:5A:58:7F:05:E9:D3:28:46:76:9F:04:2D:F0:53:5A
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial: 159C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number: 1569
Signing time: Tue 24 Mar 2026 16:41:14 +0000
Manifest this update: Tue 24 Mar 2026 16:41:14 +0000
Manifest next update: Tue 31 Mar 2026 16:41:14 +0000
Files and hashes: 1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: 7nFkkcBb7x5ds711ZZxsv2x3rcAqZi9tgIEqR+L2ObU=)
2: A2DA1898656911E889701022C4F9AE02.roa (hash: CwK3Y1tfF0LAC8LjsD5bMG8aFbm8cGr1Lrgc4nHFBOY=)
3: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: jcuZ4Nc01vH43/ruJvx8vALimlUCU5+5s5pzICb3qBI=)
4: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: YIzpeMeWqs42MJPGPIa2RAOYgAFRaWqA5il7QXG95yY=)
5: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: ZRKDoTCxO4kWh5K3DlbMTCOMh1AkkFSSGzjDwidD7jA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5532 (0x159c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Validity
Not Before: Mar 24 16:41:14 2026 GMT
Not After : Mar 31 16:41:14 2026 GMT
Subject: CN=69c2beaa-3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:5c:34:a2:e8:25:9d:df:35:d9:43:95:39:
d7:e0:08:f4:07:6b:08:a3:32:ad:89:71:68:a6:ba:
fa:82:ac:7f:f2:8e:a0:63:4e:35:fd:59:0e:55:dc:
22:85:fb:26:55:3b:df:42:08:61:a2:40:a3:5c:eb:
60:da:a1:05:f3:8f:50:79:dd:db:f2:76:3e:cf:d4:
ac:e9:7e:49:9c:5e:90:34:85:a9:3d:08:d6:1d:ca:
76:73:40:41:69:db:8e:13:b9:ee:b8:a1:3f:99:e5:
cd:0c:b9:1c:f0:15:df:da:8b:86:02:9b:39:46:ef:
22:7c:25:32:dc:1a:93:44:e9:d4:39:eb:9c:b9:7f:
01:51:78:1d:e8:b9:15:f0:d0:37:59:71:fc:20:58:
26:06:68:03:39:a0:a9:00:16:38:eb:88:b0:02:19:
68:f8:89:ff:45:a5:69:09:d0:e5:e9:5f:aa:ca:c3:
59:7b:b6:be:db:a9:81:6b:3e:2e:15:b9:56:cb:7f:
95:28:af:ad:ee:c8:8e:f3:c0:88:09:b1:52:14:b1:
2e:97:b0:36:ac:70:79:64:fc:11:18:50:93:2e:ca:
3e:47:cf:9b:01:c8:61:17:60:4a:4f:40:39:c7:f5:
e8:8e:6a:f0:e1:6f:ab:d4:6f:90:f1:12:fa:6a:ae:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:96:C0:6B:5A:58:7F:05:E9:D3:28:46:76:9F:04:2D:F0:53:5A
X509v3 Authority Key Identifier:
keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fd:7c:ef:9c:14:c2:ef:0d:ee:0b:f8:f9:4a:89:8b:dc:85:
38:b9:64:5f:79:c0:a1:00:32:9d:12:e3:c8:7a:bb:1c:79:a8:
5d:a4:28:9e:4f:a4:af:ac:92:ab:3c:2e:4f:be:27:0d:23:47:
3b:eb:4e:ca:b8:e1:66:13:9a:eb:28:9d:38:a7:43:b6:d2:2d:
ed:77:23:26:bb:fe:79:b2:26:67:56:ec:58:2d:d4:66:27:f5:
19:85:5c:58:fa:bb:87:ad:b6:69:59:3f:e3:f7:41:20:f3:b7:
4a:fc:dc:b2:b2:78:04:4d:84:d9:3d:a1:bf:66:b8:06:77:2b:
9a:f6:f5:ee:92:42:08:d9:89:f4:7b:f0:bc:a2:56:7f:06:82:
ee:65:f6:24:23:d8:ac:90:77:f1:f4:2f:ae:2b:8e:d0:1e:86:
35:0f:88:4a:01:b2:13:be:27:73:94:54:d7:e7:2b:98:75:32:
4e:e6:21:09:ca:69:a1:2a:55:8f:e1:d7:5b:1c:ed:cd:45:e9:
8b:dd:27:d4:9e:03:53:aa:21:3d:5d:e7:18:f5:b5:12:d4:f5:
8f:67:f5:e8:79:b9:82:fa:28:b3:83:34:8a:2c:59:84:54:30:
53:fe:f9:fb:aa:3e:04:31:80:cc:98:7e:46:1b:fe:13:91:50:
2b:7a:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:14 2026 by rpki-client