
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier: frSYZff4y6guI0Z0FEzhVFw/DO2p6lAcKfngok0Dp+o=
Subject key identifier: 8F:8D:13:A1:40:3D:71:6C:04:DE:6B:D1:C0:76:A1:83:98:E3:FD:B1
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial: 0B22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number: 0B0A
Signing time: Sun 26 Jul 2026 19:49:17 +0000
Manifest this update: Sun 26 Jul 2026 19:49:17 +0000
Manifest next update: Sun 02 Aug 2026 19:49:17 +0000
Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: pb84vB3c9yqT3yYZX/Ol4qCIlHvv+hJdCvv/lh7tidg=)
2: 834C938A12C711F09998A234C4F9AE02.roa (hash: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Validity
Not Before: Jul 26 19:49:17 2026 GMT
Not After : Aug 2 19:49:17 2026 GMT
Subject: CN=6a6664bd-a357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:b3:b8:ab:35:0d:18:39:9d:67:e9:e6:56:
52:d7:19:41:1c:14:32:40:bc:6d:f5:18:2a:54:ef:
e4:5c:be:9a:7a:e1:22:04:07:05:72:eb:36:a5:05:
fc:b2:a7:45:06:4e:b6:b6:a9:ce:a4:f2:1e:ce:ad:
63:5e:f3:bd:40:84:55:59:66:9c:81:e3:a6:45:39:
b2:42:dd:98:50:53:78:c1:e0:27:06:b9:b3:08:df:
c5:d4:ad:b4:f8:e8:35:14:3e:2d:08:a1:3e:41:a1:
ac:dd:e3:ce:67:6c:ff:72:d6:28:c1:aa:33:60:f3:
99:97:b4:58:1b:38:1f:b6:11:1d:c2:21:3d:fe:3a:
91:d7:84:31:f3:0f:c0:5c:4d:60:e0:a6:3b:9a:e2:
8c:e4:1e:13:77:50:73:69:f6:e7:bb:3b:22:44:53:
80:e6:2a:8a:93:46:4e:6a:04:bf:6c:69:8c:72:44:
27:7c:61:ec:33:fd:1f:fd:99:1e:d4:a4:eb:c9:be:
cf:7d:1b:30:eb:11:cd:28:1b:0a:dc:dc:02:ef:3b:
3f:41:59:64:00:13:21:98:5c:6d:9d:58:47:9c:c5:
56:15:80:4f:be:c2:ac:2a:32:9f:8a:1c:68:60:65:
1c:f9:93:a9:15:40:87:aa:09:68:e5:82:74:86:6d:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:13:A1:40:3D:71:6C:04:DE:6B:D1:C0:76:A1:83:98:E3:FD:B1
X509v3 Authority Key Identifier:
keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ab:55:a2:20:51:48:0f:47:b8:5a:ef:0f:0d:b4:8c:ce:17:
e2:82:b4:ba:34:09:47:ab:db:02:f7:77:1b:c9:3b:7b:ba:b7:
d3:95:5c:1c:3d:0c:11:22:90:ce:cb:76:38:7b:b8:80:9f:bf:
52:c2:0f:31:d7:3b:9a:ee:cd:75:9f:c7:bd:42:5a:33:e3:fc:
47:e9:0c:f2:97:29:a9:88:ec:de:f9:61:36:5f:c2:9e:79:18:
78:c1:9b:8d:bd:3e:f7:7f:9d:c9:cf:a0:4f:c7:72:1a:78:c5:
b1:81:82:3a:ff:d8:68:44:6f:3e:a6:43:e0:6c:6b:0c:1a:f5:
28:c4:07:ee:ff:f7:92:5f:de:8a:11:47:64:c7:48:22:b0:00:
f6:7a:71:b8:e1:b6:33:8c:19:2d:c4:b2:ec:01:7a:f0:27:fd:
6e:5e:46:7f:70:5a:a9:ef:e2:4f:0d:07:0d:9b:45:2f:84:0d:
13:fc:5d:28:5f:69:82:43:c2:57:bb:74:44:b4:76:fc:a6:e3:
dc:c8:3b:04:27:13:cc:b0:dc:e2:44:35:bd:2a:7a:3c:ca:87:
86:ba:49:9d:05:09:e2:29:8f:fb:ff:26:6c:74:77:fb:8b:36:
77:59:10:b3:68:83:b7:79:04:5b:d7:76:35:9d:67:40:67:1c:
38:a7:c6:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz
MjUxOTQ0QjIwHhcNMjYwNzI2MTk0OTE3WhcNMjYwODAyMTk0OTE3WjAYMRYwFAYD
VQQDEw02YTY2NjRiZC1hMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufuzuKs1DRg5nWfp5lZS1xlBHBQyQLxt9RgqVO/kXL6aeuEiBAcFcus2pQX8
sqdFBk62tqnOpPIezq1jXvO9QIRVWWacgeOmRTmyQt2YUFN4weAnBrmzCN/F1K20
+Og1FD4tCKE+QaGs3ePOZ2z/ctYowaozYPOZl7RYGzgfthEdwiE9/jqR14Qx8w/A
XE1g4KY7muKM5B4Td1BzafbnuzsiRFOA5iqKk0ZOagS/bGmMckQnfGHsM/0f/Zke
1KTryb7PfRsw6xHNKBsK3NwC7zs/QVlkABMhmFxtnVhHnMVWFYBPvsKsKjKfihxo
YGUc+ZOpFUCHqglo5YJ0hm0HOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+NE6FA
PXFsBN5r0cB2oYOY4/2xMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy
OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC
Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFatVoiBRSA9HuFrvDw20jM4X4oK0ujQJR6vbAvd3G8k7e7q305VcHD0MESKQ
zst2OHu4gJ+/UsIPMdc7mu7NdZ/HvUJaM+P8R+kM8pcpqYjs3vlhNl/CnnkYeMGb
jb0+93+dyc+gT8dyGnjFsYGCOv/YaERvPqZD4GxrDBr1KMQH7v/3kl/eihFHZMdI
IrAA9npxuOG2M4wZLcSy7AF68Cf9bl5Gf3Baqe/iTw0HDZtFL4QNE/xdKF9pgkPC
V7t0RLR2/Kbj3Mg7BCcTzLDc4kQ1vSp6PMqHhrpJnQUJ4imP+/8mbHR3+4s2d1kQ
s2iDt3kEW9d2NZ1nQGccOKfGvA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:06 2026 by rpki-client