
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier: ykYNJ+xYx9iTAarCPlYONmD8dqF0AieMD4FNVSmH+tc=
Subject key identifier: 82:48:60:B0:D8:38:34:AD:A3:1C:6E:AD:72:78:98:54:70:04:C0:7B
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number: 066E
Signing time: Tue 24 Mar 2026 22:16:27 +0000
Manifest this update: Tue 24 Mar 2026 22:16:27 +0000
Manifest next update: Tue 31 Mar 2026 22:16:27 +0000
Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: qOT7pgC0NAFloVVvgP3reb2VcXQcDCN3H4QelnThN8Q=)
2: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: hmAGFwidME91Z2OtLaYKm7U/7KLzuVveNkUXIAOlTec=)
3: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: MfEMtWr//IKbjBbDvwQq3pr8MLGlDee0A9/222366Gk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: Mar 24 22:16:27 2026 GMT
Not After : Mar 31 22:16:27 2026 GMT
Subject: CN=69c30d3b-6424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:75:c3:a5:42:f0:98:d1:e7:43:c7:e2:c4:
e6:04:d8:1a:3c:11:4c:50:e4:23:df:c8:f9:7b:59:
99:b8:fc:45:70:f8:3f:e9:48:19:b6:0a:94:ac:e8:
ef:80:38:68:2f:f8:fa:55:2e:4e:a6:4f:4c:71:94:
53:d7:37:e1:02:ec:54:dc:1b:6e:72:d8:98:ec:ad:
6a:6f:52:80:9f:48:91:1b:86:b6:37:04:4c:f2:f2:
e0:d6:2d:28:bf:b6:f1:81:92:94:df:2e:b0:05:3d:
5c:b1:d6:02:ca:67:ef:ff:df:ed:47:9f:47:47:67:
73:02:38:b5:8f:49:9d:c2:37:6f:c1:e6:0d:06:20:
90:3a:1d:eb:ee:01:b3:e1:39:42:d3:34:b6:7e:e1:
3c:5b:3d:67:8d:b2:2d:05:97:9e:f4:14:c6:68:7d:
06:09:bd:73:2d:29:ae:73:ab:32:19:d2:ee:e1:57:
d8:dc:b8:9c:46:85:2e:ac:32:bb:53:db:ea:43:69:
1c:73:6d:47:d3:f3:bc:f3:d7:5f:f3:f4:66:a0:fd:
1b:ee:b9:67:b8:eb:4f:89:72:8d:83:53:71:71:b2:
03:27:e5:57:1b:4c:1a:f6:c7:b4:2e:cd:2b:95:a4:
3e:c6:bd:09:79:40:14:6b:a1:b7:4b:ac:3c:3b:65:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:60:B0:D8:38:34:AD:A3:1C:6E:AD:72:78:98:54:70:04:C0:7B
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:e8:dd:77:08:67:0f:35:09:b5:8a:26:f3:c2:f1:76:b4:
ec:54:4b:d0:40:e1:f7:ee:1c:af:7a:db:d0:d0:b0:97:a3:35:
aa:fb:54:08:04:d9:30:1d:bb:fa:3e:97:4f:a0:cd:ac:07:9c:
18:93:95:79:6b:bf:72:47:26:9c:73:8f:10:df:a7:96:b0:98:
d8:1e:00:59:05:ee:fb:97:2a:92:01:fc:94:72:57:8d:d1:ea:
61:0f:7f:34:2d:66:e0:2e:6b:ab:1e:c3:a1:cb:e2:d7:ed:a6:
e2:4f:62:33:af:4a:15:26:bb:0d:e9:a9:d3:46:3d:dd:d0:21:
3e:ad:bd:c5:be:e9:3c:0f:e2:d6:73:05:51:59:8c:80:b8:f8:
4a:8c:de:ad:78:52:d9:e7:b2:18:d6:9a:81:e4:56:b2:23:51:
01:98:01:b4:9e:60:73:93:60:41:86:52:06:93:9a:59:b9:8d:
b4:e6:69:6d:7a:41:4e:73:26:2a:b4:8d:66:5e:39:c5:3a:05:
f2:54:01:4b:16:67:e6:ef:d9:f1:fd:17:f2:fc:bb:22:93:f6:
d9:60:f5:0a:5f:7b:4f:af:02:5b:63:76:09:17:63:a4:a5:79:
c7:61:8c:ab:ed:7b:3e:ac:5c:85:67:fe:bc:0b:1f:cb:6a:eb:
3d:74:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:04 2026 by rpki-client