
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier: fQzEfby0u0uWe2Z7CwHn76dDn62qIE+mk6JF6wpqN9Y=
Subject key identifier: FB:4D:7C:B0:91:50:2F:CA:33:85:D4:D2:60:EE:E8:F9:ED:6B:83:2B
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial: 352E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number: 3526
Signing time: Thu 26 Mar 2026 15:01:46 +0000
Manifest this update: Thu 26 Mar 2026 15:01:46 +0000
Manifest next update: Thu 02 Apr 2026 15:01:46 +0000
Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: E+1xC+Oiez658qsHpQbgmOZ0fVJc0jX7RqhMLCN4U2Q=)
2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: rVRbPt1BenVXJcwysqQm7AgwLvDB5H+rVBMsAeEXCxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Validity
Not Before: Mar 26 15:01:46 2026 GMT
Not After : Apr 2 15:01:46 2026 GMT
Subject: CN=69c54a5a-11f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:1b:80:60:41:5d:f5:04:3b:52:d2:c9:7d:
e6:f9:ad:f3:96:8d:29:bd:6c:99:27:03:17:5a:d1:
51:da:7e:b6:e9:7c:e2:8e:4b:65:8b:6f:84:dd:c7:
d7:59:37:04:63:bd:96:78:a8:b9:51:dc:ec:15:4d:
26:a1:e7:d7:08:e6:f9:f3:0f:be:55:3b:16:26:88:
26:b7:07:7b:bb:ff:45:e6:c0:0c:26:2b:4b:0b:a5:
e3:17:6b:bb:e3:a7:7c:88:f6:be:57:b0:0f:7d:d9:
6d:56:4d:5a:0d:bf:06:e2:3a:f5:bd:4a:f9:1f:d7:
56:fe:85:0c:de:ee:c5:78:ec:96:a1:63:37:70:96:
29:59:c3:78:0e:d6:29:ce:32:4a:4d:c9:00:0c:e3:
56:1f:f2:e9:05:50:4e:0f:a0:2d:e4:02:69:bc:3d:
6a:10:7c:94:3b:01:f3:e7:84:90:6b:2f:11:32:08:
ce:1f:76:97:26:ae:3e:95:95:b9:4f:55:9b:27:ec:
c8:a1:d8:5c:cd:fd:4a:1a:8e:8d:02:60:0f:e0:fd:
de:39:a9:fa:9f:6b:45:a6:0d:54:94:c6:f1:1d:76:
f9:e7:39:ed:b0:3a:6e:53:58:77:b1:f3:15:4f:ea:
a4:b1:29:06:30:3f:41:e7:b8:70:4f:63:b3:3a:3f:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:7C:B0:91:50:2F:CA:33:85:D4:D2:60:EE:E8:F9:ED:6B:83:2B
X509v3 Authority Key Identifier:
keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a9:e1:cc:b7:81:86:25:ca:f7:0c:77:05:ac:2b:7d:b3:2b:
5e:73:87:f0:d6:03:ea:70:fc:19:b9:4e:2e:b8:b3:6f:0d:29:
ef:ea:9b:f2:28:c9:3c:e2:8e:00:8f:ec:31:77:47:01:fe:5f:
71:8a:a4:28:6b:3d:02:84:a3:7d:6a:35:7c:fa:69:37:dd:0b:
09:b5:79:62:90:e9:bb:25:1a:98:ba:b3:34:28:84:33:44:4d:
61:d7:5f:d6:ea:1d:6d:c0:5f:1a:0c:0a:97:6d:11:cb:6e:7e:
c5:3e:44:eb:54:5a:9d:9b:60:cf:cd:fc:e7:26:1c:1c:25:cc:
9d:d3:66:49:82:d9:42:6b:82:c5:29:84:99:02:92:c7:ff:d2:
91:37:88:86:c0:ab:bf:28:7a:c8:d5:a4:16:a0:e5:9c:ed:a4:
80:3e:13:e6:37:47:0a:bb:fa:8a:f7:5b:08:63:8e:9f:86:74:
b2:91:06:28:44:52:1e:19:13:60:e2:19:8e:ce:24:f2:a6:d6:
e3:75:b8:1a:b7:2c:19:d4:9d:6b:5e:07:0e:75:54:c1:cd:ab:
6a:9b:63:da:da:bb:ca:2f:36:fd:d2:50:1c:f3:5d:9a:02:ec:
74:c6:bf:4a:79:33:42:77:14:82:70:37:de:14:72:34:3f:27:
bb:e8:11:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4
QjBDRUQzNUUwHhcNMjYwMzI2MTUwMTQ2WhcNMjYwNDAyMTUwMTQ2WjAYMRYwFAYD
VQQDEw02OWM1NGE1YS0xMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXUbgGBBXfUEO1LSyX3m+a3zlo0pvWyZJwMXWtFR2n626Xzijktli2+E3cfX
WTcEY72WeKi5UdzsFU0moefXCOb58w++VTsWJogmtwd7u/9F5sAMJitLC6XjF2u7
46d8iPa+V7APfdltVk1aDb8G4jr1vUr5H9dW/oUM3u7FeOyWoWM3cJYpWcN4DtYp
zjJKTckADONWH/LpBVBOD6At5AJpvD1qEHyUOwHz54SQay8RMgjOH3aXJq4+lZW5
T1WbJ+zIodhczf1KGo6NAmAP4P3eOan6n2tFpg1UlMbxHXb55zntsDpuU1h3sfMV
T+qksSkGMD9B57hwT2OzOj92CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtNfLCR
UC/KM4XU0mDu6Pnta4MrMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE
OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1
ajdTdWJlWTdLRWVMRE8wMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtanhzLeBhiXK9wx3BawrfbMrXnOH8NYD6nD8GblOLrizbw0p7+qb8ijJPOKO
AI/sMXdHAf5fcYqkKGs9AoSjfWo1fPppN90LCbV5YpDpuyUamLqzNCiEM0RNYddf
1uodbcBfGgwKl20Ry25+xT5E61RanZtgz8385yYcHCXMndNmSYLZQmuCxSmEmQKS
x//SkTeIhsCrvyh6yNWkFqDlnO2kgD4T5jdHCrv6ivdbCGOOn4Z0spEGKERSHhkT
YOIZjs4k8qbW43W4GrcsGdSda14HDnVUwc2raptj2tq7yi82/dJQHPNdmgLsdMa/
SnkzQncUgnA33hRyND8nu+gRkg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:51 2026 by rpki-client