
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier: y8071ql25pkshTj6YNU6RsH5r7XYad7RcyP3QnTQgX4=
Subject key identifier: 19:88:76:22:77:ED:39:5F:1E:A5:6F:D9:8B:F0:18:1B:48:31:C2:76
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number: 0236
Signing time: Wed 25 Mar 2026 01:58:14 +0000
Manifest this update: Wed 25 Mar 2026 01:58:13 +0000
Manifest next update: Wed 01 Apr 2026 01:58:13 +0000
Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: K3sT17sTLBMlDroSX3r7/fMUGywNL6hdAZ5jk7ClWck=)
2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: OhK7TCPvxjbm9B/cpWolbS5pHJAD3DPN0L90c8VhU58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Validity
Not Before: Mar 25 01:58:13 2026 GMT
Not After : Apr 1 01:58:13 2026 GMT
Subject: CN=69c34136-cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:44:9b:35:8a:4c:31:8a:2c:05:3a:fc:1d:
6e:fb:5b:3b:0d:09:57:b9:d4:52:8e:05:1a:3d:95:
70:bd:dc:6f:24:20:f7:d1:f5:54:8f:d1:4c:5b:0e:
d0:cc:2a:13:bd:e2:aa:35:3e:b5:62:1a:83:53:7a:
98:45:ef:00:66:15:c0:89:ab:2a:c6:eb:a6:07:8d:
96:ab:b3:59:5b:2c:9d:8e:5c:18:67:0b:fa:db:5d:
23:0f:95:3d:76:e6:7a:51:a0:7b:39:15:0e:18:ee:
72:12:5b:d6:28:80:d4:80:1c:52:7d:bf:99:c1:f6:
19:13:c7:2e:e7:63:64:e1:5c:5f:3f:19:14:24:91:
00:86:a6:83:e9:3a:cd:e5:b7:73:3c:bb:22:ea:96:
b2:46:dc:63:69:07:6d:fa:cf:6e:04:24:21:66:4f:
18:fc:85:65:0d:3c:7d:8b:e5:69:47:9a:ad:b0:d2:
d6:26:e0:bb:3f:e6:ee:03:7f:63:73:e2:f8:11:1d:
2a:61:41:e9:3f:72:9b:90:e1:5f:06:62:8b:16:cd:
9b:1f:34:00:40:d8:ef:e2:8e:dd:d8:7b:70:07:c8:
ee:f2:b0:f6:b9:3e:ae:d1:de:59:b4:ba:51:ac:55:
31:53:39:c4:96:d0:3e:c7:4f:b8:0b:4d:d4:61:ad:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:88:76:22:77:ED:39:5F:1E:A5:6F:D9:8B:F0:18:1B:48:31:C2:76
X509v3 Authority Key Identifier:
keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:4c:2f:76:0c:a3:48:79:36:89:4c:20:fd:ca:eb:a3:d7:
13:91:73:4c:c9:77:d0:35:48:fa:eb:0f:d0:1c:38:c7:9a:3c:
c1:f5:58:1b:3f:aa:91:ea:06:78:52:20:a6:6e:a7:77:34:23:
05:b4:9f:ac:66:e6:9a:04:ca:98:79:0a:ea:7f:c0:c5:99:3f:
fb:8e:b6:fa:ab:1c:63:30:50:e3:b3:c9:07:87:6b:a9:4d:59:
ac:ec:4c:e9:8f:3d:38:21:3c:c9:b8:19:76:6f:62:de:ab:74:
df:ad:56:32:08:9c:32:d0:08:2e:a2:1c:df:9d:d4:4a:c5:13:
a7:2d:c3:c7:a9:ea:7f:e6:c6:4c:7a:9d:25:71:34:57:55:4c:
72:ec:f7:34:07:51:e1:d8:ca:e5:a7:e4:00:64:a5:a3:2d:26:
2a:ac:ef:70:e3:02:fc:3e:31:29:1b:55:92:b3:2a:68:0a:20:
e6:25:e2:d0:0e:b3:b8:fe:92:bb:22:24:90:ae:87:af:7d:e2:
67:39:40:b6:a0:09:2d:12:8e:c0:6c:3e:c2:78:d0:40:df:76:
cd:3c:55:46:ba:8d:c2:f0:05:bc:fe:ee:02:8d:63:e0:3e:31:
ee:8a:67:06:54:24:7d:66:dc:e1:bc:f2:35:ea:7b:07:ef:ae:
08:ea:2e:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG
QzlENkREOEUwHhcNMjYwMzI1MDE1ODEzWhcNMjYwNDAxMDE1ODEzWjAYMRYwFAYD
VQQDEw02OWMzNDEzNi1jYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgt1EmzWKTDGKLAU6/B1u+1s7DQlXudRSjgUaPZVwvdxvJCD30fVUj9FMWw7Q
zCoTveKqNT61YhqDU3qYRe8AZhXAiasqxuumB42Wq7NZWyydjlwYZwv6210jD5U9
duZ6UaB7ORUOGO5yElvWKIDUgBxSfb+ZwfYZE8cu52Nk4VxfPxkUJJEAhqaD6TrN
5bdzPLsi6payRtxjaQdt+s9uBCQhZk8Y/IVlDTx9i+VpR5qtsNLWJuC7P+buA39j
c+L4ER0qYUHpP3KbkOFfBmKLFs2bHzQAQNjv4o7d2HtwB8ju8rD2uT6u0d5ZtLpR
rFUxUznEltA+x0+4C03UYa1L3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmIdiJ3
7TlfHqVv2YvwGBtIMcJ2MB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5
NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo
dlVJcWg5dEJ1THo4blczWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXz9ML3YMo0h5NolMIP3K66PXE5FzTMl30DVI+usP0Bw4x5o8wfVYGz+qkeoG
eFIgpm6ndzQjBbSfrGbmmgTKmHkK6n/AxZk/+462+qscYzBQ47PJB4drqU1ZrOxM
6Y89OCE8ybgZdm9i3qt0361WMgicMtAILqIc353USsUTpy3Dx6nqf+bGTHqdJXE0
V1VMcuz3NAdR4djK5afkAGSloy0mKqzvcOMC/D4xKRtVkrMqaAog5iXi0A6zuP6S
uyIkkK6Hr33iZzlAtqAJLRKOwGw+wnjQQN92zTxVRrqNwvAFvP7uAo1j4D4x7opn
BlQkfWbc4bzyNep7B++uCOoujw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:52 2026 by rpki-client