
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier: Jvl7yNFq47bM7+nyDktaSjbzMtcepeHRDrgdjpfUzbg=
Subject key identifier: 08:9F:B7:F5:9C:2A:A1:67:27:FD:85:46:52:C0:0F:56:20:9F:0E:B3
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number: 021F
Signing time: Wed 25 Mar 2026 02:13:09 +0000
Manifest this update: Wed 25 Mar 2026 02:13:09 +0000
Manifest next update: Wed 01 Apr 2026 02:13:09 +0000
Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: PMvrAbp/suBs5//ilOYIbJpmlQgf136ST1ctaSPSyso=)
2: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
3: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Mar 25 02:13:09 2026 GMT
Not After : Apr 1 02:13:09 2026 GMT
Subject: CN=69c344b5-12fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:8e:78:c4:8c:92:8f:c5:c8:5d:1d:75:ca:
75:e2:e4:e9:50:67:02:ef:1d:47:98:98:3c:52:18:
82:44:c7:0e:9d:26:b1:f8:00:e9:ed:70:68:0c:10:
2d:51:37:4f:06:d2:2b:83:d5:9d:a3:d3:6b:28:59:
28:6a:03:a4:c7:04:d6:6f:76:c1:aa:2c:ad:5c:8d:
6f:f0:de:e9:c4:66:4a:71:e6:3e:68:39:3e:22:c6:
57:6f:2b:ff:40:8d:e3:ee:ca:02:73:d8:77:c1:e0:
5c:55:0a:9e:25:72:a6:30:8a:1a:13:a2:c5:8a:a0:
76:98:bf:52:fc:3c:d3:0b:dc:9e:53:85:1a:9f:7d:
a0:d7:1f:42:99:e9:23:c4:c1:d6:41:13:7f:22:fd:
67:89:47:8c:2c:ca:31:71:8b:c7:a4:29:0b:66:cf:
ba:ae:8e:a7:76:35:94:f0:18:f5:51:25:ac:dd:20:
f2:32:7d:1b:6f:fe:07:ac:b1:0e:0c:40:8f:ab:25:
c4:68:7e:18:76:a8:45:c6:da:0b:0c:c6:c9:e5:ec:
ec:6f:e5:40:76:aa:6b:d9:92:25:ff:1d:a2:d2:0c:
1b:74:23:86:8b:86:e0:57:ba:59:67:b7:5f:a2:19:
64:84:d0:3e:05:ae:1a:b0:27:58:6d:95:4f:0b:61:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:B7:F5:9C:2A:A1:67:27:FD:85:46:52:C0:0F:56:20:9F:0E:B3
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:38:a7:02:9d:56:70:05:03:e3:a9:92:4d:46:9c:36:a0:
12:6d:a7:b1:64:e5:fd:91:f6:05:59:8a:62:17:89:1c:09:07:
ee:b1:f0:fa:c5:8c:d9:56:8f:54:2f:76:20:14:06:5f:d8:ae:
30:2a:56:ce:39:f3:9f:3c:62:7f:55:74:90:2e:af:a0:af:9c:
27:8c:2e:30:5e:7f:cc:f1:7a:08:a3:7b:4c:57:9a:7f:0e:d7:
3e:7f:85:51:9e:74:21:f2:65:64:35:2d:a9:c0:e5:0e:95:4a:
62:fb:7b:3f:cc:f8:e2:f2:ad:a3:89:93:6a:4d:65:08:02:03:
be:92:c2:e8:e8:c8:6b:8e:b9:91:95:34:1c:43:3d:f9:b5:6f:
62:7d:63:bd:36:9b:55:b9:bf:d2:23:ab:07:29:a2:0b:9c:0c:
c5:f5:f3:db:41:84:5a:cd:07:16:8f:c4:a4:29:97:fa:47:08:
ed:a1:f6:54:40:eb:94:ee:bb:89:2c:a7:a7:ca:70:a2:40:ac:
09:6b:b3:bf:44:ac:21:85:fc:fc:be:ac:22:91:3f:08:c1:77:
75:b7:97:6b:ee:bb:f0:25:47:c4:0a:2c:e0:d7:90:8d:e4:86:
3f:96:2d:5c:05:d4:0a:a9:5b:01:ae:b1:1b:b5:7b:99:00:93:
68:84:13:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjYwMzI1MDIxMzA5WhcNMjYwNDAxMDIxMzA5WjAYMRYwFAYD
VQQDEw02OWMzNDRiNS0xMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsKOeMSMko/FyF0ddcp14uTpUGcC7x1HmJg8UhiCRMcOnSax+ADp7XBoDBAt
UTdPBtIrg9Wdo9NrKFkoagOkxwTWb3bBqiytXI1v8N7pxGZKceY+aDk+IsZXbyv/
QI3j7soCc9h3weBcVQqeJXKmMIoaE6LFiqB2mL9S/DzTC9yeU4Uan32g1x9Cmekj
xMHWQRN/Iv1niUeMLMoxcYvHpCkLZs+6ro6ndjWU8Bj1USWs3SDyMn0bb/4HrLEO
DECPqyXEaH4YdqhFxtoLDMbJ5ezsb+VAdqpr2ZIl/x2i0gwbdCOGi4bgV7pZZ7df
ohlkhNA+Ba4asCdYbZVPC2FmiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAift/Wc
KqFnJ/2FRlLAD1Ygnw6zMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu
bnlfajBYcXlROHQwdDdsaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjaA4pwKdVnAFA+Opkk1GnDagEm2nsWTl/ZH2BVmKYheJHAkH7rHw+sWM2VaP
VC92IBQGX9iuMCpWzjnznzxif1V0kC6voK+cJ4wuMF5/zPF6CKN7TFeafw7XPn+F
UZ50IfJlZDUtqcDlDpVKYvt7P8z44vKto4mTak1lCAIDvpLC6OjIa465kZU0HEM9
+bVvYn1jvTabVbm/0iOrBymiC5wMxfXz20GEWs0HFo/EpCmX+kcI7aH2VEDrlO67
iSynp8pwokCsCWuzv0SsIYX8/L6sIpE/CMF3dbeXa+678CVHxAos4NeQjeSGP5Yt
XAXUCqlbAa6xG7V7mQCTaIQTpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:36 2026 by rpki-client