
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier: c4jr1e6mLm97WlfCriwkcg62o/Wdd5jfcLvbciTs1QE=
Subject key identifier: C8:93:AF:FF:F0:E1:3D:78:DA:D9:BE:27:96:EF:23:1A:E9:28:92:96
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number: DF
Signing time: Sat 28 Feb 2026 23:10:42 +0000
Manifest this update: Sat 28 Feb 2026 23:10:42 +0000
Manifest next update: Sat 07 Mar 2026 23:10:42 +0000
Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: L/E7W5JaahTkoEcpp3GSo2237EVtrJYK1oQFtP6ig44=)
2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: OViblnR/lHFk4KXUmFXJa3gycbDpdzSeFdas4fvP/W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Validity
Not Before: Feb 28 23:10:42 2026 GMT
Not After : Mar 7 23:10:42 2026 GMT
Subject: CN=69a375f2-8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:93:83:5e:0e:7c:37:fb:4a:df:32:30:7f:
d6:79:c7:1f:3a:7a:39:8d:77:7e:3b:41:a5:cf:24:
28:48:cf:c5:af:b8:da:39:ea:81:c6:65:ae:99:4d:
b0:e3:e3:95:f0:51:b2:e5:4c:80:a5:4d:03:6c:6e:
71:56:95:79:cf:13:69:33:9e:12:8b:b8:ae:e0:e0:
0e:46:7a:da:61:e8:70:c0:19:74:ae:e0:05:fd:d8:
f3:83:3f:7a:d4:a9:6b:4e:b5:f5:9c:59:1e:85:39:
fa:20:e2:ee:da:4c:b2:dc:d1:50:b7:1c:c3:21:58:
2d:39:77:3a:93:91:a0:e6:0f:91:b0:6d:a0:f4:e6:
db:9c:27:81:f4:33:dc:34:f6:f5:73:7d:55:6a:bd:
e3:57:86:26:d3:d8:78:c2:56:0f:26:eb:a9:61:e8:
b5:ad:f5:d9:22:eb:3c:08:c5:83:28:1c:ef:eb:44:
0b:fc:b2:5d:8f:dc:fc:d4:49:ae:9c:cc:cf:d1:f2:
86:fb:96:70:8b:0a:89:df:1d:25:d1:09:52:3c:9b:
2e:58:eb:b1:56:9d:6d:21:ee:aa:0f:70:a8:cc:c0:
e9:5d:99:ea:74:d7:e0:d8:7b:80:da:25:ce:a6:89:
ba:fc:7a:8c:4a:20:41:61:0a:16:91:95:2f:20:2c:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:AF:FF:F0:E1:3D:78:DA:D9:BE:27:96:EF:23:1A:E9:28:92:96
X509v3 Authority Key Identifier:
keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:4f:d4:dc:c0:a6:ee:cf:e2:4b:79:9f:cb:e7:3c:52:6d:a5:
34:63:43:82:48:54:7b:84:bf:90:75:bf:a9:a6:21:35:fb:ba:
c7:4f:8d:8b:23:3e:0f:06:2a:bd:2c:cd:e2:c1:a0:10:50:af:
2f:c4:fb:f1:82:da:4a:ab:d7:9e:f1:40:65:4f:15:05:d9:a8:
e2:2f:34:a5:4f:54:6e:47:ff:b8:70:e8:21:74:20:54:a8:07:
c7:9b:9d:7a:e1:e4:e1:77:e3:65:c8:de:6f:d1:9b:2a:aa:5c:
d1:3d:36:89:36:5b:c9:6f:9b:42:fd:c3:1c:cc:e8:d2:49:52:
3c:79:c8:ce:71:57:31:4e:54:42:84:76:09:d2:2e:4f:52:f4:
37:7d:56:c4:eb:03:6d:0b:7a:08:48:ec:0d:ae:50:5a:d2:73:
6f:3b:f2:1c:8d:35:a6:30:5c:0a:8c:77:f0:34:2a:ba:2d:c4:
e0:fb:4e:10:be:4c:49:c8:3a:33:b3:3e:ca:6c:4c:eb:8a:0f:
22:72:95:81:81:1f:6c:0b:f6:36:0d:9c:41:f0:55:ef:1b:7b:
97:88:e7:d6:c2:5c:f9:cd:e2:88:1d:5c:cf:9c:56:20:63:8b:
3e:13:63:53:fe:19:73:fc:16:1f:3f:8c:bd:85:2d:da:c7:fe:
c0:72:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:37 2026 by rpki-client