
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: Dr9S1rtIE1ALVsiGEcJ4cbiU4ZxcO0ySQ0qn0zH5fEU=
Subject key identifier: 58:11:E0:A5:34:FA:36:31:63:AC:AF:F3:86:F5:0D:E6:F6:2F:C5:7E
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 018B
Signing time: Tue 03 Mar 2026 04:08:03 +0000
Manifest this update: Tue 03 Mar 2026 04:08:02 +0000
Manifest next update: Tue 10 Mar 2026 04:08:02 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: 8Y0fRog1OqPKAb/Gr1PzzyZS/NthGj010bLr0IvYuio=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Mar 3 04:08:02 2026 GMT
Not After : Mar 10 04:08:02 2026 GMT
Subject: CN=69a65ea2-5909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:dc:2d:fd:0f:12:0c:fd:ec:89:88:cc:d0:
52:df:8d:55:ac:39:70:16:68:93:91:2d:98:b2:72:
f5:6a:e5:26:d2:ac:f6:b3:15:d1:40:4a:a8:0c:39:
c9:14:86:72:ef:cd:56:b8:df:9f:69:2b:e7:c5:e8:
ea:3c:e1:84:30:aa:df:0e:b4:13:f2:bb:77:39:c1:
e1:a1:20:ce:d4:31:17:9d:d3:eb:c8:83:78:75:e8:
a6:5d:5c:a5:7d:8c:ea:90:a3:b2:a7:7b:8e:52:24:
91:43:35:f1:a7:1a:1b:c9:63:71:4c:a7:6a:f0:f5:
55:3c:37:c6:76:81:72:62:8c:5c:28:2b:d6:70:58:
78:66:65:0f:f0:5b:c6:4b:71:74:74:45:41:b5:d6:
d6:90:4b:5a:de:89:8c:8d:4c:ff:0a:34:6c:90:e9:
ce:cb:98:e2:39:7b:6d:65:55:7f:f6:44:2a:bd:0d:
07:12:8b:3b:11:1c:77:d6:3b:cb:12:0b:04:ba:93:
e6:c4:c2:a7:07:49:8d:50:cb:3e:aa:5b:44:d3:f7:
7d:b9:c0:0e:b2:8a:cc:88:44:5c:71:dc:42:73:33:
09:e5:19:e7:ca:d5:1e:ea:c7:16:68:78:1a:1a:04:
6b:8c:32:94:09:f9:89:4d:bf:f0:bb:b2:11:4d:2c:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:E0:A5:34:FA:36:31:63:AC:AF:F3:86:F5:0D:E6:F6:2F:C5:7E
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:cb:f2:37:27:f6:3f:2a:a0:b0:7b:9d:c0:1f:f8:7f:8c:b7:
77:74:e7:83:32:33:8f:7e:d3:98:f3:9a:4a:8e:a1:ad:76:d6:
cc:85:1a:f9:05:e6:95:9e:2c:0d:21:6e:ee:00:42:24:61:3c:
7d:5c:be:9e:6a:b2:1c:d5:6d:7a:e7:3d:ca:d4:fe:78:c6:eb:
59:62:cf:21:f3:8b:a3:06:2a:d8:b6:22:b3:5e:63:05:1d:10:
77:a6:89:17:0c:be:95:d1:3d:92:2a:02:ef:ad:d0:e2:03:cc:
8b:03:98:0a:12:1f:2b:3c:17:8b:43:a9:e5:c1:d5:6f:b8:71:
60:f4:fe:3b:46:da:32:46:8e:89:ff:9b:57:e8:45:f7:0f:a2:
1f:1b:4b:f3:19:49:ba:5a:8e:01:3e:4c:8a:56:dc:a9:31:34:
45:33:c8:9c:ed:53:07:b2:e2:9c:a8:03:72:fb:4f:27:b1:43:
7e:49:38:5a:68:1c:3c:c9:0e:a5:e8:1b:f3:40:b1:5a:b1:c3:
e2:ef:91:c0:2e:d2:42:9b:2e:ff:26:fe:f3:ad:7d:22:16:d3:
46:7b:1b:2d:75:88:31:5c:ea:52:10:16:8e:d8:d8:dc:46:d1:
89:34:73:e2:71:6b:81:57:d7:92:a8:71:a2:fb:aa:e6:f1:35:
11:14:31:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy
M0Y5MEM5QzMwHhcNMjYwMzAzMDQwODAyWhcNMjYwMzEwMDQwODAyWjAYMRYwFAYD
VQQDEw02OWE2NWVhMi01OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmXrcLf0PEgz97ImIzNBS341VrDlwFmiTkS2YsnL1auUm0qz2sxXRQEqoDDnJ
FIZy781WuN+faSvnxejqPOGEMKrfDrQT8rt3OcHhoSDO1DEXndPryIN4deimXVyl
fYzqkKOyp3uOUiSRQzXxpxobyWNxTKdq8PVVPDfGdoFyYoxcKCvWcFh4ZmUP8FvG
S3F0dEVBtdbWkEta3omMjUz/CjRskOnOy5jiOXttZVV/9kQqvQ0HEos7ERx31jvL
EgsEupPmxMKnB0mNUMs+qltE0/d9ucAOsorMiERccdxCczMJ5RnnytUe6scWaHga
GgRrjDKUCfmJTb/wu7IRTSw2DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgR4KU0
+jYxY6yv84b1Deb2L8V+MB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy
QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN
NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaMvyNyf2PyqgsHudwB/4f4y3d3TngzIzj37TmPOaSo6hrXbWzIUa+QXmlZ4s
DSFu7gBCJGE8fVy+nmqyHNVteuc9ytT+eMbrWWLPIfOLowYq2LYis15jBR0Qd6aJ
Fwy+ldE9kioC763Q4gPMiwOYChIfKzwXi0Op5cHVb7hxYPT+O0baMkaOif+bV+hF
9w+iHxtL8xlJulqOAT5MilbcqTE0RTPInO1TB7LinKgDcvtPJ7FDfkk4WmgcPMkO
pegb80CxWrHD4u+RwC7SQpsu/yb+8619IhbTRnsbLXWIMVzqUhAWjtjY3EbRiTRz
4nFrgVfXkqhxovuq5vE1ERQxNg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:06 2026 by rpki-client