
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier: 8AgBzNg0LK7AshCekZH1eAER7J0PwrgUCXmMaUkX3ME=
Subject key identifier: 1C:77:C4:77:29:D4:F7:31:DF:B2:6C:76:16:F9:4E:A0:70:7F:26:29
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number: 01AD
Signing time: Sun 01 Mar 2026 04:50:45 +0000
Manifest this update: Sun 01 Mar 2026 04:50:44 +0000
Manifest next update: Sun 08 Mar 2026 04:50:44 +0000
Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: 6/TdmCdFKHDfk7nde3mSff8StnA9z4r7n3rXcKQEvwk=)
2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: 7nbk648Lx+0TS3n2r2a85obb4RAoKVLjKlJc+cMH7wA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Validity
Not Before: Mar 1 04:50:44 2026 GMT
Not After : Mar 8 04:50:44 2026 GMT
Subject: CN=69a3c5a5-7fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:f7:ad:04:33:d3:43:fb:04:80:ce:0d:13:
0d:a9:1d:76:07:e7:a8:78:01:6d:f3:97:85:8c:69:
f1:34:f1:50:69:2e:a3:75:79:dc:1a:5b:d9:07:75:
ec:2a:69:39:ff:58:09:0c:90:82:20:47:b6:e7:56:
39:19:ff:2c:64:48:54:3c:39:4f:69:2a:09:a7:6d:
b0:ea:b7:73:69:c5:63:cf:be:3f:9c:82:0a:82:72:
cb:15:33:b0:8d:63:58:71:6d:26:9b:57:ef:16:fc:
28:2e:b3:9b:31:9b:2c:82:1f:15:0f:25:59:8a:d6:
99:dd:e5:ea:ab:9c:78:e6:03:d2:7c:2d:cb:14:74:
c6:2b:96:d0:2f:cb:0a:20:8d:f8:3a:2d:32:a8:b3:
28:18:cf:c0:72:8b:3e:e4:5e:76:9e:27:56:b3:c8:
01:a2:59:18:c5:56:f9:5e:ed:0a:33:89:09:ef:5f:
15:ed:05:10:33:da:3e:3e:91:cf:d6:40:e9:dd:53:
45:63:4f:90:09:79:47:e5:57:d8:3a:04:e5:d9:07:
74:72:d4:59:83:0e:62:64:bd:09:f7:ec:c1:3d:98:
d1:1d:6b:58:11:99:91:cd:5f:78:21:c8:61:c9:f6:
bf:bd:ba:3f:6e:91:d3:91:93:f0:ff:f3:e0:83:8b:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:C4:77:29:D4:F7:31:DF:B2:6C:76:16:F9:4E:A0:70:7F:26:29
X509v3 Authority Key Identifier:
keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b9:6d:98:35:32:84:c5:66:7a:3e:a0:c0:84:c3:a8:e0:ce:
0e:95:58:bd:c2:fa:f3:9e:bf:9e:24:5c:43:c4:64:8e:5f:b4:
ea:0f:a7:a9:92:7f:58:51:cf:51:5a:dc:9b:a4:a5:b6:aa:60:
55:28:08:ef:9c:e4:3b:fa:5c:5b:45:32:f2:83:f0:82:bb:69:
a4:0d:d3:bd:89:55:e5:28:75:f6:76:29:20:7a:4c:7d:38:e0:
74:66:32:c1:13:7e:e2:13:3e:02:22:db:ad:b7:52:9d:f7:1c:
6b:25:02:f9:7d:04:00:8a:f1:11:03:e7:29:4f:aa:c6:aa:9d:
27:44:81:af:09:3a:e0:9c:be:dd:e6:93:78:bc:90:80:e5:f2:
7c:7d:3a:d4:bd:f4:e7:b9:18:0d:0f:27:97:15:67:17:4a:ba:
f6:b8:97:45:61:92:9f:72:3b:c8:cd:98:1f:22:d6:d4:45:be:
0b:ed:80:e5:63:2e:aa:ba:d4:6e:4f:1d:72:62:ab:21:5b:b6:
0a:86:b1:0f:e5:4d:a5:7b:0d:51:62:e4:cc:d8:6a:d3:63:42:
b6:e9:97:ea:3b:9f:d0:67:71:be:1a:c8:c3:85:2b:01:aa:e6:
26:82:e7:97:df:55:49:e7:eb:fd:3c:ab:94:a8:35:9b:db:47:
ed:d4:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:20 2026 by rpki-client