
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: 3R1cir+H5PKRbZtD/0csZSPfpqY+/D7Uf5Z9211u9QI=
Subject key identifier: 1C:83:57:C3:11:24:6B:2D:B1:4B:76:C8:1A:79:E7:C8:5E:8B:20:F0
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1043
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 1027
Signing time: Tue 12 May 2026 17:27:27 +0000
Manifest this update: Tue 12 May 2026 17:27:27 +0000
Manifest next update: Tue 19 May 2026 17:27:27 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: 9SVm1rdey9zSa0Slp+OKr1unfv+DOGvNcmo1xoXcJXs=)
2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
3: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
4: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4163 (0x1043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: May 12 17:27:27 2026 GMT
Not After : May 19 17:27:27 2026 GMT
Subject: CN=6a0362ff-d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:8f:7e:68:15:70:01:69:5b:d7:4e:06:88:
5b:25:de:87:8a:e5:9c:a5:d0:3c:89:cd:65:fd:40:
34:50:ea:03:c7:b5:41:dd:6b:19:1c:cd:1e:74:35:
ca:4c:be:2f:51:99:1a:0b:ad:f8:7f:64:8a:7f:b1:
40:e1:6c:1a:73:4f:1f:37:3a:36:44:fe:cd:21:a0:
e6:c4:1f:db:20:cc:61:48:72:a5:3c:31:37:75:6e:
03:32:69:5e:e3:e4:e7:ea:59:67:47:c1:b0:49:48:
52:f7:8b:1a:9c:c9:50:e2:bb:5a:43:5e:38:85:52:
c5:21:62:11:a2:07:c2:9d:23:72:c1:0e:c0:60:eb:
b4:e3:ee:6b:55:ed:87:a2:35:97:58:7b:97:75:88:
13:4e:1c:7d:80:11:7e:8b:16:b0:57:73:3d:24:88:
df:14:b2:98:c2:d6:51:dd:16:42:af:19:ce:a1:78:
88:53:cc:15:39:8d:cd:a9:16:25:21:48:31:57:65:
ec:ef:59:53:c5:40:7f:b4:81:39:7a:cb:fe:c7:a3:
c4:17:a9:26:a5:a0:0c:6b:b3:3f:f7:64:99:de:c7:
8c:77:92:a9:e9:4b:04:3d:8d:8a:de:51:ff:1e:0f:
18:48:dc:80:cf:8a:ce:a0:4f:8a:89:8b:b8:a7:83:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:57:C3:11:24:6B:2D:B1:4B:76:C8:1A:79:E7:C8:5E:8B:20:F0
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:d9:d2:55:46:6c:ec:ce:c8:71:fa:48:57:0d:40:05:cd:
83:8e:07:99:90:5c:60:1f:6a:d0:75:fa:94:cd:08:57:f1:05:
71:a6:f7:ee:fa:9c:24:e6:da:5c:c6:36:ad:13:d5:07:a4:be:
5c:c2:4e:de:29:95:48:e6:10:3f:8a:69:20:aa:dc:37:f7:49:
aa:60:b2:53:f3:27:ae:31:af:63:ed:0c:50:07:9b:22:a5:54:
53:38:f6:51:2b:38:64:bb:16:82:31:0c:50:de:58:0a:86:6f:
54:09:cc:eb:08:ad:69:72:2f:99:4f:39:9d:5c:7f:5d:d8:e8:
26:ac:37:82:9e:3a:81:ef:ab:5d:00:19:f6:82:12:3a:86:a4:
87:07:28:81:45:8c:de:81:5b:ab:59:6c:5b:9f:17:01:c0:87:
c6:89:3b:7b:d3:4f:31:a8:c4:26:dc:39:25:a1:5f:46:a4:a6:
3f:9b:0c:c6:8f:51:2b:01:17:2a:39:15:78:c2:8c:c3:1b:8f:
10:24:05:82:79:9b:d9:05:06:4a:20:2c:9a:ad:26:f0:cc:01:
b4:22:62:02:78:41:19:ab:50:f9:bb:da:d7:4c:d3:5a:1b:f6:
3c:d1:bf:9f:75:76:bc:5d:93:73:d2:71:fd:7f:b8:e2:cc:80:
0e:90:65:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjYwNTEyMTcyNzI3WhcNMjYwNTE5MTcyNzI3WjAYMRYwFAYD
VQQDEw02YTAzNjJmZi1kODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl+aPfmgVcAFpW9dOBohbJd6HiuWcpdA8ic1l/UA0UOoDx7VB3WsZHM0edDXK
TL4vUZkaC634f2SKf7FA4Wwac08fNzo2RP7NIaDmxB/bIMxhSHKlPDE3dW4DMmle
4+Tn6llnR8GwSUhS94sanMlQ4rtaQ144hVLFIWIRogfCnSNywQ7AYOu04+5rVe2H
ojWXWHuXdYgTThx9gBF+ixawV3M9JIjfFLKYwtZR3RZCrxnOoXiIU8wVOY3NqRYl
IUgxV2Xs71lTxUB/tIE5esv+x6PEF6kmpaAMa7M/92SZ3seMd5Kp6UsEPY2K3lH/
Hg8YSNyAz4rOoE+KiYu4p4PDlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByDV8MR
JGstsUt2yBp558heiyDwMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHTLZ0lVGbOzOyHH6SFcNQAXNg44HmZBcYB9q0HX6lM0IV/EFcab37vqcJOba
XMY2rRPVB6S+XMJO3imVSOYQP4ppIKrcN/dJqmCyU/MnrjGvY+0MUAebIqVUUzj2
USs4ZLsWgjEMUN5YCoZvVAnM6witaXIvmU85nVx/XdjoJqw3gp46ge+rXQAZ9oIS
OoakhwcogUWM3oFbq1lsW58XAcCHxok7e9NPMajEJtw5JaFfRqSmP5sMxo9RKwEX
KjkVeMKMwxuPECQFgnmb2QUGSiAsmq0m8MwBtCJiAnhBGatQ+bva10zTWhv2PNG/
n3V2vF2Tc9Jx/X+44syADpBljw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:54 2026 by rpki-client