
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File: 7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier: /NNlPcI3dAhKadm3lFJ4Ea6VTO/XKaW1Ee4/xiIXTxY=
Subject key identifier: A4:48:66:F4:B8:BA:1B:74:51:6B:15:6C:93:7A:31:BB:49:D2:4D:B2
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial: 0D47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number: 0D3B
Signing time: Thu 26 Mar 2026 17:57:48 +0000
Manifest this update: Thu 26 Mar 2026 17:57:47 +0000
Manifest next update: Thu 02 Apr 2026 17:57:47 +0000
Files and hashes: 1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: mQ3oGLWr0aa34Cgpk+2hUvx9npbjn7HF1tlHn+fKsu8=)
2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Validity
Not Before: Mar 26 17:57:47 2026 GMT
Not After : Apr 2 17:57:47 2026 GMT
Subject: CN=69c5739b-db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:9c:99:32:f0:42:c7:3c:33:29:bf:7a:c8:
d5:a9:61:c1:61:f4:7d:e9:19:e7:20:a6:99:45:a0:
7e:c9:43:c1:56:ee:90:9b:27:e7:3d:8a:1d:88:4f:
b2:b1:65:07:9d:96:13:57:e9:61:b3:94:b1:67:0c:
10:fa:13:e3:46:00:e8:b6:a7:be:aa:f8:bd:3f:6e:
2d:3a:c5:98:1d:2c:37:c6:6c:b7:c5:45:e1:1d:13:
f1:e7:16:44:67:80:15:c6:99:89:cc:d0:a3:34:46:
2a:f6:ed:51:b9:69:48:5f:ac:27:8f:ad:c2:f7:3b:
08:77:5c:40:b9:20:8b:c0:04:fb:8c:f8:1f:86:44:
e4:a7:eb:ad:34:94:f7:ad:87:85:7c:f3:08:7d:d3:
3f:54:35:b3:37:34:5c:cc:9b:ed:87:e9:85:6b:e6:
60:ea:ab:a0:a5:24:2b:8f:cf:28:31:88:ff:42:95:
78:fd:7e:46:44:ff:60:6d:83:ec:b1:b0:7a:2f:53:
94:45:62:53:67:4c:98:1a:d1:e7:58:0a:2c:c5:25:
f0:ec:ae:d1:6a:37:e6:ee:e6:88:b3:83:1a:3a:40:
07:af:db:52:25:e3:90:9d:e2:a0:86:2f:a8:23:92:
de:b0:90:7a:8c:de:e9:e9:68:d7:9d:d4:12:34:ec:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:66:F4:B8:BA:1B:74:51:6B:15:6C:93:7A:31:BB:49:D2:4D:B2
X509v3 Authority Key Identifier:
keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:93:19:fb:5e:0d:81:49:0f:49:62:69:b6:39:d8:4e:8f:7c:
aa:d2:37:7d:d2:32:a1:13:0d:d3:a5:36:d5:74:6b:ed:30:d6:
d7:77:3c:fa:ba:8b:0c:40:9c:d9:27:63:e1:62:02:ab:af:f5:
82:0c:e4:6b:b0:28:54:d8:ae:de:1f:97:e9:27:6d:50:59:75:
e2:1a:8d:ea:6b:dd:f1:86:ff:5a:f0:f4:fc:a3:f9:33:43:f7:
b1:3c:1e:6f:6b:b2:ee:c1:a8:9d:81:c9:e1:64:ad:fc:0f:72:
83:96:0d:e3:b8:4f:c0:7a:ee:ee:0e:25:60:89:33:e4:5e:62:
95:68:d8:44:4a:30:fb:97:d6:4f:c7:00:7c:2d:e7:ee:50:1c:
2f:11:c3:b2:86:6b:18:78:08:2f:03:5c:81:f3:4e:2d:78:2b:
b8:27:f7:52:85:f4:5c:b2:8b:d0:a2:c0:5e:bb:78:91:65:ae:
32:98:8c:38:52:c5:33:81:cc:7a:8e:d7:af:95:f9:45:d7:fb:
43:86:f8:bb:7e:c2:f0:fe:c7:4a:a0:9e:d9:9f:87:6f:73:f3:
cb:e9:59:2c:f8:00:e6:6d:29:b9:e6:9b:c8:d6:33:35:0a:9c:
95:4e:ee:02:26:60:72:ed:df:f3:48:24:5b:cf:74:50:cd:47:
d3:69:f2:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF
QzE0Njk3M0EwHhcNMjYwMzI2MTc1NzQ3WhcNMjYwNDAyMTc1NzQ3WjAYMRYwFAYD
VQQDEw02OWM1NzM5Yi1kYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviGcmTLwQsc8Mym/esjVqWHBYfR96RnnIKaZRaB+yUPBVu6QmyfnPYodiE+y
sWUHnZYTV+lhs5SxZwwQ+hPjRgDotqe+qvi9P24tOsWYHSw3xmy3xUXhHRPx5xZE
Z4AVxpmJzNCjNEYq9u1RuWlIX6wnj63C9zsId1xAuSCLwAT7jPgfhkTkp+utNJT3
rYeFfPMIfdM/VDWzNzRczJvth+mFa+Zg6qugpSQrj88oMYj/QpV4/X5GRP9gbYPs
sbB6L1OURWJTZ0yYGtHnWAosxSXw7K7Rajfm7uaIs4MaOkAHr9tSJeOQneKghi+o
I5LesJB6jN7p6WjXndQSNOzRxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRIZvS4
uht0UWsVbJN6MbtJ0k2yMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0
OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTE3MS80RjU3RTlCRUY0OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRr
bFJMUHpuaXkydnpzRkdsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ5MZ+14NgUkPSWJptjnYTo98qtI3fdIyoRMN06U21XRr7TDW13c8+rqLDECc
2Sdj4WICq6/1ggzka7AoVNiu3h+X6SdtUFl14hqN6mvd8Yb/WvD0/KP5M0P3sTwe
b2uy7sGonYHJ4WSt/A9yg5YN47hPwHru7g4lYIkz5F5ilWjYREow+5fWT8cAfC3n
7lAcLxHDsoZrGHgILwNcgfNOLXgruCf3UoX0XLKL0KLAXrt4kWWuMpiMOFLFM4HM
eo7Xr5X5Rdf7Q4b4u37C8P7HSqCe2Z+Hb3Pzy+lZLPgA5m0pueabyNYzNQqclU7u
AiZgcu3f80gkW890UM1H02nyLQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 09:40:10 2026 by rpki-client