
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
File: 4A98xO20ZNoqTvnfvu5imVNRVeo.mft (raw, json)
Hash identifier: E5STYLt/78Chw565QZujQpZvvuMmgnAuIcxTZYGXzeo=
Subject key identifier: 99:6B:FE:20:71:8E:4A:85:63:16:A3:9C:9E:42:C4:A0:26:DB:A2:2A
Authority key identifier: E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA
Certificate issuer: /CN=A9165746/serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
Manifest number: 1A
Signing time: Thu 23 Jul 2026 11:01:52 +0000
Manifest this update: Thu 23 Jul 2026 11:01:52 +0000
Manifest next update: Thu 30 Jul 2026 11:01:52 +0000
Files and hashes: 1: 4A98xO20ZNoqTvnfvu5imVNRVeo.crl (hash: /OpOVGRhKJ5l1/1z4tpYKqQALTAVs9n5Md3IaQu4rZE=)
2: 031954DE5F3611F180101EC97F47A888.roa (hash: 8MG6eGpVkP9CJ/8UlblTP9Xx22hFfv4p4ykAcJ2UqhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl
rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA
Validity
Not Before: Jul 23 11:01:52 2026 GMT
Not After : Jul 30 11:01:52 2026 GMT
Subject: CN=6a61f4a0-f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:b2:29:3d:31:80:ba:ac:d1:82:d8:26:65:
3e:56:c5:dd:b0:59:3e:09:21:33:10:5e:71:de:a9:
24:c3:6f:07:31:7f:61:16:7e:44:0d:c1:9d:65:2e:
60:4d:8a:fd:7a:17:48:35:32:ba:4f:37:6b:6b:00:
ab:c5:20:b0:90:50:76:5a:f5:30:d3:a0:62:27:57:
45:d6:65:b5:32:d8:e3:98:63:79:93:d4:e3:cb:0b:
b2:71:5b:a6:f0:7b:98:ae:73:19:92:b0:27:f1:77:
67:79:9a:a7:21:9f:e1:19:f5:c3:fe:7f:c8:b6:2c:
49:4b:9c:1d:06:60:6b:0c:bf:f4:20:31:ab:97:95:
83:cb:6c:83:11:b7:7b:14:32:b6:6d:7f:a3:84:47:
c8:3b:ed:3d:24:5e:54:dd:06:ca:dd:15:f6:57:18:
0b:e5:c4:d6:0b:31:d9:8c:93:4f:e3:30:6d:30:91:
fc:99:1e:30:0e:44:c7:fc:55:1f:cd:07:fd:77:92:
0e:49:c0:77:aa:de:62:0a:89:25:73:a8:77:bf:3a:
e9:29:20:0a:b3:83:52:2c:d5:28:6c:f7:2d:09:d7:
7e:b8:55:72:db:4e:41:93:97:83:c7:32:87:00:cc:
ed:54:5a:80:37:f7:70:9e:28:57:95:c5:0a:36:88:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:FE:20:71:8E:4A:85:63:16:A3:9C:9E:42:C4:A0:26:DB:A2:2A
X509v3 Authority Key Identifier:
keyid:E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f1:15:69:05:fb:3d:e5:fc:50:a4:54:4a:f2:e4:07:71:59:
b5:ce:35:04:10:63:f7:44:08:d3:fa:9c:4b:ef:f0:1f:7a:d9:
40:f2:5d:d4:9e:6b:60:0c:39:11:ad:94:ff:f0:21:70:ce:1a:
08:70:5b:fb:35:ab:56:39:bb:e0:6b:41:7e:5b:cd:96:b4:7c:
b6:ed:06:0d:4c:cc:73:c2:e7:56:93:e9:32:ef:6e:9c:32:15:
a6:8c:b1:ef:44:11:4f:ae:71:c9:46:9d:87:8f:89:95:cb:3f:
ac:c6:45:ae:4c:f0:a0:a8:4f:f9:96:c6:06:fb:b4:68:6e:91:
b8:38:e1:68:12:05:28:8c:b3:fc:40:6d:24:26:7d:f5:14:88:
14:a3:17:be:e2:60:ae:7a:c4:c1:ed:8c:cf:31:e4:8c:44:dd:
3e:51:83:ae:29:61:3b:24:8a:2e:98:64:06:1e:36:13:bc:38:
d2:51:14:cf:2e:97:17:4e:f0:63:0c:59:6b:ec:d9:d1:25:9a:
60:e7:e6:f6:53:bc:df:46:5f:d1:0e:d6:c0:c1:77:85:56:07:
a2:82:74:10:76:77:cb:af:23:be:7a:92:ba:0d:80:4c:70:7a:
e1:09:67:08:07:d8:f4:7e:e2:62:1f:1a:29:3d:aa:70:17:6e:
a3:76:f5:0a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTc0NjExMC8GA1UEBRMoRTAwRjdDQzRFREI0NjREQTJBNEVGOURGQkVFRTYyOTk1
MzUxNTVFQTAeFw0yNjA3MjMxMTAxNTJaFw0yNjA3MzAxMTAxNTJaMBgxFjAUBgNV
BAMTDTZhNjFmNGEwLWYyYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCQsrIpPTGAuqzRgtgmZT5Wxd2wWT4JITMQXnHeqSTDbwcxf2EWfkQNwZ1lLmBN
iv16F0g1MrpPN2trAKvFILCQUHZa9TDToGInV0XWZbUy2OOYY3mT1OPLC7JxW6bw
e5iucxmSsCfxd2d5mqchn+EZ9cP+f8i2LElLnB0GYGsMv/QgMauXlYPLbIMRt3sU
MrZtf6OER8g77T0kXlTdBsrdFfZXGAvlxNYLMdmMk0/jMG0wkfyZHjAORMf8VR/N
B/13kg5JwHeq3mIKiSVzqHe/OukpIAqzg1Is1Shs9y0J1364VXLbTkGTl4PHMocA
zO1UWoA393CeKFeVxQo2iFPhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmWv+IHGO
SoVjFqOcnkLEoCbboiowHwYDVR0jBBgwFoAU4A98xO20ZNoqTvnfvu5imVNRVeow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzQ2LzcyQUMyMDUyNUYz
NTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5vcVR2bmZ2dTVpbVZOUlZl
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNEE5OHhPMjBaTm9xVHZuZnZ1NWltVk5SVmVvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
NzQ2LzcyQUMyMDUyNUYzNTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5v
cVR2bmZ2dTVpbVZOUlZlby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCm8RVpBfs95fxQpFRK8uQHcVm1zjUEEGP3RAjT+pxL7/AfetlA8l3UnmtgDDkR
rZT/8CFwzhoIcFv7NatWObvga0F+W82WtHy27QYNTMxzwudWk+ky726cMhWmjLHv
RBFPrnHJRp2Hj4mVyz+sxkWuTPCgqE/5lsYG+7RobpG4OOFoEgUojLP8QG0kJn31
FIgUoxe+4mCuesTB7YzPMeSMRN0+UYOuKWE7JIoumGQGHjYTvDjSURTPLpcXTvBj
DFlr7NnRJZpg5+b2U7zfRl/RDtbAwXeFVgeignQQdnfLryO+epK6DYBMcHrhCWcI
B9j0fuJiHxopPapwF26jdvUK
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:46 2026 by rpki-client