
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: 2i2hRGnIAZoPjJsY1XU/UiL9K+y1fFIZSsl4la8ObMM=
Subject key identifier: 2E:0C:52:A1:3C:FE:F7:5E:37:7A:BE:74:E8:50:16:A9:D9:FF:31:77
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 03EB
Signing time: Wed 11 Mar 2026 00:04:13 +0000
Manifest this update: Wed 11 Mar 2026 00:04:13 +0000
Manifest next update: Wed 18 Mar 2026 00:04:13 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: 7io6jwHA25lP2rKr5I1cWMndg6sTUEgj2ccJ1FCcqEY=)
2: E0AE0960457811EDA501504AC4F9AE02.roa (hash: ci4lFYENiNfb5UuSt75Scv3I9VEuzf0ST0vqCXE0cZ0=)
3: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: Ergbmg1vWNlvxJ4XapptircO+YMYpEasJPvQKeLaESU=)
4: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: VbN+n5edtiV3lpqSvWR3nBuTc2AbtPGsLppcFv4e+iE=)
5: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: vZosPve5XEPfEcrx7/RXcywONMO85inn+gfn1MqjGIQ=)
6: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: CEhPrG7NEPUU+dLb+jSC6SEpeViY72/PdQAvCWxM9IY=)
7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: H55tA7yyGV6m4fFeS15FhsBPX6z+L2HeV9VUsULd9Q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Mar 11 00:04:13 2026 GMT
Not After : Mar 18 00:04:13 2026 GMT
Subject: CN=69b0b17d-a6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:42:58:b6:ec:82:c0:f4:50:04:ff:12:63:
6c:58:75:b5:c9:52:9f:2c:eb:11:68:4b:9d:91:ea:
a8:9a:41:9d:c8:31:d5:b4:19:60:8f:bc:e7:95:f4:
07:8e:a3:67:0f:95:01:e4:5f:a7:f4:db:e1:2d:43:
bd:6f:65:4f:2e:c2:ea:ea:8d:f2:07:09:14:19:93:
b5:81:3d:a9:86:f8:89:18:a7:9a:c5:d7:76:0c:23:
66:7f:bf:4d:ca:7c:5c:44:ba:5c:00:0b:43:77:e8:
75:c3:24:f2:8f:d5:a3:a6:50:e8:fc:74:2d:fd:6b:
07:ba:79:66:56:17:f5:5f:41:64:79:f8:69:c4:b2:
d8:94:48:66:3b:60:36:48:82:d6:ba:70:fe:50:55:
f1:d2:19:6f:74:c5:ba:e1:43:2f:2b:a0:db:fb:ff:
52:03:b9:53:3e:9e:13:7c:c4:24:10:16:7e:43:c2:
14:b4:c0:7f:03:39:a2:bc:55:d1:14:6d:b1:9c:65:
3c:5c:76:d1:d8:3e:0d:a9:74:a3:77:f8:81:40:a2:
2d:08:40:8a:6f:a4:2d:d4:6a:e7:34:72:8b:80:99:
bb:71:dd:e0:32:43:fd:60:15:b2:9a:0f:95:0f:fe:
b3:f2:7e:80:6e:80:a7:53:2c:03:5a:74:12:ca:97:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:52:A1:3C:FE:F7:5E:37:7A:BE:74:E8:50:16:A9:D9:FF:31:77
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:a3:e2:2c:6c:46:72:02:97:38:c3:82:b7:fc:ff:75:c5:8b:
0b:2c:1e:a8:5e:d6:9f:b5:d5:39:b1:12:eb:a7:d1:0a:b1:f7:
5a:89:52:b4:10:83:40:48:73:d6:81:1b:b8:26:e8:3d:0b:24:
ca:64:11:69:ed:bd:0b:92:6d:fe:73:37:91:e3:32:32:93:16:
97:31:f4:e0:a7:1a:f9:9d:33:9a:1d:02:ed:34:1b:5c:b2:db:
bd:c6:0f:c1:6e:7a:eb:e3:68:54:36:2b:88:e2:9c:b4:b0:6c:
50:c7:6b:12:e6:ef:5e:c3:95:51:04:3c:c5:12:52:bf:5a:d3:
7c:a2:d1:28:02:42:54:1b:bc:de:ba:77:c8:2a:f8:13:ac:4e:
82:a2:7a:d0:95:22:66:d7:4e:24:ff:bb:83:ac:a3:f0:53:70:
93:71:61:5c:29:65:40:40:d9:a7:7c:92:df:f0:40:91:5b:a6:
ba:d5:40:33:50:e2:01:31:89:e3:5c:01:c5:2f:34:24:0a:cf:
6c:ee:1c:b7:08:0d:0e:c4:ec:cc:dd:60:23:51:c9:95:5c:f2:
b7:52:5b:a4:9d:46:6d:0a:7f:c1:35:c1:88:b8:c8:44:02:fc:
b3:e1:93:ab:ff:18:47:b4:58:b0:2e:a8:41:d2:93:43:4d:27:
bf:c4:c9:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC
RTJBQTBBRDUwHhcNMjYwMzExMDAwNDEzWhcNMjYwMzE4MDAwNDEzWjAYMRYwFAYD
VQQDEw02OWIwYjE3ZC1hNmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx15CWLbsgsD0UAT/EmNsWHW1yVKfLOsRaEudkeqomkGdyDHVtBlgj7znlfQH
jqNnD5UB5F+n9NvhLUO9b2VPLsLq6o3yBwkUGZO1gT2phviJGKeaxdd2DCNmf79N
ynxcRLpcAAtDd+h1wyTyj9WjplDo/HQt/WsHunlmVhf1X0FkefhpxLLYlEhmO2A2
SILWunD+UFXx0hlvdMW64UMvK6Db+/9SA7lTPp4TfMQkEBZ+Q8IUtMB/AzmivFXR
FG2xnGU8XHbR2D4NqXSjd/iBQKItCECKb6Qt1GrnNHKLgJm7cd3gMkP9YBWymg+V
D/6z8n6AboCnUywDWnQSypcpDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4MUqE8
/vdeN3q+dOhQFqnZ/zF3MB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx
NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw
Ymo2X09BTk95Z20tS3FDdFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMqPiLGxGcgKXOMOCt/z/dcWLCyweqF7Wn7XVObES66fRCrH3WolStBCDQEhz
1oEbuCboPQskymQRae29C5Jt/nM3keMyMpMWlzH04Kca+Z0zmh0C7TQbXLLbvcYP
wW566+NoVDYriOKctLBsUMdrEubvXsOVUQQ8xRJSv1rTfKLRKAJCVBu83rp3yCr4
E6xOgqJ60JUiZtdOJP+7g6yj8FNwk3FhXCllQEDZp3yS3/BAkVumutVAM1DiATGJ
41wBxS80JArPbO4ctwgNDsTszN1gI1HJlVzyt1JbpJ1GbQp/wTXBiLjIRAL8s+GT
q/8YR7RYsC6oQdKTQ00nv8TJEg==
-----END CERTIFICATE-----
Generated at Wed Mar 11 11:20:18 2026 by rpki-client