
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier: 65NbjPCWetiazADiQmsiMmvCB1vLExF+eh2H+qqZFdU=
Subject key identifier: 32:09:78:20:24:11:88:0E:0B:B3:FA:7C:8F:52:BD:F4:AB:B7:31:BF
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number: 5B
Signing time: Sat 13 Jun 2026 08:14:13 +0000
Manifest this update: Sat 13 Jun 2026 08:14:13 +0000
Manifest next update: Sat 20 Jun 2026 08:14:13 +0000
Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: +BJrcKEUqJgFhL8Pf5SnuFMs37qqZy71r2jzHEH3FMA=)
2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Validity
Not Before: Jun 13 08:14:13 2026 GMT
Not After : Jun 20 08:14:13 2026 GMT
Subject: CN=6a2d1155-9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:57:ab:68:b9:47:4d:a6:7e:df:2a:58:28:
cf:ec:33:ca:62:b0:0e:d4:f4:c9:04:5d:52:27:98:
5c:e9:d4:7a:24:a7:f4:6b:ed:cf:f3:20:16:a1:97:
7b:80:58:a7:e0:5d:9d:5f:5a:7e:84:1d:19:42:7e:
bd:b3:ca:52:aa:18:a0:08:12:23:71:6a:3a:b6:4e:
e5:6f:00:0d:08:06:8f:9e:bf:25:5e:1d:1c:2f:df:
0e:58:28:ef:08:7d:f7:2d:e2:27:93:d7:77:50:d5:
3f:7a:5e:33:96:17:c6:a9:2a:59:e5:6c:58:a4:65:
2f:6f:64:46:5b:11:7c:82:bd:46:ff:d6:36:4f:08:
e7:4b:ba:85:cf:ce:58:33:bc:52:9a:e1:dd:5e:b6:
7c:30:ae:96:6f:4b:10:7a:6f:99:53:c7:78:9c:f5:
4f:50:0f:87:86:70:e4:60:68:32:1d:3a:a7:22:b6:
27:0c:b8:89:86:6a:7a:f7:83:ea:4b:4d:2a:ae:6c:
36:ee:91:bd:d6:68:cf:2d:8e:41:9b:81:9a:19:c2:
ab:3e:b3:a0:2b:65:34:e3:3d:14:a2:c6:b4:aa:a8:
85:cb:97:db:dc:91:52:3d:af:ea:b1:b5:e6:fa:6d:
44:52:13:6e:38:fa:f7:2a:c5:b6:48:f3:46:11:cd:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:78:20:24:11:88:0E:0B:B3:FA:7C:8F:52:BD:F4:AB:B7:31:BF
X509v3 Authority Key Identifier:
keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:8e:bd:d9:ab:d5:96:1a:34:a1:91:9a:59:52:ca:cf:65:
07:c7:c9:0f:b3:8c:e6:cb:8d:7c:f7:35:dd:8d:49:99:96:33:
ab:9e:45:e0:56:fa:f6:8c:43:bc:b9:6a:3f:3d:3a:1b:39:73:
65:25:98:a3:b3:69:4c:70:ab:00:6c:8c:bd:3b:5d:b2:77:fb:
2d:5f:26:7f:62:75:71:28:2b:c2:b5:e3:bc:ec:97:f3:a9:b6:
5d:0e:48:02:43:81:19:ee:35:aa:cf:be:aa:d3:be:ba:ca:a9:
17:40:03:5a:e3:21:7d:86:b4:14:1f:dd:91:37:98:6a:2a:31:
21:e1:fd:8e:d0:ab:c0:f3:9e:b0:18:59:09:73:0b:ec:59:9d:
0c:c7:b5:1e:a3:c0:8f:22:5e:28:c1:e3:c1:cb:9a:3b:b0:ae:
9e:21:6e:f1:b9:ff:93:08:be:13:4f:62:63:09:5d:6f:c1:6c:
ed:73:11:04:69:2b:84:5f:c2:45:9b:a0:8a:75:bd:6e:64:44:
07:1d:b0:6a:bd:7b:8c:04:f1:e0:00:32:a9:ba:37:05:9a:b4:
df:d0:79:d4:d7:31:b5:e7:c0:46:e6:99:92:bc:ea:55:e6:85:
46:c5:83:0c:c4:31:61:f9:1c:97:a9:11:d9:53:07:c1:57:d5:
27:b9:b2:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QkQ2RTExMC8GA1UEBRMoNjlBRTM1Q0RDRTYzN0VCNjQ1RUI1MDY1RURFMTJENThF
NzU5OTIzNjAeFw0yNjA2MTMwODE0MTNaFw0yNjA2MjAwODE0MTNaMBgxFjAUBgNV
BAMTDTZhMmQxMTU1LTlkY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjC1eraLlHTaZ+3ypYKM/sM8pisA7U9MkEXVInmFzp1Hokp/Rr7c/zIBahl3uA
WKfgXZ1fWn6EHRlCfr2zylKqGKAIEiNxajq2TuVvAA0IBo+evyVeHRwv3w5YKO8I
ffct4ieT13dQ1T96XjOWF8apKlnlbFikZS9vZEZbEXyCvUb/1jZPCOdLuoXPzlgz
vFKa4d1etnwwrpZvSxB6b5lTx3ic9U9QD4eGcORgaDIdOqciticMuImGanr3g+pL
TSqubDbukb3WaM8tjkGbgZoZwqs+s6ArZTTjPRSixrSqqIXLl9vckVI9r+qxteb6
bURSE244+vcqxbZI80YRzZPnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMgl4ICQR
iA4Ls/p8j1K99Ku3Mb8wHwYDVR0jBBgwFoAUaa41zc5jfrZF61Bl7eEtWOdZkjYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0JGNEYyNDdBRTI5
MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJaRjYxQmw3ZUV0V09kWmtq
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWE0MXpjNWpmclpGNjFCbDdlRXRXT2Raa2pZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC
RDZFL0JGNEYyNDdBRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJa
RjYxQmw3ZUV0V09kWmtqWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB674692avVlho0oZGaWVLKz2UHx8kPs4zmy4189zXdjUmZljOrnkXgVvr2jEO8
uWo/PTobOXNlJZijs2lMcKsAbIy9O12yd/stXyZ/YnVxKCvCteO87JfzqbZdDkgC
Q4EZ7jWqz76q0766yqkXQANa4yF9hrQUH92RN5hqKjEh4f2O0KvA856wGFkJcwvs
WZ0Mx7Ueo8CPIl4owePBy5o7sK6eIW7xuf+TCL4TT2JjCV1vwWztcxEEaSuEX8JF
m6CKdb1uZEQHHbBqvXuMBPHgADKpujcFmrTf0HnU1zG158BG5pmSvOpV5oVGxYMM
xDFh+RyXqRHZUwfBV9UnubKW
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:31 2026 by rpki-client