
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
File: cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft (raw, json)
Hash identifier: KfWN4XLmEC3F5qLNC0XuU0bskWEVDJPs0G0ctgPY/v0=
Subject key identifier: F5:6A:F3:37:3F:7E:A2:28:86:F0:19:07:65:DC:44:B7:51:20:98:03
Authority key identifier: 70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5
Certificate issuer: /CN=A9116679/serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
Certificate serial: 03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
Manifest number: 02
Signing time: Tue 18 Aug 2026 15:35:51 +0000
Manifest this update: Tue 18 Aug 2026 15:35:50 +0000
Manifest next update: Tue 25 Aug 2026 15:35:50 +0000
Files and hashes: 1: cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl (hash: CH/B5LbeM9bEbGkPurVwlEY78hE0HF9k2NAiaMdg7Yc=)
2: 799FBC2C9B1A11F1A788EDC06311F970.roa (hash: mqjazDyZwdEQTpa+3NzwCacJOd2OekyYO3k/BMrGqTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl
rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116679, serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
Validity
Not Before: Aug 18 15:35:50 2026 GMT
Not After : Aug 25 15:35:50 2026 GMT
Subject: CN=6a847bd7-21ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:88:84:98:85:9c:16:da:34:b0:78:f5:f8:
0a:0f:c7:c5:bf:c1:27:0d:2f:a4:a9:7e:b8:47:9c:
4b:02:cf:ba:29:f6:7c:a8:b5:60:6a:2d:d8:00:7c:
9a:0c:b5:58:f2:62:31:90:aa:df:f3:cb:53:d5:54:
e9:1f:96:a7:7f:52:11:dd:ae:59:a5:f7:67:cb:d1:
28:76:73:79:29:87:71:b6:7e:7b:ca:c2:64:de:49:
24:2a:a7:33:60:32:a1:c1:cb:a1:97:d0:87:1c:73:
6d:66:e5:3d:d2:7a:ac:ca:00:9e:61:61:12:ee:0a:
4f:30:88:2b:80:62:6d:42:4c:dd:eb:7c:55:1e:08:
2b:11:ac:6f:6b:88:2b:64:30:ee:4d:50:0a:36:1c:
d4:52:5e:79:b3:72:03:61:19:aa:45:bc:cc:fd:2d:
73:ba:7f:be:73:eb:42:ac:79:8c:0d:67:74:e2:2b:
91:de:d7:b2:15:40:c6:e8:af:e3:c2:41:6f:72:16:
55:a3:f4:37:5b:e9:71:24:7b:d1:1f:9e:9c:b0:00:
c1:31:18:e5:a5:b3:5c:e8:3b:30:02:d2:7c:e5:56:
18:5f:1f:4c:0c:3d:84:c8:d8:47:2b:f5:ef:6c:aa:
ec:09:10:66:c2:82:c3:b8:ec:31:52:cc:87:d5:ab:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:F3:37:3F:7E:A2:28:86:F0:19:07:65:DC:44:B7:51:20:98:03
X509v3 Authority Key Identifier:
keyid:70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:7f:91:25:78:57:45:a7:48:ca:70:7c:9b:48:00:40:59:
87:3b:33:5a:b5:01:2a:a2:98:72:73:cf:55:00:77:0a:7e:1f:
3a:12:64:56:de:64:0c:90:3f:4c:8f:b0:85:e3:4e:0c:bf:bc:
15:8d:92:ef:b7:f7:cf:8b:69:1a:71:c4:68:49:e2:e3:d7:91:
eb:a4:cd:5a:06:9a:e1:d7:42:3e:9f:b2:02:c5:d9:1b:75:2a:
24:f0:d5:ce:a7:ac:7e:0e:f7:c2:15:93:b4:70:27:c7:c3:b8:
45:b6:5a:11:84:06:c9:cf:b6:77:77:89:34:f6:4a:82:f4:bc:
a1:c8:4c:4e:6f:89:91:42:ec:3f:2c:39:20:a1:a2:af:9a:e9:
23:bb:1a:5a:92:22:da:09:47:76:de:61:61:ad:44:e7:ac:99:
90:3e:b7:48:03:95:e8:12:ad:58:c1:c5:14:b5:69:6e:82:4a:
d1:35:a8:ac:d8:6b:72:86:f9:87:f7:fa:c4:1a:db:d9:e5:d6:
f1:7c:ff:93:82:aa:8f:67:45:64:ff:3c:54:cd:01:d4:eb:82:
ae:c3:18:7b:6e:56:58:b7:e7:6f:97:eb:06:49:70:72:6a:ce:
84:7c:3e:93:cd:65:d1:4f:ed:6f:a5:ec:66:66:f6:ba:d2:2c:
3b:63:12:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjY3OTExMC8GA1UEBRMoNzBGMDE0MjA0QjU1NjIzRTdDQjhCRkQ5MkMyRENBRDE3
OUZBQkNFNTAeFw0yNjA4MTgxNTM1NTBaFw0yNjA4MjUxNTM1NTBaMBgxFjAUBgNV
BAMTDTZhODQ3YmQ3LTIxY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUhIiEmIWcFto0sHj1+AoPx8W/wScNL6SpfrhHnEsCz7op9nyotWBqLdgAfJoM
tVjyYjGQqt/zy1PVVOkflqd/UhHdrlml92fL0Sh2c3kph3G2fnvKwmTeSSQqpzNg
MqHBy6GX0Iccc21m5T3SeqzKAJ5hYRLuCk8wiCuAYm1CTN3rfFUeCCsRrG9riCtk
MO5NUAo2HNRSXnmzcgNhGapFvMz9LXO6f75z60KseYwNZ3TiK5He17IVQMbor+PC
QW9yFlWj9Ddb6XEke9EfnpywAMExGOWls1zoOzAC0nzlVhhfH0wMPYTI2Ecr9e9s
quwJEGbCgsO47DFSzIfVqwVLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9WrzNz9+
oiiG8BkHZdxEt1EgmAMwHwYDVR0jBBgwFoAUcPAUIEtVYj58uL/ZLC3K0Xn6vOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Njc5LzI2Q0E5NUE0OUIx
OTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1OHVMX1pMQzNLMFhuNnZP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1BBVUlFdFZZajU4dUxfWkxDM0swWG42dk9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
Njc5LzI2Q0E5NUE0OUIxOTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1
OHVMX1pMQzNLMFhuNnZPVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA3t3+RJXhXRadIynB8m0gAQFmHOzNatQEqophyc89VAHcKfh86EmRW3mQMkD9M
j7CF404Mv7wVjZLvt/fPi2kaccRoSeLj15HrpM1aBprh10I+n7ICxdkbdSok8NXO
p6x+DvfCFZO0cCfHw7hFtloRhAbJz7Z3d4k09kqC9LyhyExOb4mRQuw/LDkgoaKv
mukjuxpakiLaCUd23mFhrUTnrJmQPrdIA5XoEq1YwcUUtWlugkrRNais2GtyhvmH
9/rEGtvZ5dbxfP+TgqqPZ0Vk/zxUzQHU64Kuwxh7blZYt+dvl+sGSXByas6EfD6T
zWXRT+1vpexmZva60iw7YxIX
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:31 2026 by rpki-client