
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier: KnUMiAUSpLGsOZG169w+nraz9o0aAWnfAFrSjFBoq8E=
Subject key identifier: 3C:06:13:A8:81:D9:77:10:C6:E3:A3:8E:67:DE:92:92:D3:84:3A:18
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 0886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number: 150F
Signing time: Sat 04 Apr 2026 18:19:42 +0000
Manifest this update: Sat 04 Apr 2026 18:19:42 +0000
Manifest next update: Sat 11 Apr 2026 18:19:42 +0000
Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: Pvi2qUddH/tI4G9HIWWnWLPMrxz684CinDDFQrfq4Oo=)
2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: 2XB9AUT5vQE1XXVh7JlV1lG+7wXXx67sWItW8OX0UI0=)
3: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: ScxJliUY4DXLrnnNNW8a6vPijrUn+5XUQ6gjXiYCSp8=)
4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: sLJ4fmy8xpg9xcZG4Kb6Y42Da6yXwOsQcEnYcgYLtL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Validity
Not Before: Apr 4 18:19:42 2026 GMT
Not After : Apr 11 18:19:42 2026 GMT
Subject: CN=69d1563e-aebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:e7:68:c7:24:d3:16:14:76:d3:da:20:fc:
95:9a:f3:e9:52:07:4e:ae:0d:21:19:8a:44:ae:33:
f0:84:af:81:ce:dd:66:ba:e0:4e:ef:53:cc:f9:af:
7a:b3:e8:70:d6:8f:0f:66:43:af:d0:f4:80:49:81:
35:a3:b6:5e:8f:4f:df:fa:05:18:f6:1f:47:a0:73:
68:0a:ac:7b:de:0d:61:c0:72:0a:f2:1a:aa:30:65:
87:35:42:5e:5d:24:0e:98:8b:03:59:d2:2f:5e:2d:
81:15:fe:94:11:fd:b5:26:d2:bb:3c:b3:d2:a0:02:
c5:a2:10:f6:6f:be:78:fb:e9:3b:6f:59:d7:7d:aa:
f6:14:d2:e5:9e:8f:c7:7e:80:62:c3:71:18:fc:5e:
eb:03:ca:2d:4e:a0:ee:e9:a7:d8:63:73:73:12:49:
54:6f:01:f1:98:21:04:2e:7e:c8:41:26:8a:48:27:
b8:54:7e:2c:32:d4:79:34:a5:83:df:43:29:b5:04:
83:0a:2b:9c:47:2c:4c:61:f3:87:d6:84:af:17:41:
60:7d:ad:8f:57:49:f6:02:8d:91:9b:58:97:ff:73:
f7:bc:7f:67:ee:1f:b9:77:a9:ba:43:9c:22:49:3c:
4d:af:5d:16:5d:37:97:53:2e:d5:d1:b3:4b:78:da:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:13:A8:81:D9:77:10:C6:E3:A3:8E:67:DE:92:92:D3:84:3A:18
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:68:6c:66:52:05:57:42:ba:aa:7d:e8:9a:2a:16:b5:3e:
62:51:9e:1c:4c:ff:dc:e1:02:b2:c0:f5:b0:60:71:1b:e6:b8:
e5:28:0e:aa:e6:30:f4:2f:67:50:b7:b6:02:56:02:42:25:51:
e9:28:11:39:01:1c:49:5c:c6:00:56:18:95:af:ae:fe:ff:0d:
ef:a1:82:50:6d:71:83:4c:6a:cd:df:51:dc:f3:20:7a:ab:da:
b0:ae:da:34:5d:6e:01:46:c6:1a:ef:ce:1c:51:c7:f5:33:ab:
fc:c0:02:96:c3:22:8a:8f:a3:41:9e:5f:2d:66:be:44:67:10:
19:ba:fd:03:8b:4c:c3:47:21:c1:21:34:17:2e:f4:9b:9e:fc:
60:4b:ef:c1:e7:8c:86:ad:e3:17:c6:0d:db:82:77:e6:35:42:
bb:d3:31:e4:60:82:7b:69:17:5f:24:56:16:aa:c7:67:03:5f:
3c:47:b4:c7:06:5e:b0:2c:d5:ae:06:26:ef:69:6c:b0:bc:e4:
63:15:c0:c4:39:b8:ff:0e:73:c0:76:43:a6:de:4d:38:2c:73:
95:4e:2a:0c:af:46:1c:4d:dc:b5:01:b4:3d:9e:36:b2:9a:d4:
c0:ef:91:06:c7:ca:1e:f1:19:00:37:5e:3b:b4:48:45:c6:df:
43:be:2b:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC
RUQwQ0U3MzcwHhcNMjYwNDA0MTgxOTQyWhcNMjYwNDExMTgxOTQyWjAYMRYwFAYD
VQQDEw02OWQxNTYzZS1hZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5MHnaMck0xYUdtPaIPyVmvPpUgdOrg0hGYpErjPwhK+Bzt1muuBO71PM+a96
s+hw1o8PZkOv0PSASYE1o7Zej0/f+gUY9h9HoHNoCqx73g1hwHIK8hqqMGWHNUJe
XSQOmIsDWdIvXi2BFf6UEf21JtK7PLPSoALFohD2b754++k7b1nXfar2FNLlno/H
foBiw3EY/F7rA8otTqDu6afYY3NzEklUbwHxmCEELn7IQSaKSCe4VH4sMtR5NKWD
30MptQSDCiucRyxMYfOH1oSvF0Fgfa2PV0n2Ao2Rm1iX/3P3vH9n7h+5d6m6Q5wi
STxNr10WXTeXUy7V0bNLeNqGMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwGE6iB
2XcQxuOjjmfekpLThDoYMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0
Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAksZobGZSBVdCuqp96JoqFrU+YlGeHEz/3OECssD1sGBxG+a45SgOquYw9C9n
ULe2AlYCQiVR6SgROQEcSVzGAFYYla+u/v8N76GCUG1xg0xqzd9R3PMgeqvasK7a
NF1uAUbGGu/OHFHH9TOr/MAClsMiio+jQZ5fLWa+RGcQGbr9A4tMw0chwSE0Fy70
m578YEvvweeMhq3jF8YN24J35jVCu9Mx5GCCe2kXXyRWFqrHZwNfPEe0xwZesCzV
rgYm72lssLzkYxXAxDm4/w5zwHZDpt5NOCxzlU4qDK9GHE3ctQG0PZ42sprUwO+R
BsfKHvEZADdeO7RIRcbfQ74r7w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 02:17:36 2026 by rpki-client