
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: 1oIxYeluTM9FXVR7baR0XxO/7t/gakKNvX87wJ2Tc9w=
Subject key identifier: C5:2B:1E:85:B1:DB:BC:88:6B:A7:9F:FA:20:81:FD:B5:8B:7E:9C:F9
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 0883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 087C
Signing time: Sat 28 Feb 2026 20:57:18 +0000
Manifest this update: Sat 28 Feb 2026 20:57:18 +0000
Manifest next update: Sat 07 Mar 2026 20:57:18 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: jQtd+ko0o0UBhKZNAsduU7QrZZS4D4n5XiH9G/3KbOQ=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Validity
Not Before: Feb 28 20:57:18 2026 GMT
Not After : Mar 7 20:57:18 2026 GMT
Subject: CN=69a356ae-255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:9f:9d:f7:47:f8:c6:0a:ed:1a:ee:92:93:
98:bc:88:e1:c3:00:57:30:44:0c:f0:dd:c3:00:81:
45:54:21:f2:83:71:1a:7f:c1:b9:fb:1e:fd:0b:5e:
28:d2:51:43:50:92:e5:31:0b:47:09:05:14:64:99:
fd:ce:cb:cc:73:c6:5a:e8:56:5e:ea:0f:ef:cb:8e:
b0:40:20:f0:7e:c7:4c:96:fe:d9:4c:6f:6f:d1:08:
e8:e3:85:3a:ae:0e:9d:64:3f:7a:8c:4a:8b:a0:a1:
37:33:75:eb:94:4c:ce:ff:a0:2c:00:02:26:c6:64:
f7:0a:5f:1d:08:0b:ae:e3:6d:39:51:df:71:f4:bb:
26:eb:f5:a4:c3:be:c0:bf:62:5e:0e:81:ad:36:a8:
7c:31:37:e7:41:97:73:08:b6:91:84:b8:09:fc:76:
4c:46:58:76:1a:e7:1a:18:a0:a6:6b:6b:1e:df:50:
5c:8d:95:87:2c:3d:01:ed:75:b0:c6:64:37:e8:b5:
16:da:cf:34:91:84:e3:da:72:32:1c:e0:b9:b2:e3:
e3:ce:5b:cc:36:dd:44:25:2e:84:34:4d:1d:4d:69:
0e:6d:12:33:8f:e2:96:fc:08:6a:1b:66:3e:82:2e:
1b:8b:0f:20:54:79:9b:52:f4:8c:a2:fb:d4:d3:b3:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:1E:85:B1:DB:BC:88:6B:A7:9F:FA:20:81:FD:B5:8B:7E:9C:F9
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:0d:fa:dc:fb:75:a8:cf:f0:95:a7:15:7f:df:62:95:6a:50:
7b:01:ac:f6:0f:a3:02:ac:fa:ec:13:46:b3:cd:5d:40:45:2a:
a4:2c:bd:41:e3:18:40:37:88:9d:19:cd:54:eb:3b:60:77:c1:
98:fe:15:9d:f5:f1:08:6b:7a:a0:8f:16:8e:a1:4d:18:7f:c4:
0e:20:74:59:12:88:c1:23:e8:8d:cd:86:ac:83:f1:f6:86:84:
60:35:29:90:53:19:8d:b5:c8:41:c4:64:58:c8:2e:ca:36:31:
8a:76:4d:0b:35:94:29:20:73:03:4f:af:ce:08:d5:23:aa:47:
39:57:7c:43:b7:ac:06:ee:37:1c:38:91:d3:09:26:7f:21:ed:
07:cf:5a:5c:50:40:33:e3:4b:5d:13:8c:ff:01:c8:99:5c:bf:
ad:62:de:7d:ba:35:99:57:c8:17:8d:94:5b:cb:b8:86:89:3d:
ba:f0:e7:89:4c:8a:43:7c:de:31:5a:32:2b:2c:07:a8:26:63:
f2:a3:ec:25:e4:f6:e6:75:7d:5a:79:4f:ab:74:b7:67:48:6d:
4b:b4:d3:7d:64:38:b5:58:03:e9:5e:cf:6d:e0:63:2b:9c:1b:
41:fd:af:3e:83:72:78:07:1c:0f:6a:ba:13:30:28:76:92:98:
95:5b:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:26 2026 by rpki-client