
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json)
Hash identifier: yA2JlgUESL/X2ZI1YLr7i7PmlA+BeiLtN0dc8XZoS8o=
Subject key identifier: F7:20:46:1C:18:7E:73:CA:50:BA:0A:32:0E:07:60:72:AE:06:CC:6C
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
Manifest number: 0228
Signing time: Sun 05 Apr 2026 02:26:02 +0000
Manifest this update: Sun 05 Apr 2026 02:26:02 +0000
Manifest next update: Sun 12 Apr 2026 02:26:02 +0000
Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: i4YTBKBnR7TwQv4nuqXhntkRW2DfofE8NPy2QNksSms=)
2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: BL9qZTPXZmQbBTS7H13H05Yag9DH+3PJ5ndAPjL9cnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Validity
Not Before: Apr 5 02:26:02 2026 GMT
Not After : Apr 12 02:26:02 2026 GMT
Subject: CN=69d1c83a-f601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:d1:4b:ca:dd:64:a5:66:30:8c:84:13:f8:
1d:90:d8:a9:b2:fb:56:7e:65:e5:6c:0a:0f:d8:fe:
24:c5:28:c1:a4:41:69:50:ce:10:ad:23:b1:88:68:
2b:fa:97:e8:14:f5:32:7a:cb:17:6b:d9:3c:1d:53:
2b:3e:ba:4d:98:4a:c9:b6:ab:98:9d:10:86:f4:f3:
93:39:5a:8c:1a:53:aa:91:94:64:ae:18:c7:fa:da:
02:d3:f3:8b:da:43:91:ed:ba:9c:76:c1:89:b3:4e:
06:66:30:d0:77:ae:03:c4:b6:63:31:2e:6b:ae:78:
7b:60:85:fc:23:9e:7d:9b:36:ac:8f:d2:85:62:fa:
ca:2a:21:3c:90:98:6c:c6:d9:48:a3:43:e7:e2:c0:
f8:8e:d3:78:f9:d6:27:3a:c7:40:cd:51:d2:2e:24:
8e:1b:0b:ac:80:40:88:f7:c5:a1:cd:ba:3f:bc:f6:
6d:85:0b:28:2b:65:2c:86:2c:d1:33:2c:32:6e:f7:
da:86:4c:89:d3:36:2d:64:fb:53:42:fd:54:58:4f:
e2:51:af:0e:2c:71:09:99:6e:43:c1:23:de:bb:0f:
06:56:83:0f:4c:b6:90:f4:54:b1:f6:e6:77:09:1f:
f5:5f:7d:bd:3d:a9:98:79:7f:5a:0f:44:83:fb:80:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:46:1C:18:7E:73:CA:50:BA:0A:32:0E:07:60:72:AE:06:CC:6C
X509v3 Authority Key Identifier:
keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:58:8d:42:aa:04:d4:4c:3f:b0:79:e4:47:1a:ee:c0:8a:1e:
b1:23:39:cb:44:4f:c4:0e:48:5d:0f:34:fc:82:4c:93:88:e2:
5d:b3:53:65:bc:73:ef:49:0d:36:f7:93:e7:a3:1e:52:9a:11:
d1:df:c1:0f:db:f1:2d:a8:99:c0:42:bd:97:4d:36:a1:e4:2f:
29:7f:96:b4:73:97:fa:0a:ce:87:94:c5:1e:52:f7:7d:db:94:
be:6c:8c:3c:7d:9c:d2:0b:42:78:26:37:7a:ce:27:71:ca:80:
84:e9:28:f7:95:9e:3c:43:4a:54:9d:bc:e3:c3:10:d9:a1:b7:
b0:5b:07:fd:33:05:c1:98:78:df:90:ec:a8:df:b4:da:bc:73:
9e:cb:82:4d:e1:a6:12:0d:b5:ba:73:20:02:08:14:16:65:f9:
13:7a:13:1d:b5:60:7c:0c:17:32:c9:35:b7:0a:62:ff:8f:c9:
48:dd:24:4d:ee:f3:72:ac:7b:64:43:58:e3:4b:e4:d6:53:34:
07:9f:b0:c4:ba:a9:74:c7:6d:02:65:71:6d:0a:9c:8c:05:1a:
59:9c:e9:66:ff:92:df:b7:8d:f5:d2:de:34:75:c6:f3:68:f3:
8f:35:1f:8b:dd:43:41:b4:10:d5:35:e9:ba:c4:bc:ed:ee:61:
e8:fa:b2:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF
NkNDQkEyMkYwHhcNMjYwNDA1MDIyNjAyWhcNMjYwNDEyMDIyNjAyWjAYMRYwFAYD
VQQDEw02OWQxYzgzYS1mNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8PRS8rdZKVmMIyEE/gdkNipsvtWfmXlbAoP2P4kxSjBpEFpUM4QrSOxiGgr
+pfoFPUyessXa9k8HVMrPrpNmErJtquYnRCG9POTOVqMGlOqkZRkrhjH+toC0/OL
2kOR7bqcdsGJs04GZjDQd64DxLZjMS5rrnh7YIX8I559mzasj9KFYvrKKiE8kJhs
xtlIo0Pn4sD4jtN4+dYnOsdAzVHSLiSOGwusgECI98Whzbo/vPZthQsoK2UshizR
MywybvfahkyJ0zYtZPtTQv1UWE/iUa8OLHEJmW5DwSPeuw8GVoMPTLaQ9FSx9uZ3
CR/1X329PamYeX9aD0SD+4C9VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcgRhwY
fnPKULoKMg4HYHKuBsxsMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0
MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy
VkhwOENKc2QzLTdtekxvaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq1iNQqoE1Ew/sHnkRxruwIoesSM5y0RPxA5IXQ80/IJMk4jiXbNTZbxz70kN
NveT56MeUpoR0d/BD9vxLaiZwEK9l002oeQvKX+WtHOX+grOh5TFHlL3fduUvmyM
PH2c0gtCeCY3es4nccqAhOko95WePENKVJ2848MQ2aG3sFsH/TMFwZh435DsqN+0
2rxznsuCTeGmEg21unMgAggUFmX5E3oTHbVgfAwXMsk1twpi/4/JSN0kTe7zcqx7
ZENY40vk1lM0B5+wxLqpdMdtAmVxbQqcjAUaWZzpZv+S37eN9dLeNHXG82jzjzUf
i91DQbQQ1TXpusS87e5h6Pqy4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:06:07 2026 by rpki-client