
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier: aL/xvnYl1vBvu7pwHCtdtGcjyq8Sfx4Y60FE6UjnBiY=
Subject key identifier: 20:31:A4:29:C5:BA:2F:04:92:9F:D0:79:4E:73:34:DD:75:69:21:40
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number: 0161
Signing time: Mon 11 May 2026 05:00:57 +0000
Manifest this update: Mon 11 May 2026 05:00:56 +0000
Manifest next update: Mon 18 May 2026 05:00:56 +0000
Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: 7ZOz9qMRB0dayd+Bh+er84+vqHYLvH3YfBLRF3RO0lM=)
2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Validity
Not Before: May 11 05:00:56 2026 GMT
Not After : May 18 05:00:56 2026 GMT
Subject: CN=6a016289-d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:b6:1f:40:33:c9:45:ed:41:a5:fc:03:d0:
25:03:ab:5e:21:02:ad:a0:04:e8:6d:77:80:d6:08:
0d:35:42:87:08:d0:e6:44:62:26:81:94:36:cf:d5:
c6:e9:ac:78:20:ce:89:3e:b7:ce:26:16:a5:2c:7a:
6b:96:01:9c:bb:47:44:bd:73:76:f0:75:32:f0:f9:
cf:b3:21:a7:55:7b:51:78:bd:98:26:a1:63:10:ad:
04:95:8f:fb:ef:9f:58:a3:72:30:fc:0b:e6:24:a9:
b6:1f:6d:0b:91:0f:25:28:f5:86:da:e4:d4:87:21:
b3:ce:50:d7:c3:14:90:74:08:62:2f:8a:77:e6:79:
f4:30:1d:1c:fc:01:d5:9a:ae:c6:16:46:43:6b:f2:
d3:58:65:38:81:a4:20:ab:08:b0:e0:b5:21:d7:a8:
82:d6:b5:37:f1:5f:26:58:a9:48:35:1d:68:48:cd:
a3:93:88:c5:39:4b:6e:d5:10:02:bd:43:a1:73:7d:
ab:3f:c9:01:f8:9a:b6:40:91:e7:29:be:f2:34:29:
b5:d3:3f:bf:ef:ba:96:70:a5:92:12:3b:08:58:59:
fd:70:8c:12:91:61:3f:f7:ed:e1:2e:34:74:2e:2b:
61:23:aa:4e:d0:db:f5:1e:83:a7:e0:41:12:1f:46:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:A4:29:C5:BA:2F:04:92:9F:D0:79:4E:73:34:DD:75:69:21:40
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:39:07:a6:8a:c4:b0:63:40:b0:43:9b:ae:b5:d5:36:72:
26:02:fd:0f:78:88:89:c2:6a:2b:ec:be:a6:f9:24:4c:66:b2:
8e:77:57:ef:25:14:ec:5c:8f:34:cd:04:fe:6c:e7:6c:b7:09:
cd:ea:12:ee:2c:c1:35:57:c8:a2:21:20:7b:29:bc:b2:b4:6f:
08:f4:7d:8f:84:9e:eb:2c:96:a7:32:ad:2d:46:dd:36:2e:4b:
ad:cb:b2:52:73:19:fd:0b:c2:13:0f:6a:86:6d:03:7e:ee:0d:
bb:85:8a:5e:2c:9f:a7:e2:90:28:53:f6:58:0e:0c:a7:64:ca:
d1:d3:d7:69:d5:77:d5:49:e9:b7:c9:b4:6c:24:f4:11:d7:27:
54:33:20:cb:d0:54:76:d7:c6:24:e6:27:5d:52:05:63:f7:0d:
e5:15:eb:3b:c9:23:e3:4f:51:8a:6f:00:f4:7e:1c:11:7d:0c:
22:2c:7c:d4:4a:4b:01:ef:fd:3b:c0:f1:6e:97:1f:71:49:c5:
88:33:b2:51:4f:69:98:84:0c:51:c6:0e:7e:fc:7d:f3:e6:72:
99:ce:2e:30:07:71:d5:bb:63:be:c1:b9:92:94:cd:27:79:8c:
ac:53:57:8b:6f:24:bf:99:77:14:2b:ee:28:d9:26:35:e9:64:
a5:80:24:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB
OTEzMTU1MDMwHhcNMjYwNTExMDUwMDU2WhcNMjYwNTE4MDUwMDU2WjAYMRYwFAYD
VQQDEw02YTAxNjI4OS1kMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8y2H0AzyUXtQaX8A9AlA6teIQKtoATobXeA1ggNNUKHCNDmRGImgZQ2z9XG
6ax4IM6JPrfOJhalLHprlgGcu0dEvXN28HUy8PnPsyGnVXtReL2YJqFjEK0ElY/7
759Yo3Iw/AvmJKm2H20LkQ8lKPWG2uTUhyGzzlDXwxSQdAhiL4p35nn0MB0c/AHV
mq7GFkZDa/LTWGU4gaQgqwiw4LUh16iC1rU38V8mWKlINR1oSM2jk4jFOUtu1RAC
vUOhc32rP8kB+Jq2QJHnKb7yNCm10z+/77qWcKWSEjsIWFn9cIwSkWE/9+3hLjR0
LithI6pO0Nv1HoOn4EESH0YLfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAxpCnF
ui8Ekp/QeU5zNN11aSFAMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4
RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3
RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfA5B6aKxLBjQLBDm6611TZyJgL9D3iIicJqK+y+pvkkTGayjndX7yUU7FyP
NM0E/mznbLcJzeoS7izBNVfIoiEgeym8srRvCPR9j4Se6yyWpzKtLUbdNi5Lrcuy
UnMZ/QvCEw9qhm0Dfu4Nu4WKXiyfp+KQKFP2WA4Mp2TK0dPXadV31Unpt8m0bCT0
EdcnVDMgy9BUdtfGJOYnXVIFY/cN5RXrO8kj409Rim8A9H4cEX0MIix81EpLAe/9
O8DxbpcfcUnFiDOyUU9pmIQMUcYOfvx98+Zymc4uMAdx1btjvsG5kpTNJ3mMrFNX
i28kv5l3FCvuKNkmNelkpYAkCA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:35:03 2026 by rpki-client