
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: 2n1juTMzfiPMjQYfmWFgg2+4Sa9Cb9yLmAJu4jCXfTI=
Subject key identifier: 56:03:6A:F0:EC:95:EC:F5:57:9D:9A:21:61:83:73:07:E2:6B:F2:2F
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 0903
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 08F9
Signing time: Wed 14 Oct 2026 20:32:34 +0000
Manifest this update: Wed 14 Oct 2026 20:32:34 +0000
Manifest next update: Wed 21 Oct 2026 20:32:34 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: /dNIKbDw+E6bjrQ6QAxforR0SRsTcIqshJeI1lEkyGU=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Oct 14 20:32:34 2026 GMT
Not After : Oct 21 20:32:34 2026 GMT
Subject: CN=6acfe6e2-326d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:e6:d3:fd:50:b7:18:f1:31:03:15:56:c9:
d5:ee:ce:03:34:f8:15:78:df:e7:de:9d:c3:77:36:
2d:f3:d3:f7:e1:00:c8:2d:eb:0f:8e:a2:69:00:b1:
54:84:b4:ae:74:ca:8d:d8:1f:64:e1:50:4e:f6:cf:
39:99:68:b9:a8:8c:35:34:13:ac:c9:1b:5a:50:77:
10:e5:c5:a1:04:1d:b1:fb:3e:05:e5:b3:61:08:7f:
15:69:6b:9d:e2:15:da:28:78:13:13:57:56:77:4b:
88:49:64:8f:28:78:84:1d:0d:46:d8:5e:b1:7c:42:
b4:c3:83:fb:20:38:ff:6d:d1:b5:59:31:f9:0c:83:
3b:f4:d0:1e:0e:b6:bc:96:9f:af:ff:03:cc:4a:28:
3e:f7:56:cb:c9:dc:6b:aa:06:f7:c9:43:f7:9a:b2:
8b:cd:75:5a:bb:e0:25:f4:1d:66:1f:98:c6:f7:b1:
17:b9:64:c0:e2:5d:af:5c:91:96:98:95:72:75:56:
20:b3:0d:b9:d2:e5:18:f1:9e:d8:c6:b4:21:03:fe:
66:cb:d4:ef:c2:d5:02:4d:b3:c5:e6:67:1f:a0:74:
9c:6c:80:f0:eb:1d:71:90:e7:e9:b4:4a:ef:61:0c:
0d:a5:4e:1d:6b:50:37:a9:fd:d4:aa:92:e5:53:59:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:6A:F0:EC:95:EC:F5:57:9D:9A:21:61:83:73:07:E2:6B:F2:2F
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:6f:bc:ca:78:37:2d:48:df:4c:ec:80:8b:19:29:9c:61:c1:
e6:4f:c5:1a:48:32:4a:be:20:51:56:43:2d:7c:f5:79:18:d6:
ac:16:c6:db:62:9b:76:46:ab:ba:e6:d1:00:9d:28:11:e7:cf:
c5:63:77:15:a0:c3:d4:79:7a:5f:85:e2:cb:88:f6:be:c8:e9:
ee:7f:2f:d4:84:3a:a6:48:cf:c1:57:64:a3:a1:97:bb:d9:71:
a5:5d:8b:6d:ed:e4:fc:22:e1:14:c7:79:31:4a:9d:01:41:c0:
51:71:4f:a0:b8:66:89:21:de:36:60:cf:3f:b7:98:03:f5:be:
28:c9:e4:5e:59:03:87:d9:d2:c1:4f:c8:b6:9d:1a:8c:be:35:
ef:f9:c6:cd:62:91:78:e8:f6:66:c4:19:47:06:af:a9:6e:f4:
b2:95:38:df:03:b2:c5:f8:4e:68:4a:c0:88:db:23:b9:85:50:
8d:f6:41:35:8b:13:d7:ac:74:cf:8a:9f:01:29:cb:cb:d3:af:
9f:d6:67:3a:bb:98:27:04:50:c9:86:1b:6b:9a:a3:8b:8b:44:
61:b6:db:7c:d2:9b:f3:65:ac:72:5b:80:76:83:4a:24:0a:b7:
15:e7:6b:75:a1:a4:ad:bb:66:d1:37:29:3e:7c:00:eb:c3:d9:
92:fb:0d:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0
OTE3MkFCRTMwHhcNMjYxMDE0MjAzMjM0WhcNMjYxMDIxMjAzMjM0WjAYMRYwFAYD
VQQDEw02YWNmZTZlMi0zMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA81rm0/1QtxjxMQMVVsnV7s4DNPgVeN/n3p3DdzYt89P34QDILesPjqJpALFU
hLSudMqN2B9k4VBO9s85mWi5qIw1NBOsyRtaUHcQ5cWhBB2x+z4F5bNhCH8VaWud
4hXaKHgTE1dWd0uISWSPKHiEHQ1G2F6xfEK0w4P7IDj/bdG1WTH5DIM79NAeDra8
lp+v/wPMSig+91bLydxrqgb3yUP3mrKLzXVau+Al9B1mH5jG97EXuWTA4l2vXJGW
mJVydVYgsw250uUY8Z7YxrQhA/5my9TvwtUCTbPF5mcfoHScbIDw6x1xkOfptErv
YQwNpU4da1A3qf3UqpLlU1l46QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYDavDs
lez1V52aIWGDcwfia/IvMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz
OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu
ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYG+8yng3LUjfTOyAixkpnGHB5k/FGkgySr4gUVZDLXz1eRjWrBbG22Kbdkar
uubRAJ0oEefPxWN3FaDD1Hl6X4Xiy4j2vsjp7n8v1IQ6pkjPwVdko6GXu9lxpV2L
be3k/CLhFMd5MUqdAUHAUXFPoLhmiSHeNmDPP7eYA/W+KMnkXlkDh9nSwU/Itp0a
jL417/nGzWKReOj2ZsQZRwavqW70spU43wOyxfhOaErAiNsjuYVQjfZBNYsT16x0
z4qfASnLy9Ovn9ZnOruYJwRQyYYba5qji4tEYbbbfNKb82WscluAdoNKJAq3Fedr
daGkrbtm0TcpPnwA68PZkvsNUw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:58:40 2026 by rpki-client