
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json)
Hash identifier: zxFJc7Kjur+hRD0aAorelpO43erLTuHbFwmXFZZdP9g=
Subject key identifier: DC:5F:FC:33:6C:87:20:37:78:09:A3:F4:87:AC:7E:37:AE:B5:85:80
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
Manifest number: 0219
Signing time: Wed 25 Mar 2026 02:16:09 +0000
Manifest this update: Wed 25 Mar 2026 02:16:09 +0000
Manifest next update: Wed 01 Apr 2026 02:16:09 +0000
Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: idyvihIJAQNVl2QA4BYd/KatL2ZsWXEqLyUX5dTLWWc=)
2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: OmAXY2O6FSIlEjupu2rP4MV7HV+6tvf+8THz6edNFEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Validity
Not Before: Mar 25 02:16:09 2026 GMT
Not After : Apr 1 02:16:09 2026 GMT
Subject: CN=69c34569-a1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:d4:41:68:ca:df:6c:c9:0d:0c:9d:04:0d:
9a:fe:a7:d0:bc:3e:c5:8d:bb:7b:6d:fb:16:5a:57:
a9:92:cc:a7:7b:de:64:8a:fd:52:04:6f:3d:72:7c:
37:62:83:84:9e:a2:5b:06:ab:22:b7:6d:64:23:19:
20:49:2f:bf:a8:69:23:0f:80:28:2d:d3:d1:2a:55:
94:f5:8b:af:83:32:c6:0e:67:1c:b0:f7:e9:d7:34:
16:06:a8:71:8a:a7:f3:d6:fa:9c:9c:43:3b:fe:02:
21:3e:84:76:9d:18:58:ce:9d:82:e8:c8:99:4a:8b:
16:c2:ed:ab:a0:b7:50:15:61:5c:e1:5e:3f:42:f5:
24:3a:2d:96:69:21:b2:96:a3:45:0c:24:a3:33:56:
73:9d:a6:1a:78:8f:d3:af:75:97:38:b3:af:85:d6:
b4:f8:56:74:9b:c9:ee:3d:3c:4a:77:e1:37:61:d1:
9d:24:3a:ce:e3:9e:85:60:8b:b9:b3:79:08:f4:63:
f3:13:4a:ba:bb:76:6a:27:b1:e7:f2:18:a8:16:b7:
9f:72:33:02:3d:92:bd:11:f3:1c:b4:7f:c6:ec:80:
ec:4c:8d:ad:3d:3b:e1:48:fa:df:74:18:78:5f:d8:
f2:7b:57:7b:6b:d5:78:14:37:33:04:18:b4:41:c6:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:FC:33:6C:87:20:37:78:09:A3:F4:87:AC:7E:37:AE:B5:85:80
X509v3 Authority Key Identifier:
keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:28:1e:18:cb:89:0e:02:15:b1:b4:26:f3:f8:38:f2:03:b8:
75:66:8c:3f:6d:a2:e6:5d:99:a4:08:10:dd:b1:ec:68:81:9c:
80:78:cb:10:ba:98:60:ac:a2:34:be:6e:57:39:94:f2:4e:42:
c5:6b:cc:1d:48:a6:98:ca:6d:d4:f0:ae:28:c9:00:ba:79:8e:
dd:47:c4:af:a6:52:80:c6:32:85:37:c7:e7:1a:e8:c8:b6:64:
b0:2d:a0:bc:d7:80:41:7f:d6:ca:95:d2:3b:07:a5:5e:c3:e0:
4e:62:d5:17:6d:5b:70:69:53:8c:7e:06:b6:08:19:29:10:19:
b4:bc:8d:91:38:1e:29:71:51:d2:3f:ce:32:f9:9b:4f:f5:3e:
26:e1:d9:e6:eb:b9:5e:b4:26:c8:4a:b7:b0:4c:e4:1d:97:c7:
ff:17:ea:02:8d:31:39:f8:ff:be:fd:e0:6a:e3:70:e9:66:09:
06:35:2d:2b:a0:99:36:9c:5b:28:84:1d:88:66:a7:26:2b:31:
3c:30:29:ea:73:2d:02:2c:4a:8c:33:8b:a4:15:be:5a:89:8d:
2e:24:e5:10:d2:58:41:fa:f2:f8:a2:4c:47:c6:3e:fd:a6:cb:
60:a0:97:ba:a4:84:c7:aa:7b:31:0a:3d:c4:0e:0b:4a:e1:2c:
62:30:32:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5
NjYyQTI3RkYwHhcNMjYwMzI1MDIxNjA5WhcNMjYwNDAxMDIxNjA5WjAYMRYwFAYD
VQQDEw02OWMzNDU2OS1hMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjA7UQWjK32zJDQydBA2a/qfQvD7Fjbt7bfsWWlepksyne95kiv1SBG89cnw3
YoOEnqJbBqsit21kIxkgSS+/qGkjD4AoLdPRKlWU9YuvgzLGDmccsPfp1zQWBqhx
iqfz1vqcnEM7/gIhPoR2nRhYzp2C6MiZSosWwu2roLdQFWFc4V4/QvUkOi2WaSGy
lqNFDCSjM1ZznaYaeI/Tr3WXOLOvhda0+FZ0m8nuPTxKd+E3YdGdJDrO456FYIu5
s3kI9GPzE0q6u3ZqJ7Hn8hioFrefcjMCPZK9EfMctH/G7IDsTI2tPTvhSPrfdBh4
X9jye1d7a9V4FDczBBi0QcboQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxf/DNs
hyA3eAmj9IesfjeutYWAMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC
RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk
ME9kNWk4Nkx5N09XWXFKXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoygeGMuJDgIVsbQm8/g48gO4dWaMP22i5l2ZpAgQ3bHsaIGcgHjLELqYYKyi
NL5uVzmU8k5CxWvMHUimmMpt1PCuKMkAunmO3UfEr6ZSgMYyhTfH5xroyLZksC2g
vNeAQX/WypXSOwelXsPgTmLVF21bcGlTjH4GtggZKRAZtLyNkTgeKXFR0j/OMvmb
T/U+JuHZ5uu5XrQmyEq3sEzkHZfH/xfqAo0xOfj/vv3gauNw6WYJBjUtK6CZNpxb
KIQdiGanJisxPDAp6nMtAixKjDOLpBW+WomNLiTlENJYQfry+KJMR8Y+/abLYKCX
uqSEx6p7MQo9xA4LSuEsYjAyhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:00 2026 by rpki-client