
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier: jdWb+5qOadJa96fK81T3DyXYvV7JMpwbxtMd8RGVixI=
Subject key identifier: B6:5A:39:9C:4A:DD:61:71:2A:51:CF:E2:14:09:8E:BD:F8:8B:14:DD
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number: F9
Signing time: Thu 16 Apr 2026 22:29:30 +0000
Manifest this update: Thu 16 Apr 2026 22:29:29 +0000
Manifest next update: Thu 23 Apr 2026 22:29:29 +0000
Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: gGLYuCydcpS7cH/nIunrLfzbevCcaJ1QcWwZY5qHjzo=)
2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: c+4urNgJNXNWBhwpLiUNezIdmF5mlVJxmjpsI9/AkQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Validity
Not Before: Apr 16 22:29:29 2026 GMT
Not After : Apr 23 22:29:29 2026 GMT
Subject: CN=69e162ca-f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:9d:3a:53:82:dc:3b:e1:cd:26:b4:e9:92:
cc:b1:da:af:9d:70:dc:83:45:47:01:6c:05:73:93:
c4:76:9e:92:eb:b0:9a:2d:86:fa:30:08:48:98:f0:
20:f7:b8:4f:93:62:17:82:bb:92:e6:c5:60:bf:6b:
1a:6b:14:12:51:b7:90:a0:af:34:ce:60:7a:d0:f5:
7b:b0:1f:e8:b0:46:a7:cb:d3:32:62:35:3a:fa:70:
c5:6f:c5:17:21:3c:7a:55:c9:f0:6e:fe:1c:b1:42:
c3:ad:18:5b:99:a6:fd:ce:74:59:c6:a4:2c:30:3c:
c4:46:d7:08:45:5d:10:3f:0e:62:6e:b5:09:30:79:
9a:7f:da:96:3a:fa:21:3e:3a:c2:7f:6a:13:1f:1f:
18:af:3f:bb:01:63:42:a4:39:67:bc:05:a8:e0:10:
7e:1e:fa:e6:42:0a:57:2f:55:cc:a0:66:0f:99:4d:
7b:12:7f:0c:60:cb:fc:80:64:e9:2e:ed:d7:dd:2f:
63:4c:c4:f0:90:b6:b2:9b:79:7d:9d:82:6d:dc:29:
74:36:be:08:d2:c9:37:17:37:70:6a:96:b1:e7:a2:
1f:e8:bd:a2:cf:7c:2c:8c:34:15:96:23:1d:db:c2:
a9:fb:69:12:80:7d:7b:76:b8:af:04:0f:4f:5a:21:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:39:9C:4A:DD:61:71:2A:51:CF:E2:14:09:8E:BD:F8:8B:14:DD
X509v3 Authority Key Identifier:
keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:78:1e:d7:20:35:e5:72:6c:83:c8:a7:9f:f7:2b:00:f6:
4a:77:2b:1a:e6:3a:86:12:f7:e0:1c:1c:f2:82:be:8c:15:78:
be:2f:c4:ef:02:a3:b3:6c:9f:2d:47:ac:a3:c8:1e:8c:50:95:
44:dd:aa:e0:75:35:20:03:eb:a2:ea:4e:e7:03:a8:ec:ad:8a:
f4:54:07:5a:22:5c:40:c0:86:ea:d0:73:2c:a5:e8:bb:23:f5:
83:37:16:48:cd:e7:0c:cd:05:00:be:62:76:e3:4e:ac:b9:d1:
85:a8:0a:7a:e0:cd:ba:08:9e:83:47:4d:15:2c:46:86:a3:13:
98:6d:31:4d:8a:f8:bd:04:bc:6d:42:c3:e9:8a:a9:37:c4:88:
47:85:f1:33:b5:e6:25:08:8a:17:c8:e3:cd:bb:a3:39:b7:27:
30:d3:95:be:30:b4:1b:a1:49:2b:49:be:e4:4b:83:d7:ac:f9:
b6:bf:76:97:7c:f6:b0:07:10:28:17:04:aa:c7:5a:0e:46:36:
71:5a:8a:4b:f2:c8:3d:c3:05:75:2e:c2:7a:fd:ae:93:46:ee:
77:58:0b:da:3d:f8:c1:5e:b3:51:d8:c4:bf:fb:c5:3f:6e:66:
3d:6b:27:74:97:5a:de:49:5e:41:f7:8c:69:cd:ce:46:d5:a7:
93:7c:6b:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx
ODhBQTE1NkYwHhcNMjYwNDE2MjIyOTI5WhcNMjYwNDIzMjIyOTI5WjAYMRYwFAYD
VQQDEw02OWUxNjJjYS1mMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2FydOlOC3DvhzSa06ZLMsdqvnXDcg0VHAWwFc5PEdp6S67CaLYb6MAhImPAg
97hPk2IXgruS5sVgv2saaxQSUbeQoK80zmB60PV7sB/osEany9MyYjU6+nDFb8UX
ITx6Vcnwbv4csULDrRhbmab9znRZxqQsMDzERtcIRV0QPw5ibrUJMHmaf9qWOvoh
PjrCf2oTHx8Yrz+7AWNCpDlnvAWo4BB+HvrmQgpXL1XMoGYPmU17En8MYMv8gGTp
Lu3X3S9jTMTwkLaym3l9nYJt3Cl0Nr4I0sk3Fzdwapax56If6L2iz3wsjDQVliMd
28Kp+2kSgH17drivBA9PWiF6QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZaOZxK
3WFxKlHP4hQJjr34ixTdMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG
MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhn
TVc0T0pYYnlKc0lZaXFGVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+h4HtcgNeVybIPIp5/3KwD2SncrGuY6hhL34Bwc8oK+jBV4vi/E7wKjs2yf
LUeso8gejFCVRN2q4HU1IAProupO5wOo7K2K9FQHWiJcQMCG6tBzLKXouyP1gzcW
SM3nDM0FAL5iduNOrLnRhagKeuDNugieg0dNFSxGhqMTmG0xTYr4vQS8bULD6Yqp
N8SIR4XxM7XmJQiKF8jjzbujObcnMNOVvjC0G6FJK0m+5EuD16z5tr92l3z2sAcQ
KBcEqsdaDkY2cVqKS/LIPcMFdS7Cev2uk0bud1gL2j34wV6zUdjEv/vFP25mPWsn
dJda3kleQfeMac3ORtWnk3xrjw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:46 2026 by rpki-client