
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: 2SkzBrgmODwZv/4qcNLubKcTCLb90U8uk4yh2BipetE=
Subject key identifier: 1E:88:A6:C3:5E:75:91:ED:E3:7B:B3:B7:D6:EE:47:DF:2C:5A:FD:B7
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 0A65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 0A52
Signing time: Sat 10 Oct 2026 19:43:54 +0000
Manifest this update: Sat 10 Oct 2026 19:43:54 +0000
Manifest next update: Sat 17 Oct 2026 19:43:54 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: GSl7yXcKzA1QX39htjEmEodshkJaC4u2aPjQBeZ7R6g=)
2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=)
3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: Oct 10 19:43:54 2026 GMT
Not After : Oct 17 19:43:54 2026 GMT
Subject: CN=6aca957a-7c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:b9:ec:bd:0a:19:86:ee:8e:ac:b8:a8:4d:
ba:67:67:04:82:3f:8b:35:39:e2:c1:c6:c5:1b:a9:
de:ae:98:60:d8:53:4c:4c:7a:e6:39:52:7d:18:22:
f3:6a:c9:f5:b7:bd:7b:6f:76:16:5c:d5:46:91:92:
4f:73:cf:86:fd:45:e9:9c:db:19:17:2a:c3:44:b9:
72:90:63:88:0c:6a:88:af:56:01:fe:4b:7e:99:9f:
b5:3d:18:dc:ff:87:93:92:41:a7:b0:0d:60:f1:20:
44:30:89:75:b0:43:87:ca:08:e7:34:c5:13:6f:00:
20:4a:62:9c:a2:eb:5c:4d:56:7d:02:13:17:eb:81:
49:fd:fe:46:82:ab:9d:7c:f0:d1:60:85:73:e3:25:
84:06:fc:d3:9f:cf:b9:f1:dc:56:28:d1:93:ab:43:
2f:a0:3c:0f:29:c7:f5:94:1f:51:ff:5c:73:e7:b0:
0e:00:d1:7a:f1:e9:a7:c6:1e:8d:8b:4e:8d:c4:e4:
ff:f5:7e:92:50:83:71:14:b1:09:aa:63:f3:fa:89:
f2:4d:ab:4d:e3:93:13:83:16:d9:0b:87:41:ed:55:
e8:5b:07:db:c3:0e:32:b2:4e:df:7b:65:e6:fb:88:
69:87:0e:a0:01:87:eb:56:d7:bf:c2:f4:7e:d2:eb:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:A6:C3:5E:75:91:ED:E3:7B:B3:B7:D6:EE:47:DF:2C:5A:FD:B7
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:87:03:78:1d:27:47:d4:ae:09:24:cd:ce:8e:ed:02:8b:
8c:72:ea:a5:fc:06:0e:60:f6:31:60:c3:df:13:87:64:a4:6c:
89:10:1f:c4:56:1e:24:4f:df:23:22:8b:3b:06:f7:44:b3:34:
25:ef:17:4e:ed:f6:8e:2b:d8:07:4a:27:ab:5c:e3:c0:5f:4d:
b4:7f:a9:72:11:6a:a6:7c:2d:97:c7:95:ac:8f:3a:89:96:48:
4c:f0:f0:43:f2:9e:fd:cc:5d:5a:c6:da:c1:f8:6f:3c:db:14:
52:36:f0:17:97:d2:ae:d2:32:9d:0d:8a:9c:ed:c9:a5:4c:f6:
92:97:ad:2e:32:07:0b:a0:24:70:07:b7:51:40:78:64:6e:65:
71:bf:44:ee:8e:f2:93:28:76:98:9b:21:6d:6a:e0:ec:1f:bf:
bc:4d:8d:55:9d:64:be:3d:5c:d2:db:29:fa:97:fd:e8:a8:94:
63:73:49:72:d9:a6:34:4a:36:87:ce:5d:fb:a0:04:7e:84:f6:
67:86:b7:68:76:b6:a9:27:dc:55:6a:1b:1e:7c:91:d6:74:82:
f9:ee:48:23:69:44:17:c9:f9:12:b6:cb:e4:21:10:54:a4:1b:
c8:20:1b:80:7f:19:f9:fb:7f:a6:6c:e4:87:2b:f2:f1:af:d3:
ab:90:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:48:34 2026 by rpki-client