
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: a4C+8QoqS4Xga/JkcDpgsy/ZcMvzyjfnP3UMi1p1xxc=
Subject key identifier: D4:B6:71:3E:C9:59:54:38:77:9E:28:3C:A6:3A:97:BB:C7:B8:0F:95
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 0583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 057A
Signing time: Tue 22 Sep 2026 22:57:51 +0000
Manifest this update: Tue 22 Sep 2026 22:57:51 +0000
Manifest next update: Tue 29 Sep 2026 22:57:51 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: TRPlipMqf/0ncb0f4wpj+k9ARP6RX6+0u5JNUhquk6U=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: Sep 22 22:57:51 2026 GMT
Not After : Sep 29 22:57:51 2026 GMT
Subject: CN=6ab307ef-7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:18:66:75:f7:ae:7e:49:44:b4:0b:83:42:
ee:71:6d:8b:e1:d9:02:d2:14:b2:4a:5f:af:18:df:
db:bf:97:dd:16:81:5f:40:0e:20:76:cf:fd:39:21:
ec:63:eb:93:64:ac:1a:19:26:b9:13:d5:1c:15:24:
4b:cf:6e:99:4d:49:42:e0:04:63:82:e1:ec:dd:b8:
38:59:88:6b:b4:16:f0:cf:a1:80:12:d5:dd:2b:13:
c0:a5:0c:98:b9:72:74:7b:8d:65:c1:aa:57:d4:40:
5b:18:ab:3e:3c:fd:9e:a2:e2:0e:50:32:b8:6a:37:
b3:19:a8:45:e6:47:11:2c:c2:6c:4b:cd:fc:d6:c9:
ad:12:5c:fb:36:cb:af:9e:52:80:bc:41:2d:45:64:
18:7b:99:b5:02:69:40:2d:98:7d:76:8c:29:bf:ee:
f5:8a:15:fd:90:91:2d:b7:8c:6f:17:8f:51:e4:78:
6e:6d:36:83:4f:fd:d2:4f:90:92:72:a8:c8:73:3a:
8f:09:78:d0:a9:00:6c:91:c6:57:e7:e5:00:2a:cd:
6e:3b:d1:95:6d:50:a4:63:da:00:f3:32:7d:0a:c4:
65:ca:a3:3d:4d:31:3b:18:07:30:b3:88:ae:e2:09:
e4:84:68:5d:70:84:90:46:9e:3c:e4:57:de:a3:72:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:71:3E:C9:59:54:38:77:9E:28:3C:A6:3A:97:BB:C7:B8:0F:95
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:53:ca:32:51:49:70:3d:b9:63:cc:c1:da:86:d3:ae:0b:
4c:fa:c1:65:77:b1:ca:5d:98:77:a0:fb:45:39:c7:e3:b6:c2:
c3:07:33:8f:8a:7d:0a:be:64:6d:a8:10:12:d9:af:31:4c:79:
ed:29:19:6c:ed:df:a6:ce:30:ff:0a:c0:55:7b:4e:43:e3:6c:
be:47:84:c0:96:b9:29:5a:12:87:c4:a3:35:85:8e:92:3b:7c:
99:99:35:b0:86:a7:f1:cd:a7:20:dd:7d:49:63:74:d0:77:38:
05:bd:e2:85:b6:a5:3d:e5:10:4f:91:0b:f3:7d:e5:9e:2b:e5:
60:2e:47:f6:fc:9b:50:d6:b4:2f:f1:8b:3f:24:bc:c5:89:30:
cf:1e:78:2e:ac:0f:cc:5e:91:67:38:68:dd:a6:32:88:e6:6d:
05:f9:c2:53:fb:5b:5f:c1:af:de:1a:be:5b:9f:6d:b6:fc:6a:
59:1a:80:b6:14:12:92:d9:49:9e:2f:ef:73:5f:24:f1:26:8f:
61:00:ae:df:96:8d:80:fe:9b:8c:76:08:04:66:5f:20:a3:60:
06:43:ee:dd:16:63:8c:22:1f:e6:04:98:f4:b3:e3:db:f3:8f:
14:51:ea:dc:2b:b7:dd:22:e2:23:f6:00:e2:df:22:3a:b3:95:
05:28:40:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5
RDVBNUU2QTAwHhcNMjYwOTIyMjI1NzUxWhcNMjYwOTI5MjI1NzUxWjAYMRYwFAYD
VQQDEw02YWIzMDdlZi03YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9EYZnX3rn5JRLQLg0LucW2L4dkC0hSySl+vGN/bv5fdFoFfQA4gds/9OSHs
Y+uTZKwaGSa5E9UcFSRLz26ZTUlC4ARjguHs3bg4WYhrtBbwz6GAEtXdKxPApQyY
uXJ0e41lwapX1EBbGKs+PP2eouIOUDK4ajezGahF5kcRLMJsS8381smtElz7Nsuv
nlKAvEEtRWQYe5m1AmlALZh9dowpv+71ihX9kJEtt4xvF49R5HhubTaDT/3ST5CS
cqjIczqPCXjQqQBskcZX5+UAKs1uO9GVbVCkY9oA8zJ9CsRlyqM9TTE7GAcws4iu
4gnkhGhdcISQRp485Ffeo3KZ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS2cT7J
WVQ4d54oPKY6l7vHuA+VMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx
MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0
UDhIOXAwSDJwMUtkV2w1cUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEr5TyjJRSXA9uWPMwdqG064LTPrBZXexyl2Yd6D7RTnH47bCwwczj4p9Cr5k
bagQEtmvMUx57SkZbO3fps4w/wrAVXtOQ+NsvkeEwJa5KVoSh8SjNYWOkjt8mZk1
sIan8c2nIN19SWN00Hc4Bb3ihbalPeUQT5EL833lnivlYC5H9vybUNa0L/GLPyS8
xYkwzx54LqwPzF6RZzho3aYyiOZtBfnCU/tbX8Gv3hq+W59ttvxqWRqAthQSktlJ
ni/vc18k8SaPYQCu35aNgP6bjHYIBGZfIKNgBkPu3RZjjCIf5gSY9LPj2/OPFFHq
3Cu33SLiI/YA4t8iOrOVBShADw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:50:22 2026 by rpki-client