
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier: /PFg6G1NpJM7WjxDv0F5w1g4XSskpXJlpICuTNrJ8qs=
Subject key identifier: C3:AE:EF:62:33:11:48:CB:EB:5D:17:37:32:05:A8:86:66:5E:CF:BD
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number: 034C
Signing time: Wed 25 Mar 2026 00:36:38 +0000
Manifest this update: Wed 25 Mar 2026 00:36:38 +0000
Manifest next update: Wed 01 Apr 2026 00:36:38 +0000
Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: CSL1M8Mptssqlte4ACp0zmHdNdWAz4msYegFcn8wQ3k=)
2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: YaLUoS4NO6gvXeP/FB11InRUuC2v1zSJTE++6llurm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Validity
Not Before: Mar 25 00:36:38 2026 GMT
Not After : Apr 1 00:36:38 2026 GMT
Subject: CN=69c32e16-8a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:6a:14:ed:b9:d6:5d:32:e1:ec:3c:5c:de:
df:48:3c:a4:74:5a:94:1f:80:6a:cf:af:9b:5e:4f:
37:43:d6:ce:c0:5d:08:91:29:28:15:3c:06:e8:3f:
6d:bb:34:91:20:df:6f:60:bf:28:c6:d3:a5:84:51:
bc:2c:9e:0a:34:9b:f6:55:ff:4a:fc:7a:cf:47:cc:
a4:b8:af:98:ab:9d:2b:b6:89:b3:e0:36:6c:05:bb:
a8:34:93:93:d3:53:2e:28:3f:23:22:4b:0e:3c:66:
01:99:fb:51:04:c7:24:81:e3:61:5f:80:17:0e:1b:
98:47:d1:16:85:b1:23:5f:7a:ec:49:1f:a9:40:5c:
67:6d:fa:28:0e:03:4c:50:04:c5:73:a1:0e:e8:48:
03:e9:ce:51:2b:2c:2e:31:e2:71:bc:05:ee:c6:89:
f3:f1:de:cd:74:e6:bd:79:b1:a2:97:c4:a6:16:4b:
e1:03:b2:ea:3b:b9:2c:cf:5b:e7:08:d3:8c:9f:e5:
af:c6:1d:18:06:3a:b3:f6:7d:f4:5d:87:e0:82:2a:
dd:6e:49:bc:2a:a5:57:a6:ab:dd:ee:fe:ee:1f:0d:
d2:26:7c:92:44:13:6c:67:d1:5a:90:79:7d:f0:77:
64:f4:fa:1d:f1:d8:5b:b0:9a:fb:85:07:c0:24:4c:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:EF:62:33:11:48:CB:EB:5D:17:37:32:05:A8:86:66:5E:CF:BD
X509v3 Authority Key Identifier:
keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2f:f2:9d:4b:88:e4:a8:42:5f:74:ea:3b:9f:46:2f:9c:0a:
20:eb:67:9d:42:e0:71:61:71:bd:9c:8c:a5:5b:d6:00:60:7d:
01:f4:d4:1d:be:71:01:6f:0a:bc:35:88:59:81:1c:4e:b9:92:
92:bf:64:29:62:f3:7b:64:c3:76:0f:5d:4d:2e:e0:1f:8b:a2:
b5:75:b5:bf:83:fe:d2:e5:b1:51:53:91:d9:a9:03:38:c9:fe:
b6:20:25:63:a8:de:2c:aa:2c:27:87:4c:a0:f9:e7:61:ea:6b:
d6:01:f9:c0:1a:7b:c5:76:29:e0:a5:f3:eb:9a:0b:cf:af:fa:
c5:2a:d7:42:cc:62:e9:2a:ca:fa:d1:3f:ac:f5:eb:97:33:9d:
c6:38:7e:da:a2:d7:03:4d:d7:85:c3:5d:ed:d6:e6:87:47:b8:
61:1e:c3:2b:dd:bf:c1:33:6f:d4:c5:fb:0c:4b:47:50:b4:0d:
26:23:05:0a:2c:56:df:81:39:9c:83:a5:94:8e:8c:5f:3e:47:
bb:b1:c2:0b:a5:37:27:93:a0:45:4c:b2:61:fb:26:bb:04:79:
c6:e2:10:a6:18:ab:5f:97:d8:0f:13:61:e8:c1:19:b0:cf:fb:
44:af:b1:f2:3d:59:63:ca:b4:56:e4:38:1a:fb:fc:39:0c:ac:
7b:86:c7:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0
OUE4RkMwNTcwHhcNMjYwMzI1MDAzNjM4WhcNMjYwNDAxMDAzNjM4WjAYMRYwFAYD
VQQDEw02OWMzMmUxNi04YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhktqFO251l0y4ew8XN7fSDykdFqUH4Bqz6+bXk83Q9bOwF0IkSkoFTwG6D9t
uzSRIN9vYL8oxtOlhFG8LJ4KNJv2Vf9K/HrPR8ykuK+Yq50rtomz4DZsBbuoNJOT
01MuKD8jIksOPGYBmftRBMckgeNhX4AXDhuYR9EWhbEjX3rsSR+pQFxnbfooDgNM
UATFc6EO6EgD6c5RKywuMeJxvAXuxonz8d7NdOa9ebGil8SmFkvhA7LqO7ksz1vn
CNOMn+Wvxh0YBjqz9n30XYfggirdbkm8KqVXpqvd7v7uHw3SJnySRBNsZ9FakHl9
8Hdk9Pod8dhbsJr7hQfAJEwlzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOu72Iz
EUjL610XNzIFqIZmXs+9MB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3
QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh
UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvS/ynUuI5KhCX3TqO59GL5wKIOtnnULgcWFxvZyMpVvWAGB9AfTUHb5xAW8K
vDWIWYEcTrmSkr9kKWLze2TDdg9dTS7gH4uitXW1v4P+0uWxUVOR2akDOMn+tiAl
Y6jeLKosJ4dMoPnnYepr1gH5wBp7xXYp4KXz65oLz6/6xSrXQsxi6SrK+tE/rPXr
lzOdxjh+2qLXA03XhcNd7dbmh0e4YR7DK92/wTNv1MX7DEtHULQNJiMFCixW34E5
nIOllI6MXz5Hu7HCC6U3J5OgRUyyYfsmuwR5xuIQphirX5fYDxNh6MEZsM/7RK+x
8j1ZY8q0VuQ4Gvv8OQyse4bHIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:30 2026 by rpki-client