
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: PJnXK5z71Yx2um7JD3BV4LJNy36hp3vaZXWL9nAyOWA=
Subject key identifier: 77:A0:84:EC:F3:5B:F2:40:0F:4C:62:69:7B:65:1C:4E:E7:65:86:2F
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 0403
Signing time: Mon 27 Apr 2026 00:28:23 +0000
Manifest this update: Mon 27 Apr 2026 00:28:22 +0000
Manifest next update: Mon 04 May 2026 00:28:22 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: k43CdDtNOJjmPhbEKtG1wT3GHi1PyYorl8Kp6p2j1gM=)
2: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: vZosPve5XEPfEcrx7/RXcywONMO85inn+gfn1MqjGIQ=)
3: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: Ergbmg1vWNlvxJ4XapptircO+YMYpEasJPvQKeLaESU=)
4: E0AE0960457811EDA501504AC4F9AE02.roa (hash: ci4lFYENiNfb5UuSt75Scv3I9VEuzf0ST0vqCXE0cZ0=)
5: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: CEhPrG7NEPUU+dLb+jSC6SEpeViY72/PdQAvCWxM9IY=)
6: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: VbN+n5edtiV3lpqSvWR3nBuTc2AbtPGsLppcFv4e+iE=)
7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: H55tA7yyGV6m4fFeS15FhsBPX6z+L2HeV9VUsULd9Q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 00:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Apr 27 00:28:22 2026 GMT
Not After : May 4 00:28:22 2026 GMT
Subject: CN=69eeada7-0848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:0a:b9:99:7d:88:65:5b:84:f9:7b:30:fe:
08:b9:aa:3b:ca:af:18:57:a4:8c:d9:ac:52:58:30:
1e:cd:91:f7:03:89:0d:79:ad:e2:2d:fe:07:01:59:
b0:63:fe:83:0d:19:52:12:36:41:1d:ea:13:ed:2a:
57:fb:e4:dc:16:ca:29:ab:80:44:df:7b:f4:95:51:
80:7d:3e:18:05:9f:08:5f:29:45:ef:99:9a:25:00:
b3:28:73:89:12:15:9f:2f:34:4a:89:c8:57:a3:56:
9b:c8:8e:7b:33:8d:10:76:38:68:e5:4a:39:8e:75:
7a:63:63:9c:61:b1:e5:05:43:ec:a5:d7:34:e6:d5:
87:b7:3e:b2:58:51:84:c5:f4:3a:40:a5:fb:e5:03:
7e:c9:6b:bb:d8:8f:a6:da:d5:70:b5:4a:21:07:b6:
c3:75:73:16:9b:03:db:54:a0:34:f7:bd:c1:e2:5a:
b0:70:00:c4:95:62:09:3a:f2:0b:1c:35:e8:1c:f6:
5b:b5:a1:46:83:bd:75:c2:4e:40:07:b3:49:b8:06:
a1:25:1c:f9:97:b8:40:ac:72:0e:3f:02:8d:53:35:
45:88:17:81:b4:92:40:d9:57:60:b6:e5:15:2e:ec:
55:f7:e3:b2:7a:cb:a8:08:3e:12:42:20:17:06:e1:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:84:EC:F3:5B:F2:40:0F:4C:62:69:7B:65:1C:4E:E7:65:86:2F
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:26:f2:e2:28:88:5a:6a:c9:7a:08:03:cd:a0:7f:3e:6e:4f:
e0:78:65:2f:ad:ea:e6:fa:b4:e4:b4:b7:26:37:5d:e7:27:2c:
c8:b3:c4:05:6a:09:ea:2c:90:f4:85:7c:e7:4c:16:7a:99:b3:
f2:dd:f4:1c:50:3d:75:53:f5:52:d4:10:ef:d3:e1:67:02:9c:
b9:b7:fc:cc:94:93:cf:5f:c3:23:eb:5b:65:ba:c5:43:98:ce:
6e:d6:17:9e:49:c5:78:4a:9d:5b:90:c2:fc:93:74:dc:c5:44:
7e:7c:d6:55:fa:53:f6:bd:c2:51:0c:ef:34:d8:95:4f:e6:f7:
f9:5e:b2:7e:97:71:42:10:48:45:d6:f3:15:41:23:b7:9c:c2:
de:fe:5d:f9:2d:b5:6a:26:a6:a6:58:0e:23:a0:cf:03:d7:c9:
ad:af:e0:1f:94:0c:b1:95:eb:59:b4:c0:84:57:2e:6c:da:e0:
af:dd:3f:63:01:4c:b5:f1:16:62:a6:b1:c6:b3:74:d6:a9:4e:
18:fc:ba:32:60:f8:04:b1:3a:25:d6:a0:93:6c:9d:7c:4b:4a:
8b:fd:0c:57:4e:90:85:2d:d1:ac:b2:3b:8a:89:7e:5b:ae:b3:
2f:15:dd:1d:38:ee:5d:5e:bc:02:72:2f:66:0c:09:d9:36:6e:
ae:14:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:12 2026 by rpki-client