
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier: 2O3nW2CObQCtXFCcV4+srEGEt0xK/YGimFIDBPGQOXk=
Subject key identifier: 2C:E6:22:D9:2C:F3:C2:37:BC:A5:25:46:57:F9:D4:89:9A:92:36:A5
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number: 6D
Signing time: Wed 15 Apr 2026 07:25:13 +0000
Manifest this update: Wed 15 Apr 2026 07:25:12 +0000
Manifest next update: Wed 22 Apr 2026 07:25:12 +0000
Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: URGDUZGFU5AXrtf4TNBso2XL4NPjZ9XjOAu0pwg/NPs=)
2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: bwshEspn5Rm/jzWxQl5mOhNxhC2TqkN15wojbaQFT3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Validity
Not Before: Apr 15 07:25:12 2026 GMT
Not After : Apr 22 07:25:12 2026 GMT
Subject: CN=69df3d59-99a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:65:fa:7d:34:bd:81:db:6b:bb:18:1b:9d:
da:d6:b4:b3:1c:0b:bf:37:97:de:85:5a:ff:13:be:
39:47:65:87:14:db:ea:55:5f:9b:bc:2b:9c:97:e3:
94:83:dd:14:2d:ea:97:1a:4c:bb:1c:55:f7:90:c8:
eb:50:b5:93:38:19:c2:9b:88:69:4d:c4:a0:04:80:
3d:83:6e:ab:19:4d:18:2e:3c:cd:05:96:f8:05:07:
70:7c:1c:f9:1d:26:33:e3:80:88:1c:07:1c:35:31:
f8:d1:fa:a4:56:82:d4:59:ba:dc:d9:63:59:c5:f0:
26:b4:16:b4:4d:63:70:08:a6:9e:02:04:cd:5f:fb:
17:1d:95:75:24:a4:b6:ae:0c:8a:02:cb:28:b6:69:
16:84:b6:45:cf:cc:a2:1e:7d:5d:fa:51:a7:8c:05:
73:18:85:0a:4e:19:03:3d:a2:ad:a2:76:80:bb:45:
30:d0:4e:60:18:ff:a6:3e:bf:32:d1:3f:2e:d7:71:
f4:81:82:e3:a2:d0:ad:66:ee:30:49:e1:01:9e:1b:
89:71:05:70:0a:16:72:27:e6:4e:2a:b1:00:75:c1:
30:ea:89:9b:13:68:3f:e9:9f:07:9e:e4:6d:da:f0:
5d:f8:ea:94:f3:55:05:e0:0e:8e:76:fa:8e:40:49:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:22:D9:2C:F3:C2:37:BC:A5:25:46:57:F9:D4:89:9A:92:36:A5
X509v3 Authority Key Identifier:
keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:4e:a6:d3:6b:e1:83:1a:29:1d:b7:45:6d:15:24:0d:8d:0a:
c1:9b:31:e5:9c:e9:b7:e7:79:90:86:5d:08:45:e2:6a:a0:aa:
b4:b7:42:6d:40:8d:c5:a9:da:6c:0b:29:df:8a:09:28:78:b3:
07:f3:b2:b7:9c:84:27:0c:21:64:9e:c4:f3:ea:f2:0e:cf:90:
c7:9c:ae:35:bb:4d:26:ba:86:cf:9c:65:36:fc:4a:40:88:31:
eb:13:25:04:19:83:48:8c:f3:35:07:51:2a:36:d9:f6:60:51:
5f:e4:c8:db:1e:36:d2:83:b2:15:31:f6:84:bb:d2:58:4e:40:
4c:73:71:92:98:be:d7:db:88:0e:be:f2:ea:c1:8f:3d:b4:ad:
a0:18:0e:d9:70:e3:e0:4f:32:33:26:1b:23:73:5f:dd:1b:cc:
45:6f:22:9b:f7:07:b5:a9:c9:7d:e7:b9:b6:0c:8e:db:93:0f:
81:6b:86:6b:ea:dc:34:b1:26:5a:27:dc:b6:e1:e1:b5:ac:43:
57:e2:13:86:b2:d1:c7:20:df:67:7d:2e:96:45:cc:94:59:1b:
ec:fb:ec:0f:d5:f9:f3:b1:45:a9:a8:7d:ec:05:3d:81:c6:61:
55:b7:76:d9:e1:11:2e:ab:86:13:c1:af:46:2d:3d:35:9c:43:
77:8f:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:51 2026 by rpki-client