
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: YLsQLOCfRyLn68tR9aqk/WKVa9Rk7A/tbonDqs5KK18=
Subject key identifier: 27:3E:63:43:66:29:92:21:3E:BE:81:3A:81:74:06:19:4C:57:63:74
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0EF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0EDA
Signing time: Fri 04 Sep 2026 17:37:56 +0000
Manifest this update: Fri 04 Sep 2026 17:37:56 +0000
Manifest next update: Fri 11 Sep 2026 17:37:56 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: jmG9IQ4os4jsImLQMmSh65/XgLsoBo3M3YUptzNhkFE=)
2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: Gz9eqekiWDiK9v3eDHt3H2hLACZfxZzIPs/2qncX1gM=)
3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3832 (0xef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: Sep 4 17:37:56 2026 GMT
Not After : Sep 11 17:37:56 2026 GMT
Subject: CN=6a9b01f4-5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:ab:ac:6b:90:6c:58:0e:91:f1:62:99:02:
b5:17:e5:24:5c:ae:54:62:66:44:89:c1:e3:46:d2:
f6:82:1a:49:24:92:34:bb:51:de:ce:b3:2b:3e:1d:
07:70:5a:70:92:a9:cb:51:a2:df:2c:fd:a7:3d:61:
f6:1b:ad:05:7d:0c:78:f7:d8:23:96:5b:37:b1:70:
24:d6:66:13:2d:4e:f3:a1:44:72:14:16:0d:78:70:
76:4f:a3:82:a8:96:7e:c8:38:73:13:88:0e:6f:6d:
8f:e4:76:6e:c4:45:f3:b4:7b:95:63:37:79:92:ee:
1e:9d:dc:2b:b5:1c:01:06:80:07:60:af:f7:0b:08:
c4:a3:56:8a:18:cf:59:91:46:bb:d4:91:1a:eb:75:
42:af:15:48:a1:61:2a:b7:0a:80:eb:e7:c8:8d:51:
a5:8a:7f:ae:1c:9b:b9:0c:d2:45:12:dc:1a:7f:17:
69:cb:ab:a0:9d:a3:bb:c0:5b:6d:56:5c:ee:03:c9:
b1:6d:bf:3e:d1:cf:0f:e9:86:db:b1:c9:b1:9a:97:
34:8e:b6:b5:5a:f9:7c:0d:b2:36:68:5b:4f:73:b6:
69:88:62:48:7c:c1:15:20:5b:25:cb:8b:cb:9e:51:
4f:d2:17:95:70:c7:43:52:1d:02:4f:82:4b:ee:ca:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:63:43:66:29:92:21:3E:BE:81:3A:81:74:06:19:4C:57:63:74
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b1:4a:10:63:69:7e:a9:74:e0:d3:80:a7:bb:25:91:c1:d4:
25:1d:ab:d0:ed:db:d4:0d:40:fb:24:8a:20:88:84:60:41:85:
85:8e:3c:74:8b:c7:3b:22:35:f3:1e:bf:ed:a1:ce:f4:0a:0d:
bd:49:a3:db:4f:f2:0c:ff:c7:83:9c:d4:0b:a4:a1:8e:c8:55:
78:cd:5c:e0:ba:89:ae:e3:02:99:2a:94:30:2a:7e:76:b4:83:
6b:af:c7:0e:bf:9b:14:2d:94:f3:b1:02:a5:85:d6:6c:3c:41:
14:5f:63:c5:1e:8c:f0:47:dc:80:e1:e9:3c:74:f3:9a:c9:d1:
89:83:73:ac:f8:1b:b8:80:f8:2e:6a:8c:5f:be:34:20:46:ff:
79:08:39:75:5a:a8:a4:e3:60:d4:ce:5e:be:dd:15:12:c0:01:
76:db:c5:31:2a:27:21:47:52:8f:f8:ff:d5:70:49:07:b7:7a:
1b:39:c5:86:fb:99:5e:af:25:b7:ce:3e:56:68:bc:bc:62:7d:
e9:a9:1a:4d:9b:fa:e0:1a:b5:c7:9f:c8:9f:bc:5d:a7:fc:15:
1f:30:58:c3:ff:a7:21:ba:59:7d:17:9d:68:4e:29:ff:5c:39:
55:52:7e:9a:01:17:d9:67:53:9f:ed:f6:a3:3c:32:97:b2:eb:
c2:cb:eb:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1
OUE0MzgyMzMwHhcNMjYwOTA0MTczNzU2WhcNMjYwOTExMTczNzU2WjAYMRYwFAYD
VQQDEw02YTliMDFmNC01ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlirrGuQbFgOkfFimQK1F+UkXK5UYmZEicHjRtL2ghpJJJI0u1HezrMrPh0H
cFpwkqnLUaLfLP2nPWH2G60FfQx499gjlls3sXAk1mYTLU7zoURyFBYNeHB2T6OC
qJZ+yDhzE4gOb22P5HZuxEXztHuVYzd5ku4endwrtRwBBoAHYK/3CwjEo1aKGM9Z
kUa71JEa63VCrxVIoWEqtwqA6+fIjVGlin+uHJu5DNJFEtwafxdpy6ugnaO7wFtt
VlzuA8mxbb8+0c8P6Ybbscmxmpc0jra1Wvl8DbI2aFtPc7ZpiGJIfMEVIFsly4vL
nlFP0heVcMdDUh0CT4JL7sozEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCc+Y0Nm
KZIhPr6BOoF0BhlMV2N0MB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz
OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX
MFdBYjZEMkxsSzFacERnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxLFKEGNpfql04NOAp7slkcHUJR2r0O3b1A1A+ySKIIiEYEGFhY48dIvHOyI1
8x6/7aHO9AoNvUmj20/yDP/Hg5zUC6ShjshVeM1c4LqJruMCmSqUMCp+drSDa6/H
Dr+bFC2U87ECpYXWbDxBFF9jxR6M8EfcgOHpPHTzmsnRiYNzrPgbuID4LmqMX740
IEb/eQg5dVqopONg1M5evt0VEsABdtvFMSonIUdSj/j/1XBJB7d6GznFhvuZXq8l
t84+Vmi8vGJ96akaTZv64Bq1x5/In7xdp/wVHzBYw/+nIbpZfRedaE4p/1w5VVJ+
mgEX2WdTn+32ozwyl7LrwsvrSQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:16:47 2026 by rpki-client