
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: 3CQZnrK6TSLoyxNpo31dGvl+612w4wDZXgjfkKv0XQg=
Subject key identifier: 4B:BA:F0:FD:B9:07:94:AF:97:F3:CD:BE:A7:AC:44:E9:2B:C6:48:64
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1AF3
Signing time: Thu 26 Mar 2026 16:17:12 +0000
Manifest this update: Thu 26 Mar 2026 16:17:11 +0000
Manifest next update: Thu 02 Apr 2026 16:17:11 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: e2rn0AYKQu005VLX478dscuPSPPrDbEJWTP+6Q8zhoA=)
2: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: +E60rSGUYX8GfoBZfNcoqE6lK5JivMoN19MLhP10yWo=)
3: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: TBuvrNVeBsJKro4CZ3FR9nUNf80lrjnYo0JImSNFCnk=)
4: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: M8zWm6WUKawoHzJimLR5O8wEYXt57GS8vbOPe6J/SyA=)
5: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: ar4CjDKEwiv8hNV8LHXTUs+z+lADBs8QY5ug8DjXXe4=)
6: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: iL5if3fKju/R7iAzf9zF9TJsTs13/ku7HzfTITgSLX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6979 (0x1b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Mar 26 16:17:11 2026 GMT
Not After : Apr 2 16:17:11 2026 GMT
Subject: CN=69c55c07-c4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6b:8c:bd:63:e4:3c:da:b9:7b:3e:09:85:96:
52:6a:c1:99:b9:85:ea:59:4f:ab:fd:83:0f:48:c3:
47:bc:7c:07:86:1e:cd:f0:f7:6a:37:97:67:de:93:
30:81:17:9f:a4:d6:7c:2f:39:2e:b6:d6:73:7e:e2:
fb:d0:10:0c:87:6f:51:ae:a8:08:e3:f2:03:3e:6a:
e7:39:7a:bd:bd:3f:00:66:18:e6:ff:6e:d4:79:ae:
dd:67:67:96:11:0c:9b:b9:5d:71:03:59:64:f8:08:
84:02:18:82:7a:21:41:fd:a4:18:61:0d:90:fb:5d:
74:d5:8a:84:1e:d5:0a:8b:f7:dd:20:fd:15:2e:a6:
ec:6c:bb:db:47:cb:62:d0:f2:51:0d:f0:03:b4:47:
04:16:df:21:37:05:26:3a:e4:eb:4e:d8:1f:dd:8d:
33:39:25:76:2d:3a:a2:38:b1:ce:80:c7:76:3d:3b:
87:bd:ce:32:fd:61:d8:7a:fb:1b:d3:d3:dd:0d:36:
6d:81:7e:8e:15:3d:fe:5f:06:40:b3:26:a1:04:bc:
ff:51:fe:dc:a3:e4:50:4e:5c:d7:25:07:d4:bd:33:
59:e3:cb:55:1a:fe:68:81:9d:e1:61:5a:4d:1c:aa:
e6:b6:0c:55:d4:27:8a:e1:49:cb:1d:50:47:51:f2:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:F0:FD:B9:07:94:AF:97:F3:CD:BE:A7:AC:44:E9:2B:C6:48:64
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:a0:9b:0c:6d:fe:cc:d4:98:ee:c4:c0:bd:7e:5c:e0:49:64:
cc:0e:14:f4:a5:f6:b5:a2:c7:90:c5:73:38:6c:53:4b:28:e4:
74:8b:c3:3d:29:e9:f8:98:20:03:59:be:3e:3a:7f:bc:fd:78:
36:f7:14:a8:ed:e9:03:ee:9b:ee:88:2c:0a:64:70:5c:40:c1:
45:c5:fd:ab:75:d4:e3:a4:40:3d:fd:0e:08:bb:45:e3:e2:3d:
43:bc:bf:64:26:e2:de:19:9d:1d:e4:21:d8:77:72:d1:80:59:
a4:2f:dc:ba:ac:66:86:e2:1c:a0:c0:8d:fd:b7:91:74:47:f4:
b7:11:39:47:d1:fc:28:18:51:96:1e:55:5c:f2:d5:f6:c1:75:
f3:2a:67:58:17:d5:94:01:29:6c:5d:6b:ba:e3:57:00:bb:c4:
4d:f8:1f:05:b6:6c:48:75:ab:c7:2c:cf:5c:94:e4:4d:34:59:
a5:75:b4:de:1b:cc:fe:81:e4:bc:9b:6a:ef:6e:bf:73:f3:ae:
8c:f4:bd:a5:12:05:7c:16:f0:30:f1:d9:b3:49:88:59:ec:df:
7b:a2:bc:bf:43:90:f7:05:c9:08:93:8e:e3:2f:d5:31:10:8b:
b3:8f:13:e2:0a:5d:68:34:44:45:7a:0b:a9:6a:2d:73:d4:bf:
22:2e:f1:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG
ODhFMzlFRUYwHhcNMjYwMzI2MTYxNzExWhcNMjYwNDAyMTYxNzExWjAYMRYwFAYD
VQQDEw02OWM1NWMwNy1jNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+muMvWPkPNq5ez4JhZZSasGZuYXqWU+r/YMPSMNHvHwHhh7N8PdqN5dn3pMw
gRefpNZ8LzkuttZzfuL70BAMh29RrqgI4/IDPmrnOXq9vT8AZhjm/27Uea7dZ2eW
EQybuV1xA1lk+AiEAhiCeiFB/aQYYQ2Q+1101YqEHtUKi/fdIP0VLqbsbLvbR8ti
0PJRDfADtEcEFt8hNwUmOuTrTtgf3Y0zOSV2LTqiOLHOgMd2PTuHvc4y/WHYevsb
09PdDTZtgX6OFT3+XwZAsyahBLz/Uf7co+RQTlzXJQfUvTNZ48tVGv5ogZ3hYVpN
HKrmtgxV1CeK4UnLHVBHUfLtcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEu68P25
B5Svl/PNvqesROkrxkhkMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5
Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1
X0RZMXpVNDFCSXI0ampudTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGKCbDG3+zNSY7sTAvX5c4ElkzA4U9KX2taLHkMVzOGxTSyjkdIvDPSnp+Jgg
A1m+Pjp/vP14NvcUqO3pA+6b7ogsCmRwXEDBRcX9q3XU46RAPf0OCLtF4+I9Q7y/
ZCbi3hmdHeQh2Hdy0YBZpC/cuqxmhuIcoMCN/beRdEf0txE5R9H8KBhRlh5VXPLV
9sF18ypnWBfVlAEpbF1ruuNXALvETfgfBbZsSHWrxyzPXJTkTTRZpXW03hvM/oHk
vJtq726/c/OujPS9pRIFfBbwMPHZs0mIWezfe6K8v0OQ9wXJCJOO4y/VMRCLs48T
4gpdaDRERXoLqWotc9S/Ii7xAA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:31:53 2026 by rpki-client