
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier: YKlTXxrM/IAK52dgXnTZsn1uOCIVKvLd15zrlySOQx4=
Subject key identifier: 6A:75:79:3B:06:EA:00:9F:B6:F0:18:6D:22:2F:71:C5:15:27:5A:56
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number: 90
Signing time: Fri 25 Sep 2026 07:37:58 +0000
Manifest this update: Fri 25 Sep 2026 07:37:57 +0000
Manifest next update: Fri 02 Oct 2026 07:37:57 +0000
Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: VH2YCU4mGMXPwqKQB62VST4bA5WNy0tvhf+0kyWnUgg=)
2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Validity
Not Before: Sep 25 07:37:57 2026 GMT
Not After : Oct 2 07:37:57 2026 GMT
Subject: CN=6ab624d6-1216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:98:f6:c0:1c:59:7c:ce:04:bd:73:92:0c:
f1:7d:ef:9c:56:d6:94:87:e0:4e:4a:57:23:d2:05:
09:2b:b9:1a:11:c3:4d:00:bf:ef:ba:90:43:dc:29:
ef:e6:18:0a:99:ce:98:a9:81:3b:83:49:70:7c:a0:
f4:1e:f2:31:a8:fb:2c:31:59:a7:2a:1c:c5:58:bf:
38:0e:9e:cc:71:1b:fd:60:8a:75:96:ea:98:1c:33:
c6:f3:35:37:fc:6b:8b:63:e2:7f:ad:25:31:8c:61:
58:5e:d1:d8:0b:82:44:82:71:2b:4f:9e:e7:5c:0f:
35:c6:24:5b:9d:7b:70:37:9e:d7:1a:df:19:a0:41:
0d:25:79:f7:17:07:3d:d8:e9:95:55:f5:7c:a6:cb:
79:87:ad:6c:62:20:ab:b6:43:fc:02:0f:b2:3b:1f:
fe:52:d7:31:d9:f4:8e:e8:d6:38:73:21:32:26:6a:
5d:06:30:67:26:4a:43:37:e0:c3:ca:27:80:23:cf:
f7:d9:41:70:52:ae:1c:a1:cc:b0:72:fe:e3:18:da:
7f:df:db:f2:ea:6e:ac:87:d5:38:10:f0:27:ce:14:
87:db:67:3f:81:e6:bf:c7:f1:5c:bc:4c:89:ba:40:
ce:5a:71:0b:44:16:34:47:36:7f:02:b1:a6:49:f0:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:79:3B:06:EA:00:9F:B6:F0:18:6D:22:2F:71:C5:15:27:5A:56
X509v3 Authority Key Identifier:
keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:dc:52:7e:76:86:e5:04:72:6e:95:33:ff:f6:7e:98:0c:
e7:df:45:ff:11:f8:a9:75:50:ae:a3:8e:b4:cb:46:40:b1:e5:
48:5d:76:eb:82:b4:78:a1:17:d2:5b:89:cc:1e:d3:67:23:8c:
54:ca:51:57:37:7a:4f:b7:36:51:01:1a:e3:9f:36:87:15:5e:
c9:db:de:36:27:26:72:db:dc:83:46:ca:6d:bc:27:be:fb:fe:
6d:cd:72:20:0a:42:4b:9f:82:b9:f7:24:1b:cf:fb:53:a9:67:
7d:7d:bb:1a:65:4c:0f:94:a9:04:d8:56:c1:c1:83:07:ee:c5:
35:f8:44:fa:80:98:03:8a:7d:9b:33:3c:1c:ad:bf:a5:65:20:
53:c9:fc:fb:45:6e:37:d7:ca:d8:d7:43:36:f5:f1:b8:0b:35:
c0:50:d4:6e:6a:08:23:c1:98:ad:7c:d7:f3:a7:be:00:42:91:
77:58:45:3e:bb:cc:ff:ce:26:46:1a:6f:f2:dc:e4:e0:ab:7b:
d5:69:c6:31:d7:9d:b6:10:f7:45:c8:e5:41:b6:47:f7:83:03:
60:4a:1c:0d:09:9b:b1:57:3a:a4:ad:18:aa:55:07:31:5b:fe:
79:82:97:c7:42:be:5c:2c:fc:6b:fb:36:18:e8:89:49:cb:cc:
1d:48:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:24:23 2026 by rpki-client