
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
File: 119NVHZK705TBIfeterZIyLy4As.mft (raw, json)
Hash identifier: lbL4tshgLnHOZKSo6ERLTk9oQiPphQCbw1l3N3XzwJM=
Subject key identifier: 87:A0:09:74:CC:F5:2B:28:5E:99:00:65:89:F2:E4:EE:BA:C4:69:C9
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Certificate issuer: /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
Manifest number: 36
Signing time: Wed 25 Mar 2026 07:48:37 +0000
Manifest this update: Wed 25 Mar 2026 07:48:36 +0000
Manifest next update: Wed 01 Apr 2026 07:48:36 +0000
Files and hashes: 1: 119NVHZK705TBIfeterZIyLy4As.crl (hash: zB5sa43QMZvsHhSJ4zQj8HcOqIAArsG79mf3khwLtBw=)
2: 6641AB54DEE111F0BF0237E8526F56BC.roa (hash: 3c720aJ/J3RclkYPzI9bzs0SKJeg4GvB6leOfaOooVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Validity
Not Before: Mar 25 07:48:36 2026 GMT
Not After : Apr 1 07:48:36 2026 GMT
Subject: CN=69c39355-7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:5b:9f:05:49:cc:e5:49:4a:b3:a7:b7:a9:
e1:6c:55:79:b1:fb:4d:45:dc:17:1c:01:46:30:2d:
ef:c3:08:1a:80:6d:9d:27:ca:08:27:0b:ab:d1:80:
23:fa:3b:65:07:d9:a0:7f:17:a8:cf:a2:8e:40:39:
f2:3b:f1:74:3d:a7:7d:0f:33:27:bd:37:3b:ea:5a:
a7:f6:f5:ea:19:ec:34:31:41:ee:46:d4:31:b0:e0:
83:84:e8:24:87:88:38:4d:fe:b4:00:7c:7b:8d:46:
51:ee:10:23:a5:4f:ec:a2:77:d1:3f:01:d9:99:23:
31:49:08:2d:a2:70:5a:07:1b:46:0d:5d:1f:d2:30:
0d:90:25:8c:66:40:64:8a:3d:8e:ac:45:39:df:df:
c7:95:0d:d7:55:ca:5b:df:71:5a:d4:1e:9e:65:21:
76:ed:cb:1d:f8:2a:83:2f:39:94:ef:25:ae:de:54:
4b:2a:45:69:fd:57:8d:99:04:b0:14:55:ae:cb:ac:
91:aa:38:fd:ab:6c:a3:a3:81:2b:bb:22:8e:f2:64:
9b:ad:e1:0e:94:30:92:d7:99:87:fe:c9:2f:47:5e:
7b:e7:a6:e1:03:b8:15:0e:84:8b:5a:8c:80:ec:4c:
c1:af:0a:72:6d:3c:9e:18:d1:9f:cd:db:f8:5d:89:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:09:74:CC:F5:2B:28:5E:99:00:65:89:F2:E4:EE:BA:C4:69:C9
X509v3 Authority Key Identifier:
keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:b2:de:98:9f:b3:9c:55:36:0d:3a:20:ea:c4:53:14:7e:
e8:a1:38:28:ef:0f:ef:1d:f7:40:e9:d5:99:09:52:60:81:3d:
2d:41:e0:e1:e7:68:a6:08:05:91:7f:fd:8b:f1:c7:9a:2f:60:
a0:c9:bf:db:e9:fd:91:fa:de:c0:1d:22:18:2d:89:8e:45:c0:
17:89:4d:14:86:55:64:8a:58:a8:68:39:52:f6:2a:61:9d:b0:
be:3f:b7:09:32:66:df:a2:66:b5:20:3c:51:6c:91:b8:92:4e:
6f:eb:3d:e0:23:f9:da:80:09:14:90:5d:68:bd:21:e3:32:66:
c9:ac:4b:53:dc:65:61:96:c4:96:44:62:81:7a:5f:f3:fb:00:
58:aa:ee:fe:e8:24:e4:72:e7:37:e1:b5:31:1d:a1:6d:d3:58:
4a:44:e1:60:ea:83:66:e7:d2:57:ad:fa:8e:05:98:18:5b:eb:
2f:0a:05:7d:8b:06:b0:a1:27:dc:14:bb:e8:0a:06:e2:c3:e3:
05:b0:95:41:11:5a:07:d6:d9:92:ca:d3:b4:db:2a:5c:fb:47:
9d:db:94:f8:e6:29:80:57:46:b3:11:e2:ce:28:06:1c:35:fe:
a8:fe:21:db:e3:38:7f:86:86:7f:ad:9a:85:af:3f:a8:90:fa:
48:0c:c0:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MkI5ODExMC8GA1UEBRMoRDc1RjRENTQ3NjRBRUY0RTUzMDQ4N0RFQjVFQUQ5MjMy
MkYyRTAwQjAeFw0yNjAzMjUwNzQ4MzZaFw0yNjA0MDEwNzQ4MzZaMBgxFjAUBgNV
BAMTDTY5YzM5MzU1LTc5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPAFufBUnM5UlKs6e3qeFsVXmx+01F3BccAUYwLe/DCBqAbZ0nyggnC6vRgCP6
O2UH2aB/F6jPoo5AOfI78XQ9p30PMye9NzvqWqf29eoZ7DQxQe5G1DGw4IOE6CSH
iDhN/rQAfHuNRlHuECOlT+yid9E/AdmZIzFJCC2icFoHG0YNXR/SMA2QJYxmQGSK
PY6sRTnf38eVDddVylvfcVrUHp5lIXbtyx34KoMvOZTvJa7eVEsqRWn9V42ZBLAU
Va7LrJGqOP2rbKOjgSu7Io7yZJut4Q6UMJLXmYf+yS9HXnvnpuEDuBUOhItajIDs
TMGvCnJtPJ4Y0Z/N2/hdiT/fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh6AJdMz1
KyhemQBlifLk7rrEackwHwYDVR0jBBgwFoAU119NVHZK705TBIfeterZIyLy4Asw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzFBNzk4NEQwREM5
MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpLNzA1VEJJZmV0ZXJaSXlMeTRB
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMTE5TlZIWks3MDVUQklmZXRlclpJeUx5NEFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
Qjk4LzFBNzk4NEQwREM5MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpLNzA1
VEJJZmV0ZXJaSXlMeTRBcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtHLLemJ+znFU2DTog6sRTFH7ooTgo7w/vHfdA6dWZCVJggT0tQeDh52imCAWR
f/2L8ceaL2Cgyb/b6f2R+t7AHSIYLYmORcAXiU0UhlVkilioaDlS9iphnbC+P7cJ
Mmbfoma1IDxRbJG4kk5v6z3gI/nagAkUkF1ovSHjMmbJrEtT3GVhlsSWRGKBel/z
+wBYqu7+6CTkcuc34bUxHaFt01hKROFg6oNm59JXrfqOBZgYW+svCgV9iwawoSfc
FLvoCgbiw+MFsJVBEVoH1tmSytO02ypc+0ed25T45imAV0azEeLOKAYcNf6o/iHb
4zh/hoZ/rZqFrz+okPpIDMBf
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:17 2026 by rpki-client