
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier: l8TIdSZd21ZTWuQTaFyIVB8xpWKbnEo5otGRIUijpww=
Subject key identifier: 9A:FF:06:91:CA:75:FB:F2:71:82:62:67:50:11:D6:23:4E:71:36:E8
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number: 0116
Signing time: Fri 12 Jun 2026 22:32:09 +0000
Manifest this update: Fri 12 Jun 2026 22:32:08 +0000
Manifest next update: Fri 19 Jun 2026 22:32:08 +0000
Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: ZDJXSj6b+GkpuexIMAFXjJhakUGA5GEf7m4hiGZa9NQ=)
2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: c+4urNgJNXNWBhwpLiUNezIdmF5mlVJxmjpsI9/AkQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Validity
Not Before: Jun 12 22:32:08 2026 GMT
Not After : Jun 19 22:32:08 2026 GMT
Subject: CN=6a2c88e9-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:28:1c:50:e7:32:b6:d2:b1:6e:ab:e7:39:
c0:5c:3d:ba:1d:fb:21:09:0c:bd:a2:b3:40:df:d7:
db:d0:37:aa:8c:cd:84:13:85:a4:d5:d2:cd:01:16:
3e:a5:c7:03:87:f5:bc:9a:48:f7:68:da:38:1b:38:
f1:65:17:4b:81:14:18:e6:82:e3:d7:e9:e6:5f:e2:
07:03:03:e9:38:0e:7f:a3:01:91:0e:2b:0e:f7:d4:
85:b8:46:d6:e9:b4:8b:fa:13:66:32:e3:dc:2d:3f:
ec:2a:54:ef:2b:8b:68:50:39:c7:e0:61:4b:38:f9:
43:09:73:0c:27:28:63:c7:0b:3c:71:52:49:48:19:
e3:58:a5:70:aa:58:34:aa:cb:ec:cc:c4:41:40:e1:
70:5e:24:ef:80:68:cd:15:50:bd:fd:92:8c:59:4f:
c2:3b:73:44:3b:48:bd:52:d2:55:89:cc:37:cc:b1:
71:1f:8e:b9:4c:98:a8:0e:88:2f:89:cb:d9:c9:2e:
38:7b:74:59:f5:23:be:9a:a8:95:ac:ec:84:49:8b:
3d:be:28:b2:f5:02:90:57:b0:33:aa:bd:75:51:b4:
74:ed:46:71:74:89:76:98:bd:ef:41:cb:33:a0:74:
23:a6:0d:2c:c1:ca:f0:41:f9:79:d6:3a:14:8d:ba:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:06:91:CA:75:FB:F2:71:82:62:67:50:11:D6:23:4E:71:36:E8
X509v3 Authority Key Identifier:
keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:6f:68:15:dd:70:c6:36:2d:ca:d3:40:cf:fc:f5:8d:f0:
3a:75:5c:da:35:91:ac:30:83:71:39:eb:1a:64:0c:ce:bd:39:
cc:e5:fa:5d:26:5e:f9:42:ea:6a:48:7f:c3:6b:8b:8a:54:44:
e7:6e:a3:a8:e0:8a:14:ed:24:cf:ce:2b:97:2f:08:84:4a:92:
3a:21:d6:8b:eb:b7:13:e8:46:28:17:57:3a:11:6a:3f:30:01:
88:04:9a:00:74:ee:94:33:3f:de:55:de:f7:4d:d5:93:27:88:
56:b8:9c:a3:66:6d:36:3e:97:0b:69:ec:e7:18:d0:39:35:21:
80:d8:94:39:f6:84:8f:9e:74:74:4d:8b:ce:02:94:12:c8:39:
65:c0:e9:c6:b0:ff:08:bf:ff:ac:62:1c:09:48:a8:d1:cf:bf:
c7:7f:27:4a:c5:89:34:1c:ad:a5:3e:54:20:41:d7:c8:29:63:
7b:32:cf:ae:aa:2b:ea:85:75:d5:e3:6b:6c:0b:46:e8:d3:0d:
ad:7e:fe:57:a0:ac:fc:6f:a2:b6:48:94:04:2e:42:0d:13:9e:
20:f7:75:c0:58:57:76:60:27:a0:29:dc:a4:02:36:99:1a:9b:
f4:53:3a:a8:d0:c2:20:73:e5:ff:3b:53:82:68:67:db:f6:15:
db:b6:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:09 2026 by rpki-client