
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json)
Hash identifier: uVw0R2t/49ING2/Coduc862gXrclro7Znb/VK1uJO6A=
Subject key identifier: 08:F4:FD:3E:32:C8:37:31:BB:6D:DE:B9:BE:C6:D0:9F:1D:AD:DD:1C
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
Manifest number: 01A8
Signing time: Sun 05 Apr 2026 03:34:54 +0000
Manifest this update: Sun 05 Apr 2026 03:34:53 +0000
Manifest next update: Sun 12 Apr 2026 03:34:53 +0000
Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: ZRqqj107muylhl+2Mx4liK6w3JBGQu6G5Ja80qWz36Q=)
2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: Z4k1tL/4zFATtE9AQcjfK7ZixWQnEaZv3mA1fR+6Nf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Validity
Not Before: Apr 5 03:34:53 2026 GMT
Not After : Apr 12 03:34:53 2026 GMT
Subject: CN=69d1d85e-03cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:2d:a2:dd:9b:77:06:f7:40:d3:d1:c1:da:
e4:a5:c3:7c:9e:f5:bc:bf:49:8e:98:29:a1:23:dd:
a6:c4:52:80:01:ab:df:a5:8f:84:20:c5:dc:80:88:
7e:7c:07:da:82:69:75:e2:87:e6:c8:d5:a7:a9:dd:
cb:17:41:8d:a4:b7:24:f0:17:d5:e1:69:2d:e6:bc:
4b:be:9b:4e:53:89:22:41:f3:00:0b:b5:dd:16:1b:
25:6d:6c:98:56:42:56:44:04:45:ac:ae:4e:94:d6:
a3:d5:fa:16:ef:6d:e9:41:7a:98:4d:c6:6e:19:ce:
31:dc:b2:f1:e9:3b:17:3b:a1:29:de:26:29:39:04:
ed:0d:be:d3:11:65:0d:a0:9f:51:a5:36:2f:64:4e:
f7:69:3a:54:f7:c8:11:4a:7d:41:ee:58:28:1e:ed:
2c:dd:0d:4d:ac:76:5f:65:7d:c9:72:ad:8f:56:d0:
e5:26:ae:fe:e7:47:44:35:e5:b5:f2:47:8f:45:1b:
56:bf:c4:ab:74:bf:85:2d:2b:7e:d8:0c:f9:bd:55:
36:3f:9d:f9:5d:a6:6a:87:4b:1e:c2:6b:98:a5:a5:
75:b9:8c:04:06:aa:26:85:15:7d:1c:c4:8f:27:82:
81:08:d0:8d:00:9d:fe:83:2e:a1:e8:53:3d:51:e9:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:FD:3E:32:C8:37:31:BB:6D:DE:B9:BE:C6:D0:9F:1D:AD:DD:1C
X509v3 Authority Key Identifier:
keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:76:96:82:59:bb:b2:90:db:cd:6d:90:71:2d:9d:1d:8a:
77:6f:43:5b:57:34:50:55:ba:65:a5:23:37:70:ba:16:5b:b7:
b7:01:7a:5c:86:19:0b:98:56:96:d2:11:8c:b3:50:b8:1c:01:
08:66:48:ad:f4:17:6f:ae:cf:33:97:5d:88:55:21:57:9d:4e:
93:c8:e1:3a:2b:c9:63:34:5b:63:76:81:0b:c8:86:56:d1:9e:
30:e9:41:13:d9:d7:a9:70:b2:6d:f7:99:51:0b:bc:7a:a3:a9:
a6:d5:55:37:1b:f9:be:e8:ad:16:cf:dd:cd:c3:14:b3:70:a0:
08:ab:c4:85:1d:67:50:f4:3a:92:6a:d7:05:48:72:f2:7d:d0:
ee:f0:8f:4a:b4:85:a6:07:40:40:30:bf:dc:81:76:94:64:2b:
98:7d:fd:cc:d8:23:89:3e:5b:40:1f:a0:b2:96:c4:d6:2b:8d:
39:4c:ef:a6:37:50:8e:30:4d:f8:82:37:83:23:c4:3e:29:e4:
73:9d:dc:61:cc:1f:1d:b0:5c:19:b4:7f:63:e2:f0:5e:19:dd:
ee:be:e6:c3:04:86:d5:00:1f:69:d9:b2:69:46:81:1c:7b:6c:
79:2d:5d:5d:b5:cb:17:cb:f2:7f:0f:f6:52:04:9f:d0:62:fd:
de:a3:b4:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZFNjgxMTAvBgNVBAUTKDhCQTk0RTI0NEM4NzAzRTJFMjEyNDU2Qjk4NzFCM0M4
MkQ1MDcwOUMwHhcNMjYwNDA1MDMzNDUzWhcNMjYwNDEyMDMzNDUzWjAYMRYwFAYD
VQQDEw02OWQxZDg1ZS0wM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLAtot2bdwb3QNPRwdrkpcN8nvW8v0mOmCmhI92mxFKAAavfpY+EIMXcgIh+
fAfagml14ofmyNWnqd3LF0GNpLck8BfV4Wkt5rxLvptOU4kiQfMAC7XdFhslbWyY
VkJWRARFrK5OlNaj1foW723pQXqYTcZuGc4x3LLx6TsXO6Ep3iYpOQTtDb7TEWUN
oJ9RpTYvZE73aTpU98gRSn1B7lgoHu0s3Q1NrHZfZX3Jcq2PVtDlJq7+50dENeW1
8kePRRtWv8SrdL+FLSt+2Az5vVU2P535XaZqh0sewmuYpaV1uYwEBqomhRV9HMSP
J4KBCNCNAJ3+gy6h6FM9Uek80wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAj0/T4y
yDcxu23eub7G0J8drd0cMB8GA1UdIwQYMBaAFIupTiRMhwPi4hJFa5hxs8gtUHCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkU2OC9EMkJBQUM0QUFF
MEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEtTGlFa1ZybUhHenlDMVFj
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkU2OC9EMkJBQUM0QUFFMEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEt
TGlFa1ZybUhHenlDMVFjSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP6J2loJZu7KQ281tkHEtnR2Kd29DW1c0UFW6ZaUjN3C6Flu3twF6XIYZC5hW
ltIRjLNQuBwBCGZIrfQXb67PM5ddiFUhV51Ok8jhOivJYzRbY3aBC8iGVtGeMOlB
E9nXqXCybfeZUQu8eqOpptVVNxv5vuitFs/dzcMUs3CgCKvEhR1nUPQ6kmrXBUhy
8n3Q7vCPSrSFpgdAQDC/3IF2lGQrmH39zNgjiT5bQB+gspbE1iuNOUzvpjdQjjBN
+II3gyPEPinkc53cYcwfHbBcGbR/Y+LwXhnd7r7mwwSG1QAfadmyaUaBHHtseS1d
XbXLF8vyfw/2UgSf0GL93qO0gg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:23 2026 by rpki-client