
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: 1iTfkzrIdUySU2qGLISMQbR+rlFqRDoQ8TbpCu4TYNo=
Subject key identifier: BA:71:A0:15:F3:84:0A:72:42:CC:EA:C8:16:C0:C6:00:51:66:81:94
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 089E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 0896
Signing time: Thu 16 Apr 2026 20:28:33 +0000
Manifest this update: Thu 16 Apr 2026 20:28:32 +0000
Manifest next update: Thu 23 Apr 2026 20:28:32 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: ZB0INcG/51DbydM//kvNnkG09xmGCVfixsdNFYGS+NI=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: Lubg1etHnAX3Eexr1F6RZ/V0j32jER/ID7u87KtGroA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Validity
Not Before: Apr 16 20:28:32 2026 GMT
Not After : Apr 23 20:28:32 2026 GMT
Subject: CN=69e14671-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:5b:79:4b:39:dd:39:de:46:4a:86:5e:21:
f7:e2:b1:a6:bd:cf:ee:e4:f2:e5:af:c2:9e:57:ea:
5c:47:5d:3e:f4:c2:da:1b:39:f8:8f:b7:f2:07:01:
bc:15:ba:91:87:11:58:b6:79:57:fa:d2:79:df:1c:
8d:e3:48:9d:ec:4f:f3:d3:82:58:0c:c0:91:8f:90:
fc:0c:70:87:93:da:48:b9:a6:3c:81:8a:89:0b:c8:
08:15:e7:7c:0a:ab:c2:dd:f9:20:97:9b:21:df:b1:
a9:e1:bc:81:40:e9:1c:87:fc:c0:ad:6d:e6:c8:22:
d6:b6:d7:93:7c:b8:ef:a3:a5:b6:0c:38:6d:bd:14:
6c:42:68:0e:da:aa:7c:49:84:7c:88:b1:c4:ba:88:
f1:1c:c4:13:e0:33:d1:8e:85:a9:cf:58:34:d3:02:
19:a1:a7:82:7d:51:f5:13:65:08:12:15:9e:aa:9c:
5c:62:7a:c4:87:5f:53:ce:03:53:23:4a:f1:66:86:
a0:70:21:f8:8f:28:bb:08:3a:71:dc:3e:6f:7e:63:
80:e9:4a:4d:6f:bb:dd:70:dd:0b:98:4f:85:1c:5d:
4f:45:2a:cf:aa:1a:5b:57:06:1f:c6:4f:7f:52:4c:
28:9a:ef:08:ba:25:7b:66:e3:c3:e6:7d:66:58:c4:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:A0:15:F3:84:0A:72:42:CC:EA:C8:16:C0:C6:00:51:66:81:94
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:03:a8:54:1e:e5:1a:85:2f:64:08:b3:87:84:83:ce:a7:21:
ce:37:a2:be:63:ac:d7:65:60:31:f4:fd:10:b3:3e:89:e0:30:
1d:16:e4:2b:8c:db:19:f8:15:bd:a4:08:b0:83:d3:e5:47:a5:
1a:c5:4c:30:68:30:0b:89:cb:ea:bc:36:7d:cd:a0:6d:99:91:
3f:fe:da:dc:1e:a3:62:23:be:96:76:f7:e3:2e:9d:31:74:5c:
a9:6e:c0:52:6b:87:8c:20:ba:97:0c:46:b0:1b:f2:8a:41:d9:
a5:01:07:dc:15:0e:e0:01:0b:02:8e:08:12:18:fa:74:81:62:
d5:14:83:07:1e:0e:84:f2:2c:22:86:05:fd:87:37:2d:40:db:
26:a9:76:eb:6c:28:4e:27:7a:50:39:36:af:0e:f6:23:3b:18:
8f:5c:5b:8e:23:2b:c8:45:72:b8:01:85:02:cf:0c:c0:29:85:
3b:47:c7:6b:28:6e:50:82:c6:59:55:74:e8:81:38:a3:d7:5d:
04:b1:42:45:2b:c9:92:d2:c0:e9:dc:cd:fb:5c:f1:ce:0d:a2:
bd:44:00:de:45:d1:54:06:5e:6a:f8:61:f9:e9:e5:13:09:4d:
c9:65:dd:35:0b:87:b9:44:e8:37:6b:c1:68:23:e5:9b:01:21:
a2:e6:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:11 2026 by rpki-client