
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json)
Hash identifier: kp2tRkeOM/qwHQcbG/6K/Z9xx0EMmB0L31dpFT4ygU8=
Subject key identifier: C7:07:49:AC:2D:ED:4B:03:02:C9:1D:90:73:8F:B0:FB:44:73:49:A6
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial: 098D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
Manifest number: 0966
Signing time: Tue 12 May 2026 20:11:43 +0000
Manifest this update: Tue 12 May 2026 20:11:43 +0000
Manifest next update: Tue 19 May 2026 20:11:43 +0000
Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: pYiIVFD5p741WOfdHy+dHWaje2Q0dtjzi3YLwpHos/I=)
2: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: 1/1W8qYx2zRT+SB1jArsVcARbCr/b03bu7LoiR2N3yc=)
3: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: jyCcQPHB1GYl8fSSLexidNgFWzesxj3u8rWectLDfq0=)
4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 4FteVAZhXJnMTtQSuLVXL/Dj2oifA5aqn3kTr1yXK2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Validity
Not Before: May 12 20:11:43 2026 GMT
Not After : May 19 20:11:43 2026 GMT
Subject: CN=6a03897f-8839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:55:fb:c8:67:71:37:18:e7:26:d1:ef:02:
18:b8:99:92:a6:1a:57:07:d9:e1:d1:d6:b4:4c:e1:
08:2a:a3:6b:db:92:91:8d:99:b7:ef:2d:a1:31:66:
7d:8f:1c:8e:bd:04:55:54:a9:98:9f:75:fb:50:48:
fb:3a:2e:9a:be:7d:c6:90:66:e7:36:c6:ab:67:0c:
57:4d:99:03:1d:ad:81:72:20:25:e7:92:71:2b:26:
db:d6:4b:5c:51:f2:4b:cb:be:e2:a4:1c:03:05:d1:
d8:59:89:c8:ef:7e:ae:27:47:85:62:34:53:0e:9a:
29:95:10:22:3f:63:d1:c8:74:61:56:d9:ae:22:11:
78:76:43:c3:a2:4e:c4:34:60:ac:40:19:95:7a:20:
f3:e7:fc:86:28:7c:a5:9e:81:de:6c:03:1c:4e:0c:
ca:e7:e5:79:4a:83:b2:1e:12:f3:f8:51:e3:a0:a3:
70:1e:0d:66:f1:68:c9:c4:cd:cd:40:82:8e:1e:06:
2d:5f:59:4f:ad:ec:48:25:1c:2f:41:4f:2f:c0:c0:
52:16:ef:ea:d0:e5:16:e7:2b:b2:db:b5:77:08:f4:
70:30:87:25:34:16:cc:8d:c3:91:e4:ec:89:d0:42:
7b:87:9c:01:02:bf:39:56:ec:df:18:95:7c:42:e3:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:49:AC:2D:ED:4B:03:02:C9:1D:90:73:8F:B0:FB:44:73:49:A6
X509v3 Authority Key Identifier:
keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ab:0a:65:ac:56:98:6f:2d:15:ad:a0:71:4c:7e:d9:f8:51:
5c:6f:87:92:71:d3:d5:45:ae:9a:df:c1:2c:73:8d:ca:48:c3:
ef:2e:ed:96:68:bc:b6:16:17:91:1d:80:93:cb:8d:d4:1d:33:
f5:31:43:9b:6d:72:3d:a7:5f:d0:d0:65:3b:12:e0:cf:70:c9:
39:29:2a:4c:b8:1e:63:b9:c7:cf:ff:cc:93:e7:b9:f8:8f:fd:
31:39:a3:de:80:1b:1a:30:75:5e:9a:45:4a:d1:1f:b3:46:42:
b0:4e:41:2e:f1:f8:3e:b9:87:55:df:31:87:d8:42:dc:bb:26:
c2:e1:f3:72:e8:ab:4f:26:fb:29:d8:49:49:13:d1:4a:ba:e9:
0c:94:b7:b1:c9:20:df:4a:ae:1a:d9:ed:a4:e3:03:4b:68:0c:
70:ca:a1:4a:ef:5d:36:60:89:99:29:3b:44:99:25:39:5d:ed:
c4:b6:4a:6f:59:b0:a3:05:50:f7:58:dc:85:ed:68:c3:41:02:
12:37:2b:f8:51:51:74:46:71:96:af:17:3a:2a:68:58:56:54:
8c:ce:4d:8b:c2:b3:45:c6:83:29:14:32:bc:a5:d7:8a:2f:86:
59:89:cc:a1:de:e4:a7:82:ac:48:88:dc:64:51:aa:e3:af:50:
c9:e1:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:20 2026 by rpki-client