
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json)
Hash identifier: ZrxnurBQy0KDdpp8QKCbFec4/mJt7o2xS7FLe0Kh4H0=
Subject key identifier: BF:CA:41:73:04:FD:C4:96:30:40:6A:7F:B0:A0:B4:AD:01:2C:69:4E
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
Manifest number: 0223
Signing time: Thu 21 May 2026 02:57:48 +0000
Manifest this update: Thu 21 May 2026 02:57:47 +0000
Manifest next update: Thu 28 May 2026 02:57:47 +0000
Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: aHQqlKfCkUa/YBTr3V+QsFVJ9JoQoQn6+cbrewLch5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: May 21 02:57:47 2026 GMT
Not After : May 28 02:57:47 2026 GMT
Subject: CN=6a0e74ac-67b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:af:65:1c:11:bc:0b:7b:f2:e6:de:10:70:
c8:3c:ae:71:b0:72:6f:7f:45:c0:ac:fd:6f:bc:45:
e7:6e:bd:7a:c2:0f:a5:39:fa:44:33:82:e6:d9:87:
8d:e3:e5:2b:d0:ff:7a:a0:5a:0b:cf:b4:01:30:5d:
6b:c9:e4:26:c7:2c:fd:22:a5:9b:17:62:4f:14:2d:
4a:5e:5e:86:96:73:75:06:f2:b4:80:38:11:a2:f8:
fe:5d:e9:bc:0c:3b:cb:c5:0d:6e:53:0d:dc:53:07:
4f:a4:79:40:7e:95:1d:0b:72:5d:c2:1e:7c:e4:c0:
b0:90:2c:2f:29:35:40:f3:2d:b5:66:06:37:ea:6a:
4d:57:34:fa:10:0c:9a:5f:20:70:0b:26:3c:9c:51:
5b:ff:da:88:6f:74:58:a1:9c:a7:73:0c:21:04:82:
2a:27:bd:8f:75:b4:f2:5a:ef:0b:ea:21:66:1d:f5:
d8:20:3b:d5:22:19:45:ca:86:ee:ea:a7:b2:f9:95:
5b:0e:d4:0d:6f:8e:4d:af:d1:04:74:12:1b:1f:83:
2b:49:10:04:de:17:82:6d:dc:1e:ee:1f:b1:76:e8:
a7:eb:28:78:d9:ea:26:42:24:54:56:93:3d:f5:a9:
87:74:c5:1c:96:a0:12:8c:98:c4:c5:af:43:d2:86:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:41:73:04:FD:C4:96:30:40:6A:7F:B0:A0:B4:AD:01:2C:69:4E
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fe:95:d2:9c:39:01:b3:fd:d0:eb:be:6e:e8:d0:59:46:13:
43:64:6f:12:a3:12:0d:8f:41:82:2b:0f:d4:db:7a:3f:f4:86:
90:65:b1:3f:52:95:93:e2:a8:ae:f7:62:c6:16:b8:82:a3:5b:
c6:3a:7e:a5:22:73:dc:55:77:53:22:a6:41:aa:1a:92:e8:df:
30:a5:db:82:6c:fa:d2:1e:ad:70:a2:2e:32:19:ef:a3:29:cd:
03:bb:17:4f:08:a1:b3:93:40:6a:ba:f9:1b:a8:fc:ef:22:03:
ec:07:18:e6:a3:1d:9b:5b:7f:94:7e:75:b3:63:c8:86:d4:ed:
3a:7e:2e:a6:41:21:ff:9f:91:b1:c9:01:e8:d8:95:bc:0e:6d:
97:a3:a9:a8:42:de:8f:10:0a:f9:c9:74:5a:7f:7e:fe:21:c9:
24:5d:11:0d:f0:2b:90:9b:31:5a:46:e6:c0:c6:2d:54:32:65:
b4:f6:b5:06:61:56:e1:df:e6:ca:b6:96:2a:af:a2:1c:3a:09:
93:56:b9:9a:d1:69:93:f7:00:01:5b:41:62:0b:69:cc:58:6f:
47:59:c1:4f:ac:cf:55:b5:8c:87:09:a9:f9:26:d5:3c:4a:25:
61:b0:ea:91:ae:d1:7e:d5:17:cc:b2:4c:22:0c:2a:b5:16:47:
eb:f0:18:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0
RTcxMEQxMzUwHhcNMjYwNTIxMDI1NzQ3WhcNMjYwNTI4MDI1NzQ3WjAYMRYwFAYD
VQQDEw02YTBlNzRhYy02N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFOvZRwRvAt78ubeEHDIPK5xsHJvf0XArP1vvEXnbr16wg+lOfpEM4Lm2YeN
4+Ur0P96oFoLz7QBMF1ryeQmxyz9IqWbF2JPFC1KXl6GlnN1BvK0gDgRovj+Xem8
DDvLxQ1uUw3cUwdPpHlAfpUdC3Jdwh585MCwkCwvKTVA8y21ZgY36mpNVzT6EAya
XyBwCyY8nFFb/9qIb3RYoZyncwwhBIIqJ72PdbTyWu8L6iFmHfXYIDvVIhlFyobu
6qey+ZVbDtQNb45Nr9EEdBIbH4MrSRAE3heCbdwe7h+xduin6yh42eomQiRUVpM9
9amHdMUclqASjJjExa9D0oY8vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/KQXME
/cSWMEBqf7CgtK0BLGlOMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC
QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh
U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApv6V0pw5AbP90Ou+bujQWUYTQ2RvEqMSDY9BgisP1Nt6P/SGkGWxP1KVk+Ko
rvdixha4gqNbxjp+pSJz3FV3UyKmQaoakujfMKXbgmz60h6tcKIuMhnvoynNA7sX
Twihs5NAarr5G6j87yID7AcY5qMdm1t/lH51s2PIhtTtOn4upkEh/5+RsckB6NiV
vA5tl6OpqELejxAK+cl0Wn9+/iHJJF0RDfArkJsxWkbmwMYtVDJltPa1BmFW4d/m
yraWKq+iHDoJk1a5mtFpk/cAAVtBYgtpzFhvR1nBT6zPVbWMhwmp+SbVPEolYbDq
ka7RftUXzLJMIgwqtRZH6/AY0Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:31:11 2026 by rpki-client