
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json)
Hash identifier: 2UxPFAdWF9xkoH7nip6NIT7YRoEtEoVaGtiQ4qn3Tac=
Subject key identifier: CC:3D:AC:F4:79:01:D2:1B:ED:7B:42:DA:E8:1A:6E:CE:A5:23:36:55
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
Manifest number: 0158
Signing time: Thu 03 Sep 2026 05:18:23 +0000
Manifest this update: Thu 03 Sep 2026 05:18:22 +0000
Manifest next update: Thu 10 Sep 2026 05:18:22 +0000
Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: Pr/4cQlTQIgu125sd3VayDYCSpn795ru3YjAHlD5oTE=)
2: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=)
3: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Validity
Not Before: Sep 3 05:18:22 2026 GMT
Not After : Sep 10 05:18:22 2026 GMT
Subject: CN=6a99031e-5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:38:8e:01:be:93:47:fb:c6:10:b4:19:6f:
14:01:50:c6:4a:62:8d:14:38:14:e7:24:d0:e6:5f:
ae:7e:41:5e:50:3d:e9:7f:56:c7:ec:a9:f3:85:db:
bd:53:54:13:5a:09:77:5b:c6:1a:97:9a:e5:99:ca:
b4:c4:83:23:01:ee:0c:e9:19:46:7d:ff:e4:19:d5:
7d:19:9c:c1:b0:25:5e:80:a5:dc:56:2b:80:8d:15:
f7:e2:45:83:09:6a:fa:7a:fa:35:f3:d2:45:49:ac:
90:2f:b4:56:72:63:c4:e4:b2:c8:3f:25:be:7e:ac:
93:35:fc:ba:08:e6:58:4d:2f:77:3d:1b:68:30:3e:
58:5b:e9:c0:f7:59:53:f6:c6:30:ee:6c:a0:45:7b:
0c:bd:92:a7:19:3f:aa:48:62:fb:9b:4f:e1:a9:bc:
96:20:ed:0c:cd:74:13:9a:e5:00:45:88:49:8c:14:
4e:5c:35:64:dc:11:c2:ca:39:71:a1:f9:52:3c:4c:
2d:31:7c:c0:bb:35:ee:cd:41:f6:1c:14:4f:2f:5c:
88:da:34:96:27:a6:54:33:c4:7b:10:89:42:56:c2:
aa:59:34:16:bc:d5:a7:7b:dc:2c:1b:18:f0:53:a0:
37:73:9c:f0:33:d3:a6:c9:3c:17:5b:4d:64:09:ad:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:AC:F4:79:01:D2:1B:ED:7B:42:DA:E8:1A:6E:CE:A5:23:36:55
X509v3 Authority Key Identifier:
keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:2e:55:f6:d1:bd:12:43:44:eb:95:4b:0f:5e:af:99:51:
1d:b4:04:13:e5:24:93:8f:ab:21:45:25:0c:ea:fe:c6:2a:f7:
52:e8:78:b5:9d:00:3e:52:a9:32:ec:61:6e:ec:6c:32:2b:61:
b2:40:1e:34:c7:22:62:56:e5:77:6d:68:5a:ba:68:8f:31:63:
20:05:3e:bb:50:a7:c7:ec:40:2b:11:0d:dc:32:be:ed:79:71:
c4:e2:0c:30:d9:33:71:f0:45:1b:72:e2:c8:fd:3c:cc:53:d0:
0d:20:be:5f:3d:4b:8c:78:8a:ed:5d:63:4c:47:04:36:0f:fc:
e6:40:45:96:39:a8:79:1d:82:e3:04:21:16:dd:ad:7f:f1:95:
48:d2:1e:a8:11:d4:f1:ad:ad:ae:5f:c8:7c:cd:56:cd:2d:e0:
9b:d9:d1:2b:45:01:24:69:04:46:10:7a:7d:91:58:83:e2:e6:
2c:37:8c:96:1e:11:7e:df:b9:65:e5:09:c1:e0:51:41:29:1b:
32:8f:fd:35:ea:a8:b7:e3:80:e1:96:26:17:3c:f3:8c:12:9a:
5d:9e:9c:87:7c:3a:79:0a:8e:c5:d6:e0:78:0f:be:62:c7:1a:
47:a3:10:fa:73:f5:bf:54:e5:33:b7:65:62:de:50:13:d4:84:
06:18:4c:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF
MjEzMEFGMTQwHhcNMjYwOTAzMDUxODIyWhcNMjYwOTEwMDUxODIyWjAYMRYwFAYD
VQQDEw02YTk5MDMxZS01YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJ84jgG+k0f7xhC0GW8UAVDGSmKNFDgU5yTQ5l+ufkFeUD3pf1bH7Knzhdu9
U1QTWgl3W8Yal5rlmcq0xIMjAe4M6RlGff/kGdV9GZzBsCVegKXcViuAjRX34kWD
CWr6evo189JFSayQL7RWcmPE5LLIPyW+fqyTNfy6COZYTS93PRtoMD5YW+nA91lT
9sYw7mygRXsMvZKnGT+qSGL7m0/hqbyWIO0MzXQTmuUARYhJjBROXDVk3BHCyjlx
oflSPEwtMXzAuzXuzUH2HBRPL1yI2jSWJ6ZUM8R7EIlCVsKqWTQWvNWne9wsGxjw
U6A3c5zwM9OmyTwXW01kCa0lnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMw9rPR5
AdIb7XtC2ugabs6lIzZVMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD
RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl
NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASVouVfbRvRJDROuVSw9er5lRHbQEE+Ukk4+rIUUlDOr+xir3Uuh4tZ0APlKp
MuxhbuxsMithskAeNMciYlbld21oWrpojzFjIAU+u1Cnx+xAKxEN3DK+7XlxxOIM
MNkzcfBFG3LiyP08zFPQDSC+Xz1LjHiK7V1jTEcENg/85kBFljmoeR2C4wQhFt2t
f/GVSNIeqBHU8a2trl/IfM1WzS3gm9nRK0UBJGkERhB6fZFYg+LmLDeMlh4Rft+5
ZeUJweBRQSkbMo/9Neqot+OA4ZYmFzzzjBKaXZ6ch3w6eQqOxdbgeA++YscaR6MQ
+nP1v1TlM7dlYt5QE9SEBhhMUQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:09 2026 by rpki-client