
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier: b1lNb+pzj1vJG7S86+M4KCAC2CkaNSuZNvkp5Ga+GoE=
Subject key identifier: B7:94:E4:1E:21:11:72:F1:84:67:58:CA:E6:98:F4:E2:C7:EA:85:C0
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number: 8B
Signing time: Thu 11 Jun 2026 10:41:22 +0000
Manifest this update: Thu 11 Jun 2026 10:41:22 +0000
Manifest next update: Thu 18 Jun 2026 10:41:22 +0000
Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: 333s0aZgQolgD4T3IUeX5ruC5WlTmKYmx9IZxoxGDJg=)
2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: /DGfu5IZwgqK2fcVU/zNOMsbLyKflPYKY+TO1byR3vA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Validity
Not Before: Jun 11 10:41:22 2026 GMT
Not After : Jun 18 10:41:22 2026 GMT
Subject: CN=6a2a90d2-a131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:95:58:dc:4d:06:4b:34:a4:83:c4:f3:7c:
eb:63:7a:90:91:3b:bf:91:8e:2d:4b:b3:38:5e:b6:
1a:19:8a:7e:bb:9f:a6:23:4b:85:c1:2b:3d:d2:84:
03:04:ce:62:a4:07:12:3f:66:1d:7d:09:0a:ee:b4:
0f:ac:83:3b:bf:bb:8f:75:38:ab:7b:06:2e:d0:53:
57:95:f9:43:e4:c5:d7:ec:28:83:fc:f8:be:38:b7:
bb:d0:64:f6:e9:03:a6:47:3c:3e:6e:e5:7d:04:18:
63:ef:eb:04:76:18:62:33:21:d1:51:a5:16:f7:eb:
d7:05:04:eb:94:62:d1:ec:3d:4f:25:6b:b7:32:cf:
7a:16:ba:e4:bb:d5:e3:83:c0:63:74:71:4f:0e:7f:
56:a2:93:da:f9:15:de:e0:b0:cd:e7:f3:69:18:ad:
be:d7:ca:31:bc:b0:7c:7f:c9:ba:36:ee:83:12:33:
b3:4c:26:26:a4:fc:84:94:62:cc:4b:29:db:42:15:
7f:c4:99:e0:1b:b1:64:cc:a2:db:80:cf:f8:87:55:
6a:e1:83:ef:fd:97:5b:3a:dc:88:6b:c7:e1:6a:e5:
65:6d:12:b1:06:4d:3b:11:3f:66:09:da:e7:17:7a:
a5:bf:3d:e7:7d:60:66:c8:63:bc:55:6c:4f:3b:48:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:E4:1E:21:11:72:F1:84:67:58:CA:E6:98:F4:E2:C7:EA:85:C0
X509v3 Authority Key Identifier:
keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:cb:92:ac:55:9d:3a:a3:3a:1c:54:e9:d7:0f:86:ea:db:
e2:f2:88:35:84:12:a1:68:9c:da:c3:e0:02:63:cd:7b:c3:75:
17:93:65:0f:4f:81:20:88:0b:a1:dc:67:4d:2d:87:64:a1:ba:
89:41:37:b6:3f:7a:be:87:ba:07:91:44:1a:6a:ca:ea:6f:67:
99:7f:cd:06:f8:af:22:47:a6:84:53:8c:b5:52:c7:0c:c5:33:
bd:00:92:82:db:6b:3d:55:cd:b3:9e:ba:cf:a5:52:9e:58:60:
4b:74:27:3a:79:3a:f2:57:82:dd:93:db:e8:3e:ba:23:6b:f9:
64:d0:95:a7:1b:15:cf:14:31:34:f8:53:32:fe:dd:4f:bd:22:
d5:2b:97:b6:e7:29:5c:51:71:82:6b:a6:d3:94:0b:d6:c3:18:
de:d6:12:03:48:4f:e7:77:c5:6d:4b:cf:bb:31:89:0d:3a:ff:
01:fb:66:aa:f5:be:a8:71:95:0e:e2:48:2f:01:94:8d:cf:ad:
3a:d8:cd:38:3a:56:4b:e0:ed:43:3d:3e:ed:53:97:f4:b7:50:
2c:58:9b:40:55:44:36:17:fb:09:af:02:8e:ce:31:f0:5c:c2:
39:50:a3:69:ca:82:74:14:8a:e2:26:07:dd:7c:91:7e:70:c6:
9f:4c:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:51 2026 by rpki-client