
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier: Vtc5PHYJ1EkH5UfoyTJd80DxLk9dj2QGTv9JVJgd2LY=
Subject key identifier: E3:65:CA:8E:F8:9B:03:86:0B:D5:3B:74:81:D3:39:5C:81:73:8B:35
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number: 7E
Signing time: Sat 19 Sep 2026 07:46:25 +0000
Manifest this update: Sat 19 Sep 2026 07:46:24 +0000
Manifest next update: Sat 26 Sep 2026 07:46:24 +0000
Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: H+JsWIqTEfwOSpf1Rj4TJ17eznZwqY0YpyPYDIeq3Ns=)
2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Validity
Not Before: Sep 19 07:46:24 2026 GMT
Not After : Sep 26 07:46:24 2026 GMT
Subject: CN=6aae3dd1-ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:29:1d:05:6d:df:7f:59:53:4e:1d:b2:10:
99:55:d6:99:20:ea:fb:72:d3:04:e9:6d:b2:86:88:
6f:91:ca:ea:12:b2:e5:60:b2:c7:26:0b:23:97:98:
a2:99:ce:7c:25:0e:7a:e1:38:7f:0f:04:54:b7:12:
29:c6:c4:bf:f1:3d:b0:09:62:26:9c:84:3d:1c:dd:
79:82:51:d3:7b:fc:e5:c7:86:88:de:43:44:1f:08:
c5:cb:64:13:d6:ff:37:40:3d:e2:11:44:e8:bd:ef:
3b:24:cc:da:b6:10:15:df:2b:7a:b6:f0:d7:ef:a7:
9d:34:7b:e0:17:99:f5:ae:c0:5f:d3:33:cf:fa:83:
07:fd:22:15:b5:14:a7:33:1e:f5:49:0a:a4:fe:c2:
a2:f8:d9:bf:33:0b:37:18:a6:9e:6a:04:31:84:f4:
c0:ae:5b:bc:83:a3:b5:01:23:52:ea:dd:8c:8f:8c:
5a:d7:38:5e:43:31:47:83:67:71:2a:1c:64:9f:46:
e8:50:38:04:bb:61:55:49:2b:55:b3:9f:0d:c6:02:
44:4d:a8:00:92:bb:8e:db:d7:62:7e:a7:bd:96:f3:
7e:e3:dd:bd:26:e0:11:ab:97:d3:15:f7:70:24:b5:
0d:28:da:30:38:b8:18:0e:87:77:88:71:7a:65:fb:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:CA:8E:F8:9B:03:86:0B:D5:3B:74:81:D3:39:5C:81:73:8B:35
X509v3 Authority Key Identifier:
keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:27:56:d6:cd:50:22:41:16:d5:36:59:3e:54:57:44:ac:74:
78:39:d8:3c:d5:51:d5:2d:0b:5c:7e:32:0c:53:5e:0d:56:1a:
f6:4c:89:b0:df:4b:b7:70:c9:cf:77:d3:71:67:16:15:da:bd:
7a:89:5d:e1:2e:89:7b:3d:06:8b:63:78:ac:b0:25:a7:44:1d:
e8:34:18:99:2e:13:14:94:b9:3b:a9:c5:da:00:91:13:e9:90:
2f:04:8c:a5:b6:2b:eb:80:d5:26:4b:fa:d4:7a:bb:11:c1:5f:
c2:27:f4:08:d8:1e:a0:5f:72:d3:36:98:1c:85:b3:bb:11:35:
d3:90:fc:49:7c:99:a4:76:8e:42:4e:a6:1c:4e:c4:9c:8e:29:
88:bf:c6:c8:07:58:45:b0:de:ce:ae:cf:8e:da:a2:75:4e:e2:
20:d3:02:93:de:f4:fc:4c:a3:7f:02:d3:7d:f5:8a:b0:5e:c7:
52:80:0c:5d:dc:56:77:11:2b:90:0d:ac:4f:2c:7d:ae:b4:26:
d7:2c:1d:c5:05:66:ae:f1:32:9b:be:40:3a:0c:d6:79:a7:27:
c6:25:ae:b2:bf:4e:c4:d0:53:3f:4f:90:1c:c6:92:53:d6:45:
bf:a7:ef:23:50:b9:cd:b0:d6:a4:e5:ae:5e:5b:f3:76:86:1e:
12:69:d2:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDOEIxMTAvBgNVBAUTKDY4NTU0MzczNDBFRUY5REY0MjMzQUEzMDU5ODMwMTIx
N0IwQTFDNTUwHhcNMjYwOTE5MDc0NjI0WhcNMjYwOTI2MDc0NjI0WjAYMRYwFAYD
VQQDEw02YWFlM2RkMS1lYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGkpHQVt339ZU04dshCZVdaZIOr7ctME6W2yhohvkcrqErLlYLLHJgsjl5ii
mc58JQ564Th/DwRUtxIpxsS/8T2wCWImnIQ9HN15glHTe/zlx4aI3kNEHwjFy2QT
1v83QD3iEUTove87JMzathAV3yt6tvDX76edNHvgF5n1rsBf0zPP+oMH/SIVtRSn
Mx71SQqk/sKi+Nm/Mws3GKaeagQxhPTArlu8g6O1ASNS6t2Mj4xa1zheQzFHg2dx
Khxkn0boUDgEu2FVSStVs58NxgJETagAkruO29difqe9lvN+4929JuARq5fTFfdw
JLUNKNowOLgYDod3iHF6Zfv2SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONlyo74
mwOGC9U7dIHTOVyBc4s1MB8GA1UdIwQYMBaAFGhVQ3NA7vnfQjOqMFmDASF7ChxV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM4Qi85NDYwMjc0QUY2
NkExMUYwQTNGQjkwODg2RjZGNTZCQy9hRlZEYzBEdS1kOUNNNm93V1lNQklYc0tI
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hGVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM4Qi85NDYwMjc0QUY2NkExMUYwQTNGQjkwODg2RjZGNTZCQy9hRlZEYzBEdS1k
OUNNNm93V1lNQklYc0tIRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAidW1s1QIkEW1TZZPlRXRKx0eDnYPNVR1S0LXH4yDFNeDVYa9kyJsN9Lt3DJ
z3fTcWcWFdq9eold4S6Jez0Gi2N4rLAlp0Qd6DQYmS4TFJS5O6nF2gCRE+mQLwSM
pbYr64DVJkv61Hq7EcFfwif0CNgeoF9y0zaYHIWzuxE105D8SXyZpHaOQk6mHE7E
nI4piL/GyAdYRbDezq7PjtqidU7iINMCk970/EyjfwLTffWKsF7HUoAMXdxWdxEr
kA2sTyx9rrQm1ywdxQVmrvEym75AOgzWeacnxiWusr9OxNBTP0+QHMaSU9ZFv6fv
I1C5zbDWpOWuXlvzdoYeEmnSoA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:16 2026 by rpki-client