
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier: dJc4oRYidVdSo2hhNCc5CzN0GUGx8YLEfDhDmCANqrw=
Subject key identifier: 57:8B:2B:95:03:B6:2B:0C:C3:39:97:09:7F:29:06:94:08:58:E4:07
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number: 0675
Signing time: Sat 04 Apr 2026 22:17:58 +0000
Manifest this update: Sat 04 Apr 2026 22:17:57 +0000
Manifest next update: Sat 11 Apr 2026 22:17:57 +0000
Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: XSvpX9oksBXI5Kkf/qLVWLnBlO0g655KhOF0QGgLyrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Validity
Not Before: Apr 4 22:17:57 2026 GMT
Not After : Apr 11 22:17:57 2026 GMT
Subject: CN=69d18e16-1efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:4c:0e:79:47:a0:90:4d:77:9b:d6:26:5e:
57:12:87:e5:b7:e6:4b:e4:c8:cb:85:1a:e9:23:6a:
a7:46:bd:60:18:c4:2d:fd:cc:f3:cb:e1:12:b4:c1:
9f:52:05:36:9f:43:ce:d0:03:8f:4c:ab:3d:07:4b:
50:20:23:85:f1:30:28:82:eb:7c:64:73:93:d0:cd:
e6:65:8d:17:ef:a1:24:ea:c7:1a:6a:3f:e0:77:9d:
fb:4c:7a:d0:f5:aa:60:74:0b:ba:9b:25:0c:a8:6f:
47:de:cb:61:1e:00:dd:3a:06:03:12:e2:34:79:03:
33:ca:3f:df:e7:32:08:11:ec:09:80:92:82:2d:0e:
c1:a9:e5:5d:0f:63:0f:a0:8c:75:be:8d:3f:4f:e2:
6d:49:a8:5b:b8:69:a8:9f:26:e9:7a:26:ad:79:5e:
3d:0a:aa:c3:77:9c:39:4e:ae:8d:33:d3:37:03:60:
dd:34:28:ff:54:9d:fc:0b:fc:36:80:8c:dd:fd:76:
ec:d0:e3:73:ec:7b:c3:a8:df:5a:12:02:1f:68:c0:
e6:83:2f:be:51:e2:86:e2:b0:f4:a1:cf:c5:84:e8:
5d:cf:2a:59:b1:91:ab:23:ff:6e:4d:05:31:22:52:
7d:e7:bb:b8:66:cf:15:1e:1e:5a:b8:ff:e0:d7:5b:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8B:2B:95:03:B6:2B:0C:C3:39:97:09:7F:29:06:94:08:58:E4:07
X509v3 Authority Key Identifier:
keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:3f:73:f6:86:d6:b5:9e:43:ea:3f:54:97:12:d4:33:bf:
b2:86:46:63:ab:db:a3:af:f4:d1:7e:63:52:2e:d4:b9:d5:22:
25:1b:b2:1f:07:5e:3b:d7:18:9e:a8:cb:db:e8:33:99:2a:24:
d3:fa:79:0f:fe:c7:2a:28:2d:97:83:05:59:0a:79:dc:1e:27:
be:b9:ad:9a:a4:4d:3f:99:5c:f5:31:d8:f5:60:e9:3d:20:32:
79:2f:ba:53:f2:e0:fb:ad:ac:3b:38:67:b9:d3:96:cd:59:1f:
d8:89:2b:e2:c0:ea:e3:d0:af:55:1d:97:5b:5a:2c:fa:94:04:
8c:24:6e:ad:6d:0b:78:47:ce:54:23:45:06:08:2d:a8:61:c0:
b8:a8:d8:3f:9e:0e:2a:b0:31:32:93:87:99:e9:20:09:4a:27:
55:cf:04:e5:8e:f3:9a:22:5d:dc:55:99:3a:12:77:9b:84:26:
f1:4f:fe:83:87:cf:13:19:cf:81:b9:4d:16:46:6c:f6:33:18:
e8:f1:2e:cd:e9:09:98:8f:5a:dc:48:9a:b8:68:2f:b2:36:2f:
77:70:01:b9:98:6f:1f:18:ae:2f:30:94:02:04:1f:f9:49:10:
78:fa:52:78:41:2d:6a:5d:da:21:0b:a0:a8:2d:0f:88:c7:72:
47:52:bc:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG
NjhGQzY5OTAwHhcNMjYwNDA0MjIxNzU3WhcNMjYwNDExMjIxNzU3WjAYMRYwFAYD
VQQDEw02OWQxOGUxNi0xZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUVMDnlHoJBNd5vWJl5XEoflt+ZL5MjLhRrpI2qnRr1gGMQt/czzy+EStMGf
UgU2n0PO0AOPTKs9B0tQICOF8TAogut8ZHOT0M3mZY0X76Ek6scaaj/gd537THrQ
9apgdAu6myUMqG9H3sthHgDdOgYDEuI0eQMzyj/f5zIIEewJgJKCLQ7BqeVdD2MP
oIx1vo0/T+JtSahbuGmonybpeiateV49CqrDd5w5Tq6NM9M3A2DdNCj/VJ38C/w2
gIzd/Xbs0ONz7HvDqN9aEgIfaMDmgy++UeKG4rD0oc/FhOhdzypZsZGrI/9uTQUx
IlJ957u4Zs8VHh5auP/g11shGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFeLK5UD
tisMwzmXCX8pBpQIWOQHMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3
QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN
MHQzUVZiOVRRVG4yajhhWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZdU/c/aG1rWeQ+o/VJcS1DO/soZGY6vbo6/00X5jUi7UudUiJRuyHwdeO9cY
nqjL2+gzmSok0/p5D/7HKigtl4MFWQp53B4nvrmtmqRNP5lc9THY9WDpPSAyeS+6
U/Lg+62sOzhnudOWzVkf2Ikr4sDq49CvVR2XW1os+pQEjCRurW0LeEfOVCNFBggt
qGHAuKjYP54OKrAxMpOHmekgCUonVc8E5Y7zmiJd3FWZOhJ3m4Qm8U/+g4fPExnP
gblNFkZs9jMY6PEuzekJmI9a3EiauGgvsjYvd3ABuZhvHxiuLzCUAgQf+UkQePpS
eEEtal3aIQugqC0PiMdyR1K8WA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:05 2026 by rpki-client