
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: 8QfiE4hpXZWVic2bFhOvUAEAXuyHfRdbUtCyIguO38s=
Subject key identifier: 18:75:7E:B4:C4:71:62:6C:1A:C0:57:9C:7B:81:51:D7:17:6C:45:FC
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1026
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 100D
Signing time: Thu 26 Mar 2026 17:24:10 +0000
Manifest this update: Thu 26 Mar 2026 17:24:10 +0000
Manifest next update: Thu 02 Apr 2026 17:24:10 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: 6GYSVao2Jy+sCB1zbGYt01zcopqkc2ry8GlucnE2ayg=)
2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: 4tcTWtdYNVrFzyHxN1+sODGXpMdP8UrLT8P96A9YCSI=)
3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: QCuDILdrzkvIxZmj1iyxDFhjLdsSBcMetxYoHDCi4D0=)
4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: rWIdUt0QV7XE1Z1Db6/TzOZnervJxxEdviXAUMODu4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4134 (0x1026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Mar 26 17:24:10 2026 GMT
Not After : Apr 2 17:24:10 2026 GMT
Subject: CN=69c56bba-c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:6e:60:6d:b5:bb:d1:9f:ed:5c:49:b0:9c:
d6:66:d1:80:1e:d5:04:72:27:04:4f:11:e4:29:12:
4a:be:47:b3:c4:93:99:da:a7:90:f6:c7:13:61:1f:
dd:a8:74:4e:9b:99:ad:ca:f5:ca:a1:bf:4a:3d:66:
cb:1e:c2:92:dc:31:a5:36:c7:48:e0:01:13:85:cb:
01:cb:da:32:35:be:e5:6b:9b:43:1c:6d:18:37:dd:
52:8b:27:fa:84:6f:28:4a:0e:75:a5:69:67:9f:c3:
7c:19:a1:be:1b:3a:7c:2b:ba:45:12:7e:b4:c0:38:
7f:2b:54:5a:4d:71:5c:2c:6e:c8:22:4d:fc:75:c7:
8a:50:2a:9f:15:00:59:96:73:d2:b4:5c:eb:d4:c2:
25:d8:09:8a:1b:2f:84:07:ff:11:03:44:b6:91:2b:
25:bf:1a:1c:34:c9:d8:fa:c7:20:e2:5f:cd:f0:50:
8d:fe:ac:65:3f:a3:b8:63:4b:19:98:50:a4:58:46:
1c:9d:72:66:46:18:87:35:f5:ad:3e:e4:1d:ba:b7:
4d:b4:77:d1:72:ab:a5:da:e5:b0:b1:6f:91:6f:79:
c2:2e:7c:0f:c7:73:8e:13:ff:eb:92:b3:21:11:7f:
17:59:a9:a0:3c:e6:2a:b2:c2:97:d7:7b:72:00:9b:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:7E:B4:C4:71:62:6C:1A:C0:57:9C:7B:81:51:D7:17:6C:45:FC
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:61:30:c0:99:23:3d:f0:fd:ed:cd:c3:07:07:bf:07:8c:
79:15:94:63:2f:08:57:3f:c7:45:d2:59:43:95:eb:c9:14:31:
05:13:3d:a3:38:6c:c4:7b:72:8c:05:1a:7c:9c:63:18:b4:d9:
c2:3a:1c:b1:3a:96:33:7c:e9:dc:79:b2:30:8e:b2:97:4b:c0:
3d:54:4e:35:6b:38:5d:c1:85:29:aa:d4:f6:91:1d:d8:f9:ed:
0e:4a:39:d3:42:35:65:34:bf:d5:c4:7e:b0:ba:87:ef:7b:11:
a1:f6:96:c0:cc:c8:46:6f:f7:bf:7f:de:af:db:04:60:9b:e3:
8c:94:55:3a:b2:98:f0:bd:62:9c:52:61:81:0a:95:46:76:31:
7b:36:88:9c:d2:e0:84:66:60:a3:50:60:bb:c3:cd:fb:e6:8a:
04:24:8f:60:3d:c1:17:6b:27:74:e2:08:73:4b:20:db:4f:9b:
c7:85:8d:0f:19:76:60:d2:71:09:42:b7:14:41:8e:bd:31:04:
18:39:73:fa:fd:0b:56:8b:5c:26:63:2e:8f:7d:97:c7:f8:5a:
ee:49:a8:82:81:84:f7:75:f3:e9:a1:50:15:21:4b:78:85:51:
73:b7:32:8f:dc:79:de:16:5f:ac:46:db:5c:ab:91:d9:a4:f2:
cc:1f:49:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICECYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjYwMzI2MTcyNDEwWhcNMjYwNDAyMTcyNDEwWjAYMRYwFAYD
VQQDEw02OWM1NmJiYS1jMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3zZuYG21u9Gf7VxJsJzWZtGAHtUEcicETxHkKRJKvkezxJOZ2qeQ9scTYR/d
qHROm5mtyvXKob9KPWbLHsKS3DGlNsdI4AEThcsBy9oyNb7la5tDHG0YN91Siyf6
hG8oSg51pWlnn8N8GaG+Gzp8K7pFEn60wDh/K1RaTXFcLG7IIk38dceKUCqfFQBZ
lnPStFzr1MIl2AmKGy+EB/8RA0S2kSslvxocNMnY+scg4l/N8FCN/qxlP6O4Y0sZ
mFCkWEYcnXJmRhiHNfWtPuQdurdNtHfRcqul2uWwsW+Rb3nCLnwPx3OOE//rkrMh
EX8XWamgPOYqssKX13tyAJtaNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh1frTE
cWJsGsBXnHuBUdcXbEX8MB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXf1hMMCZIz3w/e3NwwcHvweMeRWUYy8IVz/HRdJZQ5XryRQxBRM9ozhsxHty
jAUafJxjGLTZwjocsTqWM3zp3HmyMI6yl0vAPVRONWs4XcGFKarU9pEd2PntDko5
00I1ZTS/1cR+sLqH73sRofaWwMzIRm/3v3/er9sEYJvjjJRVOrKY8L1inFJhgQqV
RnYxezaInNLghGZgo1Bgu8PN++aKBCSPYD3BF2sndOIIc0sg20+bx4WNDxl2YNJx
CUK3FEGOvTEEGDlz+v0LVotcJmMuj32Xx/ha7kmogoGE93Xz6aFQFSFLeIVRc7cy
j9x53hZfrEbbXKuR2aTyzB9JPQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:00 2026 by rpki-client