
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier: OoP/39SdGo2iVZnp6LQlDQskBMy7I7jVvH6H2t7xQHA=
Subject key identifier: C1:50:D0:46:07:1E:DD:D9:0E:44:9A:C5:7F:AA:25:57:72:B8:9F:A3
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial: 0369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number: 0335
Signing time: Sat 21 Mar 2026 00:43:19 +0000
Manifest this update: Sat 21 Mar 2026 00:43:19 +0000
Manifest next update: Sat 28 Mar 2026 00:43:19 +0000
Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: 3uUVNuF3TPySdBtgfdDqMJQVye4q7xG4+3J8o4tNSS4=)
2: 6C92164E8E7111F095FEDD1FC4F9AE02.roa (hash: hEwvb5ytkKxxM9O8jHrWeJCH/b+Oa1+Ladz4E/XqvoQ=)
3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: Alo6+mbXK5hudm6qXf9m/rE0ehCEvCvCk+3HnA1lEJ4=)
4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: /0S5pT79PtqrACJXMc9q9aiHeZ+Hyjz4votHiSroXOY=)
5: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: oCDiQD7WQuz6D3KtrNY0cV/jbfZz9PIvl3eIklo34Fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Validity
Not Before: Mar 21 00:43:19 2026 GMT
Not After : Mar 28 00:43:19 2026 GMT
Subject: CN=69bde9a7-d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:c9:89:2a:1a:39:fe:15:5b:00:9a:a6:c3:
4d:fc:84:75:f5:ec:d4:fa:92:02:80:b4:21:1c:3e:
94:b2:59:e5:29:5e:4f:58:0a:30:6c:8f:a8:5b:f2:
f1:89:bf:62:e5:4d:3b:55:a3:0e:fb:15:37:de:18:
2f:85:84:2c:2b:ae:12:b1:69:77:87:ef:dc:bb:94:
0c:3d:b7:61:e8:31:a8:20:76:32:51:07:1a:b4:23:
68:dd:18:98:1d:f3:a6:0a:ff:0a:6f:64:27:da:03:
f1:eb:4b:68:60:8b:82:d1:d7:e2:9d:58:96:5e:de:
1a:ed:45:62:45:31:9b:ee:1d:d8:7e:0a:dd:06:a6:
16:ee:a0:71:cb:4c:80:0a:68:56:d1:b5:22:2a:d0:
00:30:e1:48:bd:8e:8d:5b:86:e4:96:93:2a:a3:63:
fa:4e:c0:8b:a3:82:c7:6a:72:cd:59:0f:7b:d0:ef:
9c:fa:17:73:b5:01:d3:f5:7c:99:6d:d7:12:01:68:
50:1d:59:ed:94:56:e1:0c:72:ef:94:26:3a:b1:78:
1a:60:d3:03:14:99:86:9a:73:31:7c:85:8d:a8:d5:
49:23:51:5b:c8:87:99:ea:90:7a:6d:ba:77:09:ed:
56:a8:d7:4f:d6:d1:19:d2:89:45:36:6f:64:cb:ac:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:D0:46:07:1E:DD:D9:0E:44:9A:C5:7F:AA:25:57:72:B8:9F:A3
X509v3 Authority Key Identifier:
keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:3a:ab:0e:77:d0:7f:e8:d6:1c:3f:9a:51:ab:82:bc:9b:
66:82:3d:95:5b:ba:8a:e2:06:49:b7:34:bc:f1:a8:75:83:fe:
86:86:11:a2:cf:92:79:bc:aa:4f:74:71:fe:42:df:6f:5a:ca:
c4:ea:4d:da:4c:fb:39:3b:20:66:45:a1:2d:85:3a:6c:6f:ca:
3b:1d:18:81:4d:85:58:ae:4f:ac:bc:02:e3:88:74:a8:e7:95:
80:0d:0e:44:dd:2b:4b:7b:7b:2a:7e:8a:1e:4c:6b:92:32:77:
98:fe:43:6d:80:7d:3c:b4:45:d3:fd:b4:e9:17:a2:e0:4b:76:
fb:15:c0:8c:6c:1a:a5:3f:b1:a3:4d:ba:29:71:75:d9:75:cd:
af:ff:fb:8e:cd:fd:d9:37:93:14:52:53:74:e4:18:21:c6:6c:
e8:be:74:3d:39:cf:6f:a0:40:d7:a7:28:52:bc:c6:82:39:f6:
66:fc:d3:0c:9a:0b:6d:9d:3c:e5:fe:62:39:8f:8e:f3:9c:b9:
95:2e:8c:f4:7a:0c:75:8a:a6:3b:af:4d:41:5c:f8:9d:ba:2d:
f8:64:f5:7f:13:b3:2d:b9:73:86:8d:3b:e6:be:a7:4e:a4:4f:
7b:21:e9:4c:0e:a8:96:0a:56:b0:19:ba:76:2d:79:e7:c8:ba:
fa:75:10:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjYwMzIxMDA0MzE5WhcNMjYwMzI4MDA0MzE5WjAYMRYwFAYD
VQQDEw02OWJkZTlhNy1kMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkOzJiSoaOf4VWwCapsNN/IR19ezU+pICgLQhHD6UslnlKV5PWAowbI+oW/Lx
ib9i5U07VaMO+xU33hgvhYQsK64SsWl3h+/cu5QMPbdh6DGoIHYyUQcatCNo3RiY
HfOmCv8Kb2Qn2gPx60toYIuC0dfinViWXt4a7UViRTGb7h3YfgrdBqYW7qBxy0yA
CmhW0bUiKtAAMOFIvY6NW4bklpMqo2P6TsCLo4LHanLNWQ970O+c+hdztQHT9XyZ
bdcSAWhQHVntlFbhDHLvlCY6sXgaYNMDFJmGmnMxfIWNqNVJI1FbyIeZ6pB6bbp3
Ce1WqNdP1tEZ0olFNm9ky6xAawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFQ0EYH
Ht3ZDkSaxX+qJVdyuJ+jMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ
Ul93TlQwY0ktZFFVa3hxNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARB86qw530H/o1hw/mlGrgrybZoI9lVu6iuIGSbc0vPGodYP+hoYRos+Sebyq
T3Rx/kLfb1rKxOpN2kz7OTsgZkWhLYU6bG/KOx0YgU2FWK5PrLwC44h0qOeVgA0O
RN0rS3t7Kn6KHkxrkjJ3mP5DbYB9PLRF0/206Rei4Et2+xXAjGwapT+xo026KXF1
2XXNr//7js392TeTFFJTdOQYIcZs6L50PTnPb6BA16coUrzGgjn2ZvzTDJoLbZ08
5f5iOY+O85y5lS6M9HoMdYqmO69NQVz4nbot+GT1fxOzLblzho075r6nTqRPeyHp
TA6olgpWsBm6di1558i6+nUQnw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:38:02 2026 by rpki-client