
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json)
Hash identifier: HMmzUdP+6EX8xt8+hZviVpYCITGCpb0W+O0Cwy4sbwU=
Subject key identifier: 2A:1C:28:03:BF:12:0E:D0:A7:B9:BC:46:6C:25:04:9F:5E:5F:F7:EE
Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
Manifest number: 01F5
Signing time: Sat 13 Jun 2026 03:16:36 +0000
Manifest this update: Sat 13 Jun 2026 03:16:36 +0000
Manifest next update: Sat 20 Jun 2026 03:16:36 +0000
Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: EkRBv9DCknkvx/YNBPxfCi+p6UgvW9eo3lmpObre1vs=)
2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Validity
Not Before: Jun 13 03:16:36 2026 GMT
Not After : Jun 20 03:16:36 2026 GMT
Subject: CN=6a2ccb94-a9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:6c:58:c8:be:14:09:07:50:f8:05:ff:87:
2d:e8:f2:bd:58:ff:a4:c7:1d:59:00:f1:f3:33:4b:
35:9c:b1:f5:a2:c8:4b:a8:07:70:87:45:03:c8:0b:
7a:04:41:9d:07:e0:fb:82:d6:85:af:c1:54:ee:ee:
83:53:67:8c:51:74:b5:2a:54:8d:07:dd:9b:4c:2d:
8f:33:fe:3d:f3:f1:71:9d:a1:c7:78:ed:82:e6:b6:
42:7e:3b:7c:4d:46:ee:b1:e4:f1:96:55:f3:a3:38:
9c:e5:f7:c7:62:8e:0c:26:6d:f8:a4:7b:17:b6:06:
93:94:08:7a:87:4a:7e:5b:e5:a2:7f:be:35:cb:70:
4f:b3:e1:14:ab:5b:31:8e:2f:38:dc:bf:39:e2:35:
94:98:8b:81:b5:48:75:4f:21:51:86:97:d8:ac:ed:
a6:1e:c6:24:0f:60:82:40:29:e5:47:fe:24:61:06:
df:70:90:28:14:25:a7:34:83:1d:46:5f:a3:60:f9:
98:92:93:2a:42:d4:8e:ea:09:95:6f:db:48:74:b0:
4d:90:eb:ad:a4:95:c7:a7:bc:02:7d:35:f3:e2:4e:
79:cb:3b:96:91:44:20:f9:b2:2d:2b:91:9e:55:46:
72:cb:89:f8:82:ba:fc:6d:12:59:3f:a4:91:25:da:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:28:03:BF:12:0E:D0:A7:B9:BC:46:6C:25:04:9F:5E:5F:F7:EE
X509v3 Authority Key Identifier:
keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:00:d5:6a:69:1f:e7:6c:1a:0e:b7:b4:8f:ef:ab:66:23:
b6:4e:39:7f:f3:13:7a:9b:08:5e:f0:f6:8a:22:6d:2f:d9:fe:
13:d3:9a:58:00:94:11:a1:31:f4:0a:6d:c1:91:34:1b:e5:b3:
c2:1c:58:81:6b:d6:ca:26:11:90:9d:a2:c6:aa:32:92:52:db:
1d:06:5a:9b:d3:c5:17:64:fc:66:94:5c:f8:ad:71:eb:1e:b1:
27:a0:87:43:70:9a:37:9a:04:12:ed:10:0a:6b:d5:ae:fb:c0:
9f:22:de:26:b4:95:0a:47:05:aa:78:83:f2:3e:07:a2:44:52:
9e:33:62:bb:64:38:37:24:65:c0:69:d8:bb:79:7a:bb:3a:56:
cb:c2:90:4c:2a:b7:ee:1c:20:f4:1a:e6:b9:ed:1e:6a:90:7d:
f8:2d:c1:a7:97:c9:c4:ac:b6:cb:64:39:9c:b2:8a:84:48:6b:
a4:55:d3:0b:f5:c9:d5:f2:b4:46:bf:e5:d9:cd:67:e2:67:4d:
50:09:95:1a:1d:1f:44:95:16:7c:72:fc:5f:b9:ca:a9:e0:42:
9c:56:18:32:7b:d8:28:b4:b4:7e:cc:bb:38:37:5e:e6:b0:4d:
0d:00:2b:e6:9a:62:75:9c:ea:21:04:79:8b:a7:96:59:f4:a7:
f7:e9:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:37 2026 by rpki-client