
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: b69FoNV4LyKTkywn0RT/fkQ636WlApzFaz6pwJjJh9c=
Subject key identifier: EA:6D:1D:74:C2:DF:C8:51:1A:37:27:AC:56:99:10:B7:49:5D:F1:1C
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 089D
Signing time: Thu 16 Apr 2026 20:26:01 +0000
Manifest this update: Thu 16 Apr 2026 20:26:00 +0000
Manifest next update: Thu 23 Apr 2026 20:26:00 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: cfD6MgwxX3+cAoTGjZ+kwVLBL8q+BLZ8uTnqUOiAfvo=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Apr 16 20:26:00 2026 GMT
Not After : Apr 23 20:26:00 2026 GMT
Subject: CN=69e145d8-ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:14:93:d2:89:68:ab:c9:f0:92:65:0e:47:
3b:64:b0:06:f7:73:d4:c8:34:d1:c5:e3:91:6f:e6:
e4:f9:aa:7d:31:16:bf:5d:2f:d8:a3:cf:c9:eb:45:
f1:db:20:64:08:60:ba:e4:a2:34:35:b0:1d:61:ff:
9f:98:63:08:87:16:dd:04:ef:02:1d:e4:62:02:5f:
0f:65:dc:8f:11:d9:21:1d:fd:34:f5:e1:7f:1d:42:
87:91:d4:2d:1a:cf:e6:92:eb:8d:0b:b3:be:ae:d9:
c5:a7:86:23:70:10:52:25:a0:2b:be:a1:39:60:24:
a3:94:ff:2e:c7:80:92:52:b0:a7:35:e5:98:1a:62:
7f:93:a7:f3:de:05:18:18:70:35:ca:89:0d:5a:a6:
a7:fa:d2:d2:e0:9f:ab:a2:a4:90:50:f5:01:4a:3f:
ef:f0:70:7d:c1:b5:a9:02:27:5f:a0:0b:4b:0c:ad:
d2:3a:08:d8:e6:18:4d:a1:ec:ae:cb:69:11:47:02:
49:46:50:49:ec:38:fe:a4:df:0f:9c:79:51:0a:d7:
5d:46:64:27:3b:30:36:c6:10:9e:8b:25:9f:f6:6b:
05:9e:c7:f5:2b:d3:42:8b:df:83:66:1e:ff:7b:b0:
e0:2b:77:8b:a3:07:fd:a3:c8:93:fa:d9:16:1a:5e:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:1D:74:C2:DF:C8:51:1A:37:27:AC:56:99:10:B7:49:5D:F1:1C
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a9:e3:60:7e:1c:ff:3c:3e:bc:2d:38:04:a4:cc:b0:67:c3:
ff:95:0f:b7:a5:d5:98:88:65:6f:91:75:fd:22:00:ef:ac:37:
36:00:81:d0:a2:51:70:d9:9e:d1:77:7f:28:8f:d0:10:c0:03:
f3:0b:34:24:e5:aa:34:b5:44:d8:59:db:3c:77:ba:c5:3b:f4:
82:3b:6f:06:d8:38:a5:35:40:70:64:5d:bf:af:c6:43:f0:c1:
d0:04:85:41:3f:6c:eb:c7:07:51:37:b8:32:25:6b:9c:b9:c1:
4a:79:f8:c2:14:d1:ca:95:c2:b4:1f:9f:5a:23:c1:38:fb:12:
88:8f:a9:20:66:78:34:44:29:7e:f5:be:93:74:c0:c4:cb:d6:
3e:11:00:af:77:38:99:90:a0:4c:c8:71:e8:e7:a3:35:f5:49:
be:49:c6:47:b6:f4:db:b3:7a:3f:2a:de:3a:ab:b4:cd:95:4d:
ae:87:e8:e8:f7:e5:9a:65:90:65:38:14:41:ce:d3:a2:34:61:
98:1f:83:aa:ce:d8:4c:3c:13:da:7c:14:62:a9:b4:77:d0:16:
ea:f5:ab:de:bf:11:2c:4e:13:d8:57:5c:c9:84:43:f9:aa:fc:
79:03:2c:6e:f3:9f:2f:f9:7e:41:49:f0:2f:a4:7e:af:bb:f1:
e8:6b:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:09 2026 by rpki-client