
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier: +8n5xHQAfaxg3ebJn7qSYQ4tNg0SWDoJiq/KCV993+k=
Subject key identifier: F3:3C:F4:0F:15:56:B6:B9:BF:30:C0:CE:6F:F9:14:0E:06:C0:94:1E
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number: 0491
Signing time: Sun 20 Sep 2026 23:48:21 +0000
Manifest this update: Sun 20 Sep 2026 23:48:21 +0000
Manifest next update: Sun 27 Sep 2026 23:48:21 +0000
Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: phkkursPUAee+a4JSLY5RQoEqkAaNsLJz2dpNMin5Uc=)
2: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=)
3: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Sep 20 23:48:21 2026 GMT
Not After : Sep 27 23:48:21 2026 GMT
Subject: CN=6ab070c5-46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:63:8b:68:53:c3:68:65:36:73:9a:f2:b9:
d9:10:36:03:2a:cb:c7:76:5a:42:19:cb:49:f0:79:
d1:da:25:06:c8:a2:d1:a8:85:56:4a:6d:e9:e6:0f:
5b:5b:55:08:d5:9c:e2:15:9b:77:38:00:f9:9d:1a:
78:cf:84:2d:7a:0e:32:1f:fa:12:8e:ff:86:e5:7d:
57:c8:c2:b2:75:19:87:36:52:a5:7e:a6:19:43:78:
c0:4e:f5:9c:05:62:0e:08:c1:ed:54:6d:63:27:51:
b9:af:d1:c1:66:68:33:3f:4c:01:fc:2b:72:01:7b:
72:ca:89:6f:28:21:40:b5:99:c2:62:99:ca:f1:31:
3b:70:a6:13:ef:a7:1f:18:d3:2a:2d:ce:a2:b7:3d:
ef:fd:dc:e1:87:33:41:ac:0d:e4:38:24:08:ac:38:
86:f8:4e:8d:87:55:fd:28:f9:4e:4d:35:bd:2c:05:
12:65:5e:0e:85:3f:68:3f:2f:e1:78:e4:0d:9e:33:
03:2c:88:79:d2:88:a6:69:08:e6:67:d6:ea:ac:5a:
15:86:ef:10:6f:73:f3:8d:74:c3:f9:0c:c6:2e:75:
45:14:0a:fe:06:91:7f:9b:bd:09:f5:4c:34:3c:6b:
d6:7b:67:e6:45:c5:c0:8d:46:9b:5a:ac:25:a5:75:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:F4:0F:15:56:B6:B9:BF:30:C0:CE:6F:F9:14:0E:06:C0:94:1E
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:44:fe:29:c7:f1:63:7b:8c:39:29:6e:79:c9:ce:84:3c:8f:
37:ba:8e:69:87:91:b8:70:78:1d:58:05:57:d6:2c:84:55:92:
fc:86:ce:de:8a:9c:d1:03:18:30:e5:d3:e3:c5:34:b6:1e:07:
27:a2:bd:99:78:49:75:ba:1c:c2:86:4d:9e:69:a4:ed:9c:21:
69:a4:54:23:21:02:36:e4:10:ff:4c:23:59:46:68:0a:7e:82:
30:ec:eb:e2:49:8c:cb:c4:cf:ef:99:ce:cf:08:80:1d:c4:93:
26:98:f7:b8:08:dc:91:e5:40:b2:b1:f2:6a:27:7d:5d:ec:c1:
b7:85:40:c9:97:0b:e2:eb:ff:f2:bc:3a:22:b1:3c:59:5e:19:
f3:77:8f:2d:d0:a3:e6:2c:75:2e:3c:55:f7:a1:7f:69:16:ad:
c6:eb:4e:cb:e7:9d:76:d9:ea:12:5e:39:67:6c:e1:82:c7:3d:
09:1a:fb:e2:5b:19:4a:1f:75:1d:b7:99:9d:8e:04:1d:9e:97:
e6:4e:cd:a0:db:ca:11:3a:aa:44:28:0c:09:79:62:45:86:1f:
11:b9:72:df:83:4b:ff:a4:07:4c:49:51:10:94:4d:71:06:f8:
10:c5:ac:ef:e4:3a:fb:c3:8e:8c:dc:9d:17:93:b5:66:d3:1c:
45:53:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:35 2026 by rpki-client