
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json)
Hash identifier: VgpcgB3dKU9+5yyhE+Hm0Kj4vJK/nlsp9uxmrKT/4pI=
Subject key identifier: 96:30:4C:15:F9:67:EE:60:B4:86:FE:FC:13:DA:A2:D7:72:CE:09:F6
Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Certificate serial: 0447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
Manifest number: 0441
Signing time: Sun 27 Sep 2026 00:16:04 +0000
Manifest this update: Sun 27 Sep 2026 00:16:04 +0000
Manifest next update: Sun 04 Oct 2026 00:16:04 +0000
Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: BC61YTe3CWgFWTv6YS8xDvdb7JGbRb0zfNf17T86E4E=)
2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 67LlS2Q1Ll84dJ+nyUpzM3AprVCuS78sQpZWBwZl53s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Validity
Not Before: Sep 27 00:16:04 2026 GMT
Not After : Oct 4 00:16:04 2026 GMT
Subject: CN=6ab86044-d534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:71:8f:cc:51:d6:a9:dc:20:2c:34:d1:c7:
04:90:df:94:8b:8a:a8:02:1d:cb:47:18:9b:8c:be:
4c:5f:53:e8:b4:b4:ce:83:08:e3:6c:f9:90:b8:98:
c8:07:1c:ba:08:d7:ec:3f:f8:e3:e6:fc:a4:4d:0d:
4f:71:2d:37:fd:e6:69:27:b4:47:45:d8:be:d6:3f:
f5:fb:db:11:14:ae:d3:e3:1c:9e:7e:c2:46:66:76:
9e:04:2f:44:8e:4d:40:63:55:18:3b:2b:c5:16:a6:
24:ae:9d:18:d3:51:b9:87:7e:a1:e7:c4:ce:3f:c5:
d2:bc:8d:e4:a9:20:44:30:00:68:a8:80:3e:ce:7c:
fe:e2:96:d4:e6:83:43:bd:fc:12:45:71:61:25:ca:
fd:66:84:c1:37:2c:69:32:19:5f:0a:f7:b6:0f:a2:
2b:70:fe:90:0d:89:54:93:53:18:e7:d6:42:7c:49:
23:e0:06:31:48:ff:ca:60:c1:5d:4c:53:dd:28:11:
5c:41:96:58:9f:fd:b2:e0:26:74:7a:d6:08:43:3f:
2c:a1:a2:9c:c5:11:1c:0d:a3:8c:e8:3c:de:16:8f:
33:a2:f1:84:72:2c:d4:d6:d5:1b:7c:02:84:83:49:
f0:de:f3:95:a7:17:e8:ab:22:16:c4:07:07:cf:fc:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:30:4C:15:F9:67:EE:60:B4:86:FE:FC:13:DA:A2:D7:72:CE:09:F6
X509v3 Authority Key Identifier:
keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:56:36:cd:ab:7a:47:03:57:54:4b:35:db:34:9a:e2:1d:b5:
e2:59:89:50:3a:be:38:d1:e4:37:47:20:ca:d4:2d:4d:18:65:
c9:24:44:1b:cb:ab:56:a5:d9:1d:12:95:43:94:47:9a:a6:f6:
c7:03:c3:25:5c:64:c9:f8:81:d9:dc:36:37:cf:9f:54:87:85:
4e:32:da:ef:12:e3:35:38:d4:db:86:d8:a2:2c:8a:b9:ba:6d:
d1:ba:51:d3:4f:95:bb:7c:39:56:f2:24:a7:cc:ae:27:be:e9:
ff:93:6a:65:ee:54:09:02:37:46:89:9f:66:eb:55:ad:83:56:
2b:d3:12:85:0b:7e:22:28:8b:61:3d:f5:33:fc:7d:3c:de:81:
1a:c2:a8:2b:18:16:70:4c:4a:8a:dd:72:19:ac:b3:68:b9:da:
d6:ab:48:27:01:87:06:8b:e8:01:f5:9b:52:25:26:0b:d4:63:
08:fb:71:d5:a1:e2:df:bd:25:bf:bd:17:f3:01:e6:2d:f6:80:
a7:b7:81:06:3f:0c:5f:c1:fa:c6:0d:28:f3:28:fe:ad:8e:09:
06:7e:10:fb:90:a3:a4:f5:b4:a7:a5:a7:49:03:24:7d:82:7b:
9a:a3:7b:51:cd:fb:5b:23:5a:d0:6d:39:94:be:7e:f9:bb:73:
47:10:14:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcxMUMxMTAvBgNVBAUTKEZBMjZGMzRBODMzOUIxREYzNkRDOUMxMTkxMjA1N0Mz
QTU4M0Y2NzMwHhcNMjYwOTI3MDAxNjA0WhcNMjYxMDA0MDAxNjA0WjAYMRYwFAYD
VQQDEw02YWI4NjA0NC1kNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApetxj8xR1qncICw00ccEkN+Ui4qoAh3LRxibjL5MX1PotLTOgwjjbPmQuJjI
Bxy6CNfsP/jj5vykTQ1PcS03/eZpJ7RHRdi+1j/1+9sRFK7T4xyefsJGZnaeBC9E
jk1AY1UYOyvFFqYkrp0Y01G5h36h58TOP8XSvI3kqSBEMABoqIA+znz+4pbU5oND
vfwSRXFhJcr9ZoTBNyxpMhlfCve2D6IrcP6QDYlUk1MY59ZCfEkj4AYxSP/KYMFd
TFPdKBFcQZZYn/2y4CZ0etYIQz8soaKcxREcDaOM6DzeFo8zovGEcizU1tUbfAKE
g0nw3vOVpxfoqyIWxAcHz/x+2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYwTBX5
Z+5gtIb+/BPaotdyzgn2MB8GA1UdIwQYMBaAFPom80qDObHfNtycEZEgV8Olg/Zz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzExQy9BOEFDNzI1MEJC
QTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNkODIzSndSa1NCWHc2V0Q5
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1pYnpTb001c2Q4MjNKd1JrU0JYdzZXRDluTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzExQy9BOEFDNzI1MEJCQTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNk
ODIzSndSa1NCWHc2V0Q5bk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn1Y2zat6RwNXVEs12zSa4h214lmJUDq+ONHkN0cgytQtTRhlySREG8urVqXZ
HRKVQ5RHmqb2xwPDJVxkyfiB2dw2N8+fVIeFTjLa7xLjNTjU24bYoiyKubpt0bpR
00+Vu3w5VvIkp8yuJ77p/5NqZe5UCQI3RomfZutVrYNWK9MShQt+IiiLYT31M/x9
PN6BGsKoKxgWcExKit1yGayzaLna1qtIJwGHBovoAfWbUiUmC9RjCPtx1aHi370l
v70X8wHmLfaAp7eBBj8MX8H6xg0o8yj+rY4JBn4Q+5CjpPW0p6WnSQMkfYJ7mqN7
Uc37WyNa0G05lL5++btzRxAUGw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:17 2026 by rpki-client