
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier: XQZjHLoJ2/YxQFIEFFg5YG3L9RzRqNjZVdF4LmMZj2U=
Subject key identifier: 4F:7A:53:09:52:A4:A6:A3:EA:9B:A1:C4:2B:3B:C5:60:55:31:CC:29
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number: 0238
Signing time: Wed 13 May 2026 02:41:10 +0000
Manifest this update: Wed 13 May 2026 02:41:10 +0000
Manifest next update: Wed 20 May 2026 02:41:10 +0000
Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: EQiJf5nOZnREu/0H74wt5QoxTaptommBwEXKRR7DXdY=)
2: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
3: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: May 13 02:41:10 2026 GMT
Not After : May 20 02:41:10 2026 GMT
Subject: CN=6a03e4c6-e018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:a5:9c:c3:2e:b9:5f:6e:64:3d:0b:0a:a8:
ca:eb:d2:fa:d1:37:e0:76:b6:c9:6e:f0:48:0c:72:
3c:26:c5:8c:b6:51:59:de:e7:e2:af:16:ab:6e:87:
4f:0f:fb:77:58:e2:7b:00:27:35:72:98:8d:77:c8:
1a:24:34:18:63:d8:21:11:03:2b:f7:38:3b:2d:28:
38:7c:29:50:ea:1d:e1:82:8c:b0:cf:5c:55:43:88:
a7:56:61:19:a4:40:5f:c8:1d:f3:43:75:5c:2d:ea:
c4:d6:ac:b3:3c:25:52:da:53:a1:90:2d:03:13:c7:
fa:2c:8a:a9:48:96:31:d2:81:0c:6b:97:3b:52:1d:
0c:28:22:81:a2:5a:3a:71:9d:84:c3:f8:3b:73:18:
56:29:66:5e:9d:ea:59:12:75:1d:29:95:a5:a0:69:
f6:53:5e:71:10:b7:85:d4:f1:af:19:01:69:44:01:
e1:8c:24:35:7d:eb:21:0d:43:98:17:11:13:c8:b5:
49:8b:9e:a2:63:11:ba:60:2c:7d:51:3b:fd:da:d5:
0d:37:ef:f1:df:9a:34:83:08:ab:8e:31:ed:db:d5:
8e:d0:1f:04:41:89:eb:19:c3:ce:7a:b8:19:6d:0d:
95:fa:2c:c7:d9:9e:76:0f:3a:29:77:7c:da:97:a5:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:53:09:52:A4:A6:A3:EA:9B:A1:C4:2B:3B:C5:60:55:31:CC:29
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:8d:bb:fd:0a:2f:3d:88:de:c4:22:ed:10:fc:68:42:99:
b1:88:d2:ce:79:39:58:b3:90:48:f0:9b:7f:42:bf:83:92:a7:
0a:c7:70:17:e4:29:7a:10:32:8b:7d:6d:70:f5:3d:62:77:5d:
da:48:f8:3c:4b:7f:5b:3b:14:70:b7:70:13:f9:fe:7a:39:ff:
c6:8e:29:00:c4:4c:90:1e:3f:25:36:f6:9a:bb:18:a6:31:4d:
86:e4:5c:32:ad:90:3f:3b:f7:25:71:a4:d5:fb:9c:ea:91:8d:
bc:a7:de:79:9e:f3:06:76:a7:74:ec:23:5d:60:73:d1:df:84:
99:06:aa:da:3c:a8:b4:7f:b1:36:9b:3f:4e:e6:0b:25:cc:25:
1d:6d:b0:4a:57:ba:d1:12:4a:db:c5:08:3a:4d:43:b0:ee:33:
e0:1d:5d:2e:c6:b0:65:40:0a:00:2a:38:bd:6c:39:2c:00:e6:
1b:e9:80:52:e4:f6:8e:0f:db:3f:4b:8d:39:35:d1:97:e8:d4:
3f:30:48:58:15:22:47:a5:bc:ed:c6:77:67:16:ad:6b:50:35:
9a:3f:43:1a:9e:4e:65:25:4f:51:6a:60:bf:32:98:3c:2e:56:
6b:c1:09:6a:e2:25:f8:d4:79:cd:ca:48:ca:54:4d:88:88:41:
13:31:ab:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjYwNTEzMDI0MTEwWhcNMjYwNTIwMDI0MTEwWjAYMRYwFAYD
VQQDEw02YTAzZTRjNi1lMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlE6lnMMuuV9uZD0LCqjK69L60TfgdrbJbvBIDHI8JsWMtlFZ3ufirxarbodP
D/t3WOJ7ACc1cpiNd8gaJDQYY9ghEQMr9zg7LSg4fClQ6h3hgoywz1xVQ4inVmEZ
pEBfyB3zQ3VcLerE1qyzPCVS2lOhkC0DE8f6LIqpSJYx0oEMa5c7Uh0MKCKBolo6
cZ2Ew/g7cxhWKWZenepZEnUdKZWloGn2U15xELeF1PGvGQFpRAHhjCQ1feshDUOY
FxETyLVJi56iYxG6YCx9UTv92tUNN+/x35o0gwirjjHt29WO0B8EQYnrGcPOergZ
bQ2V+izH2Z52Dzopd3zal6XfrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE96UwlS
pKaj6puhxCs7xWBVMcwpMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu
bnlfajBYcXlROHQwdDdsaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPZmNu/0KLz2I3sQi7RD8aEKZsYjSznk5WLOQSPCbf0K/g5KnCsdwF+QpehAy
i31tcPU9Yndd2kj4PEt/WzsUcLdwE/n+ejn/xo4pAMRMkB4/JTb2mrsYpjFNhuRc
Mq2QPzv3JXGk1fuc6pGNvKfeeZ7zBnandOwjXWBz0d+EmQaq2jyotH+xNps/TuYL
JcwlHW2wSle60RJK28UIOk1DsO4z4B1dLsawZUAKACo4vWw5LADmG+mAUuT2jg/b
P0uNOTXRl+jUPzBIWBUiR6W87cZ3Zxata1A1mj9DGp5OZSVPUWpgvzKYPC5Wa8EJ
auIl+NR5zcpIylRNiIhBEzGr1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:04:03 2026 by rpki-client