
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json)
Hash identifier: QGMy1qKoi0t7cEOm7xrU5JOsXZTCm+8Z+XikmFJVBrU=
Subject key identifier: C8:4F:92:DC:94:AD:5D:DA:B6:A7:25:B3:C4:D5:79:27:87:4D:72:9B
Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
Manifest number: 012C
Signing time: Wed 23 Sep 2026 05:35:28 +0000
Manifest this update: Wed 23 Sep 2026 05:35:28 +0000
Manifest next update: Wed 30 Sep 2026 05:35:28 +0000
Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: L0s+TPL9da7JP8pDKSzF9Gt49nsEoFOZH0oM+TCmnGY=)
2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: yZGNlzCw9fYEkUgbHQXyzQMU/Eeaou90bAR9FcUS1CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Validity
Not Before: Sep 23 05:35:28 2026 GMT
Not After : Sep 30 05:35:28 2026 GMT
Subject: CN=6ab36520-2d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:6d:6c:4b:a3:ec:51:e3:05:b5:81:0a:3d:
40:45:6c:25:32:17:60:3f:01:a0:2a:42:5b:c6:a7:
21:e6:79:b8:25:7f:fd:a2:4a:22:70:ff:0e:9a:c0:
6b:c0:48:24:fe:94:94:4f:69:32:5e:7c:11:01:82:
c2:4d:0c:b2:66:cb:aa:62:14:49:7c:e1:17:ea:8a:
ef:76:7a:cf:7f:bd:b5:72:9d:3c:63:5e:a7:a3:9f:
d5:92:65:93:5b:25:15:aa:8a:50:c6:54:3d:bc:13:
4b:f1:7e:1e:f2:62:d4:73:56:47:bb:e2:67:59:05:
47:d3:18:02:e8:82:85:f7:e4:34:ac:45:f2:65:f6:
f7:10:f3:b2:f0:41:a3:87:a0:e2:4c:91:1a:a8:ba:
32:41:43:9f:b8:ec:e3:28:89:ee:3f:63:86:29:3f:
e0:57:24:33:4e:9e:11:72:a1:ac:24:49:71:de:ca:
4a:d1:4a:1b:00:a0:a3:ef:5c:7c:99:dd:f8:4b:44:
42:aa:88:5a:6d:0e:f4:d2:b8:1c:6d:23:4f:51:17:
61:a1:19:46:02:f6:74:91:cd:d9:81:17:d5:11:ff:
72:cc:2c:bf:c7:67:85:1b:29:63:20:1e:93:0c:20:
d4:ea:8c:44:fb:be:ae:c9:d3:2d:8e:2c:e4:32:95:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:92:DC:94:AD:5D:DA:B6:A7:25:B3:C4:D5:79:27:87:4D:72:9B
X509v3 Authority Key Identifier:
keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:ec:bd:18:4a:88:43:b5:80:41:9c:da:9d:4b:2d:7b:48:
8d:8f:75:1f:4c:eb:2b:de:d3:9b:6d:6e:d3:03:ca:68:e1:bf:
6b:51:2c:61:cb:ae:b1:2c:0e:37:2b:fe:83:2c:f1:11:91:1a:
8f:eb:09:80:0d:2e:22:0e:dd:5f:61:38:a6:42:42:f9:33:b1:
a6:7c:b8:9a:ac:2b:f3:41:82:51:17:89:d8:5f:a3:fc:e4:eb:
69:76:d3:38:62:ff:71:c4:db:b0:3b:5f:44:1c:2c:93:78:14:
f8:0a:6e:f1:7a:2c:52:50:9c:da:d7:1b:2c:3e:61:3b:ae:1f:
2d:a6:2d:70:46:5a:cb:dc:42:80:54:fc:ba:13:be:02:11:4b:
5a:31:d1:80:7c:e6:32:05:02:c0:18:fe:81:64:cb:68:4d:f7:
49:e1:17:0f:3d:70:6f:a8:3a:80:95:ad:8f:82:39:29:37:d1:
68:ea:c6:86:cc:a4:6d:5d:df:93:da:fa:47:03:36:c4:04:eb:
4e:e3:d1:74:9e:70:93:a7:0c:78:d9:89:1c:cc:e0:ff:a4:37:
2c:27:91:3a:33:10:49:b0:60:37:69:bb:b8:94:29:d6:4f:66:
ae:20:b7:a7:9e:dd:37:7d:bb:be:bd:61:c9:83:23:f2:f7:67:
06:9b:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:42:43 2026 by rpki-client