
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier: oROb5VhTJomd9HOhFVXIYLlGtSnxjvM4bVcq3QI6CPs=
Subject key identifier: 6B:24:46:0C:AE:70:3F:E0:47:EC:6E:1F:B8:A8:FF:2B:71:C8:5B:EC
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number: B7
Signing time: Tue 03 Mar 2026 06:40:49 +0000
Manifest this update: Tue 03 Mar 2026 06:40:48 +0000
Manifest next update: Tue 10 Mar 2026 06:40:48 +0000
Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: kuRfdsFs7VqxOjueoOvm4WUuCEN/q7+lXuSL5KvC3ZE=)
2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Validity
Not Before: Mar 3 06:40:48 2026 GMT
Not After : Mar 10 06:40:48 2026 GMT
Subject: CN=69a68271-cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:d3:6e:a3:fa:79:31:06:9c:ca:e7:ff:4d:
41:c0:7a:39:95:44:be:41:8c:63:a3:ce:4e:07:dc:
c7:cc:61:57:bf:09:ac:9a:d6:f8:1f:ad:50:b8:f6:
80:7e:a1:fe:93:de:df:3d:d0:10:81:c8:96:ee:81:
26:73:df:e7:f6:41:65:a0:92:c9:59:ba:6a:38:d3:
a4:e2:4d:13:b7:d2:be:92:14:0b:fe:f7:3a:35:5f:
d7:c2:49:5b:3c:fe:fb:1f:a0:43:52:28:e9:b1:7b:
bc:f2:47:ba:23:0a:e7:f1:7e:b9:79:09:9b:57:d8:
a3:87:66:fa:0a:bb:26:88:08:ea:98:7f:2e:27:5b:
3a:01:83:75:d5:2e:58:b5:eb:e8:01:fd:4b:05:71:
0e:95:0f:e6:1c:0e:2d:7f:69:06:32:53:10:3b:1b:
85:8d:73:31:d2:f6:94:77:69:05:8c:13:2a:25:5d:
b3:17:c6:0a:ed:f1:71:76:ff:de:22:14:66:a6:11:
ea:2e:26:0d:b0:4f:ec:f6:88:75:26:c9:ee:b2:70:
b4:31:a2:76:83:61:a5:a7:0c:51:29:b1:d8:79:a7:
8a:dc:e6:b0:05:5b:5d:37:aa:4e:d5:28:6f:27:21:
d8:a4:a0:dc:2d:8f:f5:35:88:98:7f:f2:ae:ef:24:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:46:0C:AE:70:3F:E0:47:EC:6E:1F:B8:A8:FF:2B:71:C8:5B:EC
X509v3 Authority Key Identifier:
keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:6b:04:24:81:ab:9f:f1:9d:b4:fa:19:16:cf:a4:b4:39:
68:28:33:72:0a:1f:eb:c2:4e:60:87:c0:66:ac:9d:b9:2e:63:
a7:8b:2a:32:d9:1c:51:ae:ae:0f:aa:1d:a7:2e:ab:a4:a7:e4:
2e:75:d4:78:ff:c7:5c:bf:fc:aa:cc:70:79:81:ef:e5:43:1b:
25:4a:14:35:b5:ec:3b:a4:da:f2:ce:91:b0:4a:8b:0f:3c:ff:
64:df:30:c4:4b:a7:48:c5:28:ed:42:e8:b8:52:42:cd:d6:47:
c0:7b:f7:88:19:7d:f9:3c:b2:14:ca:ab:24:61:f0:54:4f:00:
b2:27:d8:fa:37:3a:95:a0:6d:09:5d:a9:fc:80:a7:c7:eb:49:
bc:50:04:cd:43:23:d4:61:11:4b:b1:b6:57:4f:c7:2a:01:fc:
b7:51:dc:ed:ce:9d:fa:9b:dc:7a:16:18:c6:92:3c:7e:bd:f9:
ce:66:15:ab:ac:4f:26:3c:11:85:71:2a:35:98:9a:9c:be:ac:
48:79:bc:89:b6:1b:00:78:1a:c6:44:f5:ad:aa:4a:89:96:e2:
e9:f0:d9:56:10:1a:16:92:ec:1a:9d:31:8f:54:c1:1a:e2:53:
1c:4f:76:7d:d2:dc:14:ec:d2:7b:f5:71:e4:47:1c:1b:ec:db:
c1:77:46:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdGQkExMTAvBgNVBAUTKEIwMzQxQzM0M0ZFMTUyNUY3NkM5Mjk5NjEwQ0EwRTc4
RTkzRTg3QzMwHhcNMjYwMzAzMDY0MDQ4WhcNMjYwMzEwMDY0MDQ4WjAYMRYwFAYD
VQQDEw02OWE2ODI3MS1jYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUrTbqP6eTEGnMrn/01BwHo5lUS+QYxjo85OB9zHzGFXvwmsmtb4H61QuPaA
fqH+k97fPdAQgciW7oEmc9/n9kFloJLJWbpqONOk4k0Tt9K+khQL/vc6NV/Xwklb
PP77H6BDUijpsXu88ke6Iwrn8X65eQmbV9ijh2b6CrsmiAjqmH8uJ1s6AYN11S5Y
tevoAf1LBXEOlQ/mHA4tf2kGMlMQOxuFjXMx0vaUd2kFjBMqJV2zF8YK7fFxdv/e
IhRmphHqLiYNsE/s9oh1JsnusnC0MaJ2g2GlpwxRKbHYeaeK3OawBVtdN6pO1Shv
JyHYpKDcLY/1NYiYf/Ku7yTGAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGskRgyu
cD/gR+xuH7io/ytxyFvsMB8GA1UdIwQYMBaAFLA0HDQ/4VJfdskplhDKDnjpPofD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZCQS80MkZDM0Q4QTA0
OEYxMUYwODcyRTg1NDdDNEY5QUUwMi9zRFFjTkRfaFVsOTJ5U21XRU1vT2VPay1o
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NEUWNORF9oVWw5MnlTbVdFTW9PZU9rLWg4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0ZCQS80MkZDM0Q4QTA0OEYxMUYwODcyRTg1NDdDNEY5QUUwMi9zRFFjTkRfaFVs
OTJ5U21XRU1vT2VPay1oOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAez9rBCSBq5/xnbT6GRbPpLQ5aCgzcgof68JOYIfAZqyduS5jp4sqMtkcUa6u
D6odpy6rpKfkLnXUeP/HXL/8qsxweYHv5UMbJUoUNbXsO6Ta8s6RsEqLDzz/ZN8w
xEunSMUo7ULouFJCzdZHwHv3iBl9+TyyFMqrJGHwVE8AsifY+jc6laBtCV2p/ICn
x+tJvFAEzUMj1GERS7G2V0/HKgH8t1Hc7c6d+pvcehYYxpI8fr35zmYVq6xPJjwR
hXEqNZianL6sSHm8ibYbAHgaxkT1rapKiZbi6fDZVhAaFpLsGp0xj1TBGuJTHE92
fdLcFOzSe/Vx5EccG+zbwXdGRQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client