
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier: yjciFmkpVIFG4ND7Fz+oh9O/bbZVWOGmFxkR9RhR//g=
Subject key identifier: 1B:3C:F7:69:E7:2F:76:68:7D:16:D4:24:5A:6D:84:D0:9E:AF:7B:76
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number: 0141
Signing time: Mon 21 Sep 2026 05:25:43 +0000
Manifest this update: Mon 21 Sep 2026 05:25:43 +0000
Manifest next update: Mon 28 Sep 2026 05:25:43 +0000
Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: 6Y9aM5IUXbMDh2vlh+tDa7wF61N5coejIx5l7XNXKGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Validity
Not Before: Sep 21 05:25:43 2026 GMT
Not After : Sep 28 05:25:43 2026 GMT
Subject: CN=6ab0bfd7-bc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:90:48:85:c1:85:b7:1b:5a:f5:ab:03:ff:
5a:bc:07:18:0c:a0:a8:4d:1d:9d:70:b6:80:92:86:
05:0b:f9:55:55:b8:b3:7c:44:c0:a7:ed:9b:bb:8f:
d3:09:e3:08:54:19:a8:0a:43:dd:47:a3:5a:7a:d2:
51:8b:a1:ce:e7:e9:c7:1f:42:40:72:21:f1:a3:61:
23:62:af:0f:8a:e2:3c:07:06:0e:b0:22:d5:51:1e:
70:56:e3:fb:7c:47:c5:8e:31:b2:77:13:03:84:78:
5b:38:e2:1b:a2:f0:07:9d:11:f2:bd:08:c6:4f:e7:
4c:46:84:85:b0:6a:23:9e:71:fc:9b:9c:af:3b:60:
dd:06:35:05:98:4b:9e:54:4c:e8:24:4e:2e:61:99:
f8:ff:a2:35:b1:84:f0:26:b0:bc:3b:ff:ed:38:0e:
8d:88:2b:03:00:aa:bb:17:1e:ef:ba:80:22:48:08:
bb:78:03:a0:17:ba:bd:6d:1f:df:b5:f0:9e:de:c7:
12:c0:72:ab:42:07:fb:8c:62:64:5e:9e:e8:7c:aa:
b5:62:e6:fe:95:e1:3e:60:84:c3:11:02:48:d5:23:
d4:4b:fe:4a:5c:15:9f:57:e7:01:59:7e:36:3d:85:
91:c4:8a:94:1e:99:7f:ae:0a:22:9e:76:c2:77:f8:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:F7:69:E7:2F:76:68:7D:16:D4:24:5A:6D:84:D0:9E:AF:7B:76
X509v3 Authority Key Identifier:
keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:64:6d:56:74:2e:30:dc:68:cf:b9:0a:38:0a:0c:d0:e3:d2:
15:ee:95:d1:14:9b:35:c7:b5:b7:01:a5:27:65:4e:e3:31:34:
35:40:6c:5c:d4:e9:0e:f9:3c:26:22:88:07:61:a5:98:71:1a:
00:58:fc:5d:a8:ca:fb:5f:43:fa:3d:88:57:14:0c:19:e3:00:
97:b2:ae:45:4f:0c:e9:ec:79:ac:15:2a:94:53:c1:7b:78:41:
2b:11:25:ba:c4:98:63:15:8b:53:38:8e:38:19:83:3e:01:9b:
a7:ba:90:0a:f0:a4:b7:02:e3:fb:fd:89:e6:bc:bc:da:34:36:
5d:75:df:cc:ff:7a:00:30:49:0a:3b:e3:fb:ed:67:bf:ee:10:
ea:34:d6:ef:be:2b:9a:fd:a0:19:08:24:70:af:32:b1:67:6a:
9a:dd:d1:33:09:37:4d:ce:32:82:f9:ae:85:4b:b0:f6:02:02:
1d:61:77:7b:3a:d4:ad:2e:ac:d1:05:02:6a:d9:8a:ef:82:44:
8e:00:9a:15:61:16:26:c6:c7:8e:a6:9e:af:71:e6:b4:a7:dc:
48:13:81:aa:02:ab:c3:bb:a0:91:d1:ca:c4:08:9a:03:d7:d9:
25:14:44:eb:4e:2d:42:fb:cc:5b:64:81:8b:6d:2c:4b:89:e5:
bb:54:e8:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxMjUxMTAvBgNVBAUTKDAxRUQ4NDFGQjk1MUFBRkEyNTkxODBFRjkyOTlFNEQz
NkZERjdDM0QwHhcNMjYwOTIxMDUyNTQzWhcNMjYwOTI4MDUyNTQzWjAYMRYwFAYD
VQQDEw02YWIwYmZkNy1iYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufGQSIXBhbcbWvWrA/9avAcYDKCoTR2dcLaAkoYFC/lVVbizfETAp+2bu4/T
CeMIVBmoCkPdR6NaetJRi6HO5+nHH0JAciHxo2EjYq8PiuI8BwYOsCLVUR5wVuP7
fEfFjjGydxMDhHhbOOIbovAHnRHyvQjGT+dMRoSFsGojnnH8m5yvO2DdBjUFmEue
VEzoJE4uYZn4/6I1sYTwJrC8O//tOA6NiCsDAKq7Fx7vuoAiSAi7eAOgF7q9bR/f
tfCe3scSwHKrQgf7jGJkXp7ofKq1Yub+leE+YITDEQJI1SPUS/5KXBWfV+cBWX42
PYWRxIqUHpl/rgoinnbCd/iLrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs892nn
L3ZofRbUJFpthNCer3t2MB8GA1UdIwQYMBaAFAHthB+5Uar6JZGA75KZ5NNv33w9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDEyNS9GRTc3OEVDOEND
MTAxMUVGODczOTZBNkVDNEY5QUUwMi9BZTJFSDdsUnF2b2xrWUR2a3BuazAyX2Zm
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FlMkVIN2xScXZvbGtZRHZrcG5rMDJfZmZEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDEyNS9GRTc3OEVDOENDMTAxMUVGODczOTZBNkVDNEY5QUUwMi9BZTJFSDdsUnF2
b2xrWUR2a3BuazAyX2ZmRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfGRtVnQuMNxoz7kKOAoM0OPSFe6V0RSbNce1twGlJ2VO4zE0NUBsXNTpDvk8
JiKIB2GlmHEaAFj8XajK+19D+j2IVxQMGeMAl7KuRU8M6ex5rBUqlFPBe3hBKxEl
usSYYxWLUziOOBmDPgGbp7qQCvCktwLj+/2J5ry82jQ2XXXfzP96ADBJCjvj++1n
v+4Q6jTW774rmv2gGQgkcK8ysWdqmt3RMwk3Tc4ygvmuhUuw9gICHWF3ezrUrS6s
0QUCatmK74JEjgCaFWEWJsbHjqaer3HmtKfcSBOBqgKrw7ugkdHKxAiaA9fZJRRE
604tQvvMW2SBi20sS4nlu1To9A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:58:03 2026 by rpki-client