
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: xSrK07t6O4Hf6fL6Nk3/KpoU6EDWmY9/IvXkWUyVhBw=
Subject key identifier: 8A:C5:74:BD:A3:13:AF:D5:CD:AC:F0:AE:51:64:93:34:13:64:05:77
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1087
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 106B
Signing time: Tue 22 Sep 2026 17:18:03 +0000
Manifest this update: Tue 22 Sep 2026 17:18:03 +0000
Manifest next update: Tue 29 Sep 2026 17:18:03 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: AGGNH7/6OeWwvRntyk26a9to7oG2AJclPZAmc/jiUgI=)
2: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
3: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Sep 22 17:18:03 2026 GMT
Not After : Sep 29 17:18:03 2026 GMT
Subject: CN=6ab2b84b-7237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:d3:65:e0:2b:fe:4c:34:e6:da:8a:5d:fa:
19:fb:2f:4d:31:30:59:97:76:aa:e5:59:9b:75:d5:
3e:17:8e:8d:fb:e0:08:8e:30:c3:3f:c7:f9:4f:67:
60:f1:e6:62:a4:18:fc:38:4e:76:f9:42:05:44:62:
cc:90:a4:3f:ae:74:6e:9b:d3:21:25:0a:12:74:36:
fe:15:05:0d:f6:01:4d:2a:e3:b4:c4:a5:c4:8d:30:
05:66:45:30:df:ed:9e:1b:bb:c1:35:1e:20:b8:53:
2c:10:ce:20:46:73:d0:11:64:5c:a0:68:22:5f:3a:
29:84:ed:ba:2d:0b:e3:26:b3:86:3e:a1:5a:c9:62:
44:84:a6:e7:13:43:1e:d4:28:67:82:9b:c8:c2:5e:
74:d2:cb:a1:8c:7f:b6:33:8b:14:0f:35:33:30:7e:
00:1d:81:d9:21:08:91:c3:65:d1:34:51:22:28:5d:
3d:32:da:64:a6:0c:30:f7:28:51:48:4d:b5:84:d7:
83:2c:20:5e:7e:8e:36:cf:17:e6:59:46:bf:57:a7:
08:87:ac:e8:ef:ee:bc:2a:49:0e:9b:4a:f8:8f:99:
d8:4a:d3:f5:44:4b:ec:2c:6a:d8:60:ce:b9:69:58:
fb:82:c3:e5:46:47:2f:1a:21:f9:69:fc:c7:5b:85:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:74:BD:A3:13:AF:D5:CD:AC:F0:AE:51:64:93:34:13:64:05:77
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:40:3d:9f:1f:03:fc:43:41:02:fb:43:ea:50:a9:b3:c7:
da:37:7a:0d:77:9d:44:cc:b3:88:d1:61:68:79:cd:8f:c1:ce:
6e:12:63:98:65:5a:a8:c8:88:13:e9:d1:e1:6b:79:7b:56:39:
18:05:79:57:e0:38:c9:19:7e:93:d1:9d:4b:cb:92:0e:8a:32:
a4:78:71:24:9b:da:86:92:8b:27:84:c6:80:a2:7c:e7:5b:eb:
f6:7d:66:e1:21:8b:34:7f:19:7c:d7:41:5c:ba:65:e7:e1:20:
26:83:84:94:29:6e:f4:1b:11:76:dd:1a:46:ad:3a:e4:be:9a:
0d:bb:41:23:d8:04:7d:f5:25:8e:43:70:f3:90:de:8c:62:45:
5a:43:43:23:7c:79:82:55:1b:55:2b:53:36:e7:4e:ea:26:a3:
79:14:4c:07:fc:c4:18:ed:f3:79:13:f6:31:14:09:bd:16:e5:
9e:ca:e8:d3:21:28:f0:6b:81:1e:f1:62:25:ab:84:22:c9:64:
3a:78:f8:e1:e5:96:f9:78:84:53:45:b1:19:5a:ef:cb:ed:86:
67:c4:71:a9:87:c3:97:a6:2d:15:9f:1a:4b:2a:7d:71:be:47:
7e:ec:d1:ed:29:76:e3:85:93:a4:e8:44:a5:9c:bb:86:45:b4:
59:2b:72:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjYwOTIyMTcxODAzWhcNMjYwOTI5MTcxODAzWjAYMRYwFAYD
VQQDEw02YWIyYjg0Yi03MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnDTZeAr/kw05tqKXfoZ+y9NMTBZl3aq5VmbddU+F46N++AIjjDDP8f5T2dg
8eZipBj8OE52+UIFRGLMkKQ/rnRum9MhJQoSdDb+FQUN9gFNKuO0xKXEjTAFZkUw
3+2eG7vBNR4guFMsEM4gRnPQEWRcoGgiXzophO26LQvjJrOGPqFayWJEhKbnE0Me
1ChngpvIwl500suhjH+2M4sUDzUzMH4AHYHZIQiRw2XRNFEiKF09Mtpkpgww9yhR
SE21hNeDLCBefo42zxfmWUa/V6cIh6zo7+68KkkOm0r4j5nYStP1REvsLGrYYM65
aVj7gsPlRkcvGiH5afzHW4UNmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrFdL2j
E6/VzazwrlFkkzQTZAV3MB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM3FAPZ8fA/xDQQL7Q+pQqbPH2jd6DXedRMyziNFhaHnNj8HObhJjmGVaqMiI
E+nR4Wt5e1Y5GAV5V+A4yRl+k9GdS8uSDooypHhxJJvahpKLJ4TGgKJ851vr9n1m
4SGLNH8ZfNdBXLpl5+EgJoOElClu9BsRdt0aRq065L6aDbtBI9gEffUljkNw85De
jGJFWkNDI3x5glUbVStTNudO6iajeRRMB/zEGO3zeRP2MRQJvRblnsro0yEo8GuB
HvFiJauEIslkOnj44eWW+XiEU0WxGVrvy+2GZ8RxqYfDl6YtFZ8aSyp9cb5HfuzR
7Sl244WTpOhEpZy7hkW0WStyJQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:05:08 2026 by rpki-client