
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier: 06qYOyyTMeR5fOH+kbQbQ6AVY4d3w0NspT5UiZ48pmg=
Subject key identifier: E2:90:2D:F7:F1:DE:C0:CE:BA:78:21:A7:0D:F5:87:51:E7:24:25:15
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number: E5
Signing time: Mon 11 May 2026 06:36:39 +0000
Manifest this update: Mon 11 May 2026 06:36:39 +0000
Manifest next update: Mon 18 May 2026 06:36:39 +0000
Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: BdEce54UvaRT7VAmHW3AL/FCtGfvYpWbtJ7V0HB+Fpw=)
2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Validity
Not Before: May 11 06:36:39 2026 GMT
Not After : May 18 06:36:39 2026 GMT
Subject: CN=6a0178f7-0a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:ec:a8:6d:0e:f7:b8:40:b9:75:49:dd:54:
34:bf:d9:6e:65:a0:ac:28:92:d7:31:fa:ed:fe:fb:
b1:d5:a1:ed:ea:6a:42:5a:f4:13:c1:d1:bc:0f:7b:
ca:02:8d:8a:5d:8b:d7:45:f6:4b:52:e0:c6:dd:3c:
47:41:7c:f6:57:ba:dd:74:9e:47:93:f4:8b:12:81:
fc:7a:d6:e4:81:04:8b:28:cf:7e:f1:eb:7f:9c:33:
c8:6c:5e:7f:b0:ca:ff:56:24:56:73:ba:ca:d9:51:
02:57:ee:66:42:c1:35:9b:05:c7:36:a5:33:44:63:
43:71:01:2c:00:53:c6:3c:7a:ac:a6:be:b4:52:ef:
cf:18:ff:f0:0b:84:c3:28:76:d7:f7:dc:36:85:d6:
ae:d2:2b:70:8b:59:64:1c:8e:3b:13:ce:22:77:b5:
9d:2f:73:da:fc:df:86:4a:1c:4f:86:98:d5:ae:95:
6d:a3:70:27:72:85:86:af:90:9c:b5:83:9f:56:52:
e2:e4:2e:ca:bc:c4:23:60:6e:0d:e9:00:ec:13:10:
1c:ce:96:cf:5d:36:a9:13:8b:16:36:1f:7b:80:5a:
77:d8:a5:f9:06:86:d0:e2:0c:e2:8e:a8:30:e4:90:
51:52:f8:29:eb:f0:79:42:10:c9:6c:67:8a:80:5e:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:2D:F7:F1:DE:C0:CE:BA:78:21:A7:0D:F5:87:51:E7:24:25:15
X509v3 Authority Key Identifier:
keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:33:95:38:4a:fc:ae:28:3d:9c:49:40:74:ea:4f:22:be:
47:09:06:62:d1:50:d4:cd:69:8f:b2:fe:98:ad:52:fd:92:dc:
52:4d:dc:38:f1:51:65:45:93:8c:94:59:52:53:00:2e:dc:50:
c7:60:c0:69:9b:85:12:19:39:2d:2a:77:f5:0a:d6:ca:e5:00:
4c:1c:e0:f9:e7:08:c0:e2:69:71:e6:cc:06:44:ac:88:b4:73:
66:82:8b:65:1a:b1:d8:74:2b:d4:59:8e:65:d9:79:22:f7:9d:
d1:6c:cc:f6:0a:d1:73:da:bd:60:61:5c:10:a9:15:29:0f:62:
fa:f3:5e:56:d0:d6:76:22:4e:4e:f4:87:7c:03:ca:f9:df:a6:
5b:fe:a5:cb:f6:4c:fc:ad:02:eb:e5:d6:23:69:84:6d:dd:e3:
cd:89:54:50:37:c2:75:c4:c5:0f:14:cc:d4:1e:f1:3e:20:11:
3d:de:66:38:b9:fb:73:b9:f9:25:e3:5c:b1:de:07:14:8f:3b:
e6:c6:90:28:17:a1:aa:ad:b4:92:19:d3:27:8c:dd:dc:c4:b4:
2c:4a:b0:00:97:ee:81:cd:8c:da:c9:df:d2:dd:09:97:54:7d:
33:9b:e3:b7:78:0b:4a:97:a9:77:54:4c:b8:8d:e1:c7:00:68:
ee:f9:d6:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2
N0I3NzU1MjYwHhcNMjYwNTExMDYzNjM5WhcNMjYwNTE4MDYzNjM5WjAYMRYwFAYD
VQQDEw02YTAxNzhmNy0wYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmPrsqG0O97hAuXVJ3VQ0v9luZaCsKJLXMfrt/vux1aHt6mpCWvQTwdG8D3vK
Ao2KXYvXRfZLUuDG3TxHQXz2V7rddJ5Hk/SLEoH8etbkgQSLKM9+8et/nDPIbF5/
sMr/ViRWc7rK2VECV+5mQsE1mwXHNqUzRGNDcQEsAFPGPHqspr60Uu/PGP/wC4TD
KHbX99w2hdau0itwi1lkHI47E84id7WdL3Pa/N+GShxPhpjVrpVto3AncoWGr5Cc
tYOfVlLi5C7KvMQjYG4N6QDsExAczpbPXTapE4sWNh97gFp32KX5BobQ4gzijqgw
5JBRUvgp6/B5QhDJbGeKgF7L4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKQLffx
3sDOunghpw31h1HnJCUVMB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz
RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs
TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArDczlThK/K4oPZxJQHTqTyK+RwkGYtFQ1M1pj7L+mK1S/ZLcUk3cOPFRZUWT
jJRZUlMALtxQx2DAaZuFEhk5LSp39QrWyuUATBzg+ecIwOJpcebMBkSsiLRzZoKL
ZRqx2HQr1FmOZdl5Ived0WzM9grRc9q9YGFcEKkVKQ9i+vNeVtDWdiJOTvSHfAPK
+d+mW/6ly/ZM/K0C6+XWI2mEbd3jzYlUUDfCdcTFDxTM1B7xPiARPd5mOLn7c7n5
JeNcsd4HFI875saQKBehqq20khnTJ4zd3MS0LEqwAJfugc2M2snf0t0Jl1R9M5vj
t3gLSpepd1RMuI3hxwBo7vnWDg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:11:56 2026 by rpki-client