
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json)
Hash identifier: r/oyF9iBW/2mnREQRzGhElOUf5mWIL+x+7LKL6sLflc=
Subject key identifier: 35:A0:3A:48:19:B3:99:5C:C0:EF:B4:E5:ED:BA:41:E8:54:56:0C:7E
Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
Manifest number: 75
Signing time: Sat 13 Jun 2026 07:50:32 +0000
Manifest this update: Sat 13 Jun 2026 07:50:32 +0000
Manifest next update: Sat 20 Jun 2026 07:50:32 +0000
Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: jQzYkPd+xZuC5PWpuU5C6nSqjq8SWOiklMMJ8BvCDyQ=)
2: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: ym/P1+PLUpEQKVLi2u6tem8jb0mTZASUmnMv8PJgl7k=)
3: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: 91XVnfqDvuubQ63399MOb9g9RyzRumGsmN3T5NY63OE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Validity
Not Before: Jun 13 07:50:32 2026 GMT
Not After : Jun 20 07:50:32 2026 GMT
Subject: CN=6a2d0bc8-9dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:1e:4e:5c:f6:d9:c1:32:c0:4c:c0:74:de:
08:fb:e6:d4:cc:76:e1:e2:5e:82:3e:12:fc:a8:9d:
1a:20:41:ef:36:45:bb:4d:10:46:ce:95:d1:b1:19:
f1:3a:4d:02:ee:ea:f5:70:3c:8a:cb:22:e2:0d:c3:
bd:01:e8:c4:f8:0f:b5:73:ec:3e:12:93:fc:83:5d:
c3:6a:52:58:f5:e9:99:6f:f2:1f:cf:23:33:03:bd:
94:6b:01:63:50:e0:0b:92:3c:b5:f5:d1:dd:f9:11:
46:74:da:8a:f2:e3:39:bc:ce:4b:c0:d0:d3:4a:62:
83:b4:f4:dc:6e:2a:3f:8d:e8:d9:bd:02:9d:15:1d:
21:f4:1f:ca:76:83:51:59:13:20:b5:e3:a2:13:3b:
e9:fd:48:88:43:f6:ca:a8:08:5f:64:70:0f:80:4b:
99:fd:1b:52:9b:b1:a7:b0:68:18:52:11:0c:5d:fc:
73:ca:a0:fb:9e:e5:83:c7:af:02:2c:5e:13:70:77:
2f:89:d9:bc:fb:3a:9d:1f:1d:ee:6b:d0:1c:10:22:
6f:f7:4f:8c:00:d4:16:af:05:12:ad:f6:53:58:7b:
61:d3:9a:7f:b7:af:bc:fb:73:a5:2e:6a:7c:a7:01:
97:13:fe:dd:b0:c9:07:d4:82:b3:04:72:ac:48:07:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:3A:48:19:B3:99:5C:C0:EF:B4:E5:ED:BA:41:E8:54:56:0C:7E
X509v3 Authority Key Identifier:
keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c5:7c:95:1d:41:18:08:46:ba:0c:94:af:f4:3b:1f:37:83:
bd:41:a2:2c:8c:c5:51:43:d7:63:2e:75:35:3e:4c:c2:75:6e:
2d:0a:49:0c:82:9f:95:30:6c:79:f3:1c:3b:eb:5a:6b:00:09:
24:bd:64:40:5a:57:c8:00:3c:a6:aa:67:bc:7c:b7:06:1c:a7:
e3:e3:09:4e:c1:d3:a3:14:7c:0e:7d:02:4b:5e:39:6a:ee:eb:
7a:f0:6e:4a:c8:9c:b2:c2:45:ea:a4:c7:6f:a9:ed:7d:4f:ed:
c5:44:10:14:43:4a:12:f6:bb:68:cf:f1:a5:c7:cc:a3:33:94:
e6:9d:1c:a1:23:5e:14:b6:49:6b:4f:e3:3d:0b:7e:57:a1:e1:
4a:4e:82:77:a5:7b:a2:43:4c:5f:09:39:4a:c7:ca:fc:92:95:
0f:0d:a5:6a:66:d4:ca:32:db:3a:b1:5f:39:3f:da:a5:17:b6:
61:46:87:71:53:fa:f1:de:79:ee:0c:63:5f:ff:de:8f:28:94:
5c:d8:0a:d9:fd:0e:dc:01:41:26:98:66:e0:f2:17:89:05:7a:
d3:f3:5c:86:e0:a4:3e:b1:c4:16:bd:e0:58:be:7e:4e:18:71:
01:ef:a7:b8:37:55:40:c2:a8:e9:ac:d7:82:8f:03:0a:bd:42:
76:93:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:55:00 2026 by rpki-client