
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: sxUIC28wQ29MC7TTshp4z9tpXhdHaPeFYGuJrE5Smys=
Subject key identifier: 4D:99:23:F1:51:BF:2D:33:8D:65:11:8D:EC:48:3E:70:D9:C0:34:9C
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 0314
Signing time: Wed 29 Jul 2026 02:00:14 +0000
Manifest this update: Wed 29 Jul 2026 02:00:13 +0000
Manifest next update: Wed 05 Aug 2026 02:00:13 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: WI7L1RPj1yec7JJ3FU3Aa5q3Mx8YAuRVJDkdQCg05ig=)
2: CEDCF6A872C711F1A643620871A30FBC.roa (hash: RzjOQsdFk62g1nKTgDK6+2ZzFlaZnldB5AfyGuAfjNg=)
3: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Jul 29 02:00:13 2026 GMT
Not After : Aug 5 02:00:13 2026 GMT
Subject: CN=6a695eae-799a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:0f:fb:27:46:5b:fc:1a:8f:87:fe:ac:81:
70:0d:69:04:e9:b0:5a:bf:4f:fe:8f:d7:e4:6e:d3:
d6:00:8d:b3:ad:c6:a6:d7:fb:23:31:23:13:f7:00:
d7:21:45:18:ad:0b:22:03:e3:26:ea:bc:59:75:7c:
c5:6b:7b:de:55:df:dc:24:9e:2d:21:1e:83:5f:9c:
a3:fc:cc:38:b8:26:ff:c4:fa:28:66:28:fb:e7:3b:
78:84:c7:70:9d:00:78:3c:5b:74:44:f8:11:e2:b8:
30:5f:ff:00:fb:49:5c:b3:94:4d:45:d6:2c:84:d5:
16:96:bd:71:f6:28:7f:27:e8:47:1b:f9:f6:cb:3b:
30:9f:43:c8:08:51:7b:d4:cb:a2:02:f4:02:1a:e1:
0b:0c:d6:9a:e8:f5:ee:0b:fc:5c:a4:00:3b:22:91:
dd:fa:cb:a9:c4:3c:49:02:3c:c3:00:3a:dd:20:cb:
25:43:9d:2b:c8:f7:2a:6d:51:24:dd:08:bd:80:c8:
c1:fd:2b:54:a1:9c:69:94:ec:eb:da:2a:97:25:f5:
26:4f:3b:68:81:d3:1b:77:86:8a:e9:1e:b9:46:9a:
93:de:2c:85:56:d8:fe:eb:6a:68:56:18:f4:1a:fc:
89:54:2a:cd:00:71:98:16:96:2a:83:74:ca:26:1a:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:23:F1:51:BF:2D:33:8D:65:11:8D:EC:48:3E:70:D9:C0:34:9C
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:2d:c6:61:1f:78:97:89:ea:e6:36:5c:91:7d:42:19:04:
ac:40:eb:c5:ae:88:28:6e:c8:5b:56:ad:3e:6d:53:41:dc:cd:
a5:3e:b5:62:5b:3e:af:a3:0a:c0:d7:3b:26:e7:8a:94:85:6e:
d1:d7:91:5f:c5:fe:3e:ca:7b:65:46:55:e3:08:b7:e4:6b:11:
4b:da:67:11:65:43:e2:64:e6:8e:91:98:cd:41:e4:b4:06:cd:
f3:16:46:c6:9c:bc:2b:82:95:6d:ac:0a:67:f4:64:36:7e:15:
77:f2:78:f9:da:81:ba:3b:2f:99:3c:40:93:92:d9:72:4d:af:
ab:f2:e5:dd:ce:d8:b6:89:1e:4c:e8:7a:24:1f:70:48:3a:2f:
1f:cc:02:7f:b2:44:34:a8:23:ad:4e:a4:8f:a1:55:66:87:f8:
61:c9:7f:c4:da:18:3b:d5:ad:43:33:0d:d8:5d:6f:22:da:e7:
65:14:bf:ec:3b:86:b8:cb:c7:58:09:6f:c1:2e:63:ca:72:a5:
76:c6:15:f9:14:f6:d3:5f:68:5b:ca:dd:7b:1a:c3:f1:ba:cf:
95:1b:32:2a:44:b6:99:08:e1:05:c9:b4:c4:a1:d2:8d:33:43:
be:ad:c0:bc:b6:19:ee:cf:54:a2:ab:ff:7b:31:91:37:06:40:
08:c8:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:35:49 2026 by rpki-client