
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier: 0YtE5/gdkQs4qbKvnEnt2wRPUzrDyExVfnhSqHOEBWc=
Subject key identifier: 3C:56:1C:FE:79:30:8B:7C:2C:82:10:F3:1F:96:39:5D:5A:EE:C1:30
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number: 30
Signing time: Fri 17 Apr 2026 08:22:32 +0000
Manifest this update: Fri 17 Apr 2026 08:22:32 +0000
Manifest next update: Fri 24 Apr 2026 08:22:32 +0000
Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: Kf93Jv7yTKXPCob92ObwQ96HLaUzeFnxfdDJHSzJQ4g=)
2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Validity
Not Before: Apr 17 08:22:32 2026 GMT
Not After : Apr 24 08:22:32 2026 GMT
Subject: CN=69e1edc8-a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:f8:22:2c:db:c8:b9:86:34:7b:69:25:c5:
16:1f:b1:32:66:5e:43:b9:ce:6f:65:52:b2:2f:6c:
a8:17:96:82:71:e6:1f:eb:58:65:95:a8:70:46:17:
91:ba:19:64:fc:aa:04:17:fe:a9:72:29:45:bc:23:
cb:ca:04:ba:d5:f1:44:8c:e7:fc:3e:be:a6:6c:43:
37:35:b2:35:a6:5c:f1:6c:d4:11:05:e9:8a:07:db:
22:1a:f2:22:cf:55:d4:1b:dd:6c:1b:c0:c5:97:f3:
7e:f6:53:33:61:6c:84:bd:d4:69:f5:2c:fb:00:dd:
81:8f:bc:a1:9e:e0:cb:10:c1:a3:00:89:84:21:2f:
e9:d1:95:c2:2a:f7:85:c3:d6:9b:91:09:8d:a2:69:
c1:bd:ac:0d:46:f7:d4:2d:e3:1a:43:f4:dd:06:de:
cc:2d:4f:24:9c:96:6e:a9:04:96:b1:a0:55:ec:37:
d4:16:70:35:29:cc:9b:90:28:27:d4:1e:a0:bf:eb:
2e:99:8b:f2:20:39:dd:68:53:74:f0:60:70:16:3b:
bb:f7:0e:2f:4e:51:97:a7:18:af:c7:eb:6a:7f:08:
2b:37:66:17:6f:d5:b3:6e:5f:4d:42:e8:bf:0c:32:
95:d0:ff:79:4f:c5:d1:2b:4f:58:b4:dd:27:5f:24:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:1C:FE:79:30:8B:7C:2C:82:10:F3:1F:96:39:5D:5A:EE:C1:30
X509v3 Authority Key Identifier:
keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:c9:47:48:90:3c:a4:0d:eb:b6:cd:51:8e:0a:9c:dc:5e:
91:e1:69:fa:ac:ee:42:73:3b:d7:d9:78:15:a6:3b:f3:82:70:
c7:2c:35:a4:25:14:9f:c4:86:fa:e0:51:9f:14:29:f9:3f:cc:
e5:f0:38:b0:92:ce:39:28:32:6c:ae:66:14:77:7f:9f:ad:da:
13:3c:11:83:e5:7b:1c:65:d5:b2:d6:26:a6:f9:8a:3f:b5:82:
48:0d:5f:a4:b3:27:13:c1:d7:b0:0c:89:34:ea:c0:0d:60:94:
ed:b8:a9:5f:80:85:4c:d7:a2:ab:d0:a6:ca:64:e3:c3:cf:25:
e5:f1:16:ca:8d:35:de:a6:71:81:ce:57:1b:6c:66:92:41:f2:
81:cf:30:c8:7c:1b:70:7a:15:13:80:44:10:46:70:5f:1b:73:
2e:d9:c3:57:b7:35:2c:43:29:2f:11:65:67:8e:0d:bc:ec:98:
02:93:26:83:cf:58:e6:af:13:27:1f:91:4a:85:e6:1d:42:62:
cf:4f:0e:b3:e2:76:45:f4:1f:83:5d:1f:bf:89:3e:22:16:7b:
e4:9e:cb:e1:b1:cd:c3:76:76:23:26:db:02:71:af:48:76:f3:
26:70:84:34:ff:70:72:9b:07:1f:5f:1c:eb:d9:ff:24:71:1f:
ed:76:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:34 2026 by rpki-client