
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier: mOyC/N7I728+rMmgigX7Bydp0qwES103tIsTKGAufq4=
Subject key identifier: 35:8E:BB:17:43:F1:9A:E8:18:6F:08:9C:D8:75:6C:C0:24:50:76:7B
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number: 01B7
Signing time: Wed 25 Mar 2026 03:41:11 +0000
Manifest this update: Wed 25 Mar 2026 03:41:11 +0000
Manifest next update: Wed 01 Apr 2026 03:41:11 +0000
Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: Q0sSmQsHq0/F0OgYo6ZwxGNKZCK/f7HZ+E0wd7yW5d8=)
2: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: vve+SNs5Y00q7s7j0iECqDMKhK39FhN+snt799G9ovQ=)
3: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=)
4: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=)
5: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: 5lDSpzmwVyIgUi4h17dQR5e2pFC4svpJ9hXm3aYNHDw=)
6: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: u8tryEt8wfaKIyYRGhYJY4HgZ/+NDx5NswoCB2TbM44=)
7: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VvZ1QMS2eLQmDgXa34u3h0OjHEC9RVEvgUYgcW//Cxk=)
8: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: SBh7/ucfyQHiZDQqOYlLERzU0mOVNQDSYZbvPKFmV+k=)
9: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: JW1ClKNrVsnlpg/5abZXtZdRfLQRkQCfIYnNrzyJDlk=)
10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 9WvOYEKrWLRFlgDH3zQFRXn/DZmOYwHZaJMDQfO7n/g=)
11: BB17221E211611F08D31C34DC4F9AE02.roa (hash: zi4/aUqGR718bniuf1jQK9sOH3knTVcJf3T+VbBiSok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Mar 25 03:41:11 2026 GMT
Not After : Apr 1 03:41:11 2026 GMT
Subject: CN=69c35957-8c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:1a:1c:b2:2f:38:da:1e:02:c0:c6:01:c9:
40:0b:82:3a:1f:23:7f:87:68:39:12:7b:c7:9d:9e:
2d:46:72:62:59:97:48:b0:06:17:a1:e5:12:d1:ee:
5f:33:bb:8a:b7:e1:86:23:bc:4f:eb:bd:c8:93:4d:
d9:ff:fe:5c:d0:f0:60:4f:47:42:eb:e1:79:0f:8e:
b8:33:8e:03:df:40:2e:60:3d:d3:f9:8d:bd:99:da:
31:9a:db:d0:99:b0:ce:95:ab:9b:6a:cd:72:b8:c5:
9b:e7:db:97:fe:2c:cd:18:41:a6:04:62:38:96:55:
d1:db:57:86:ad:42:19:78:e5:ec:95:4f:2f:84:53:
f8:90:84:b3:83:63:ca:c9:16:be:25:14:a7:20:9e:
6c:82:67:96:1b:05:b7:df:56:3f:ee:6f:49:7f:c5:
11:a9:78:31:54:69:0f:1d:ff:75:c4:da:fb:c7:7b:
3e:e3:89:37:f0:b7:09:c2:d5:be:23:fa:d5:70:66:
ba:1f:dc:26:fb:c2:47:96:d3:01:ec:26:f1:ce:b8:
ff:c5:0c:90:92:3d:35:f9:23:98:e9:37:b2:f1:02:
cd:cd:cb:8e:36:db:18:15:a6:22:79:75:96:39:92:
db:4d:2f:70:ad:35:da:cb:f1:59:37:47:6b:78:e8:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:BB:17:43:F1:9A:E8:18:6F:08:9C:D8:75:6C:C0:24:50:76:7B
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:9e:80:40:12:53:02:23:b1:8a:ea:fe:15:13:dd:c7:c5:
cd:b9:02:d5:04:42:18:45:59:bd:ad:f7:ef:20:45:e2:60:18:
54:c9:33:87:01:de:7d:f8:e6:cc:7c:8a:5c:b2:61:df:de:2b:
1e:82:db:79:78:2f:3c:83:74:f1:8b:e9:d9:f3:a9:4e:81:bc:
90:12:f6:fa:43:9d:5b:f8:13:03:a9:53:e2:a2:9c:ce:e8:13:
96:4e:73:e5:92:55:8d:f9:f7:e5:53:23:f6:26:9a:11:c2:1d:
27:05:16:8a:dd:f3:e4:b3:28:f0:a1:0e:cc:f4:1d:da:5e:fb:
58:6b:ee:23:f9:3a:84:1b:27:fb:c4:1b:ad:77:66:8a:6a:7b:
27:bf:ea:52:0f:d7:1e:dd:c8:ee:82:06:30:c9:cc:b1:66:ba:
6e:96:d3:58:1e:f0:4e:d1:f5:9f:94:a7:81:b2:6f:0e:b0:ff:
97:38:de:21:df:82:5d:a7:75:7d:ea:eb:db:f5:87:2e:f3:87:
d6:4b:f5:80:6a:98:29:2b:84:6f:73:18:da:7b:73:4c:5a:eb:
96:fb:90:cf:3b:0f:8f:25:d3:11:d0:c2:c9:37:5a:db:af:11:
12:2d:11:4e:12:6d:46:10:8a:71:2f:a9:a4:69:01:3b:fb:08:
6e:5e:ae:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz
OTIyQkY2QTUwHhcNMjYwMzI1MDM0MTExWhcNMjYwNDAxMDM0MTExWjAYMRYwFAYD
VQQDEw02OWMzNTk1Ny04Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ggaHLIvONoeAsDGAclAC4I6HyN/h2g5EnvHnZ4tRnJiWZdIsAYXoeUS0e5f
M7uKt+GGI7xP673Ik03Z//5c0PBgT0dC6+F5D464M44D30AuYD3T+Y29mdoxmtvQ
mbDOlaubas1yuMWb59uX/izNGEGmBGI4llXR21eGrUIZeOXslU8vhFP4kISzg2PK
yRa+JRSnIJ5sgmeWGwW331Y/7m9Jf8URqXgxVGkPHf91xNr7x3s+44k38LcJwtW+
I/rVcGa6H9wm+8JHltMB7Cbxzrj/xQyQkj01+SOY6Tey8QLNzcuONtsYFaYieXWW
OZLbTS9wrTXay/FZN0dreOg1/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWOuxdD
8ZroGG8InNh1bMAkUHZ7MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2
RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta
U0dvLVllalhpSkk1SXI5cVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADhaegEASUwIjsYrq/hUT3cfFzbkC1QRCGEVZva337yBF4mAYVMkzhwHeffjm
zHyKXLJh394rHoLbeXgvPIN08Yvp2fOpToG8kBL2+kOdW/gTA6lT4qKczugTlk5z
5ZJVjfn35VMj9iaaEcIdJwUWit3z5LMo8KEOzPQd2l77WGvuI/k6hBsn+8QbrXdm
imp7J7/qUg/XHt3I7oIGMMnMsWa6bpbTWB7wTtH1n5SngbJvDrD/lzjeId+CXad1
ferr2/WHLvOH1kv1gGqYKSuEb3MY2ntzTFrrlvuQzzsPjyXTEdDCyTda268REi0R
ThJtRhCKcS+ppGkBO/sIbl6uFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:03 2026 by rpki-client