
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: xdvX5koI/iJpeRqMJxfrHhda266sdDdbmemdjWWAoiI=
Subject key identifier: 9D:66:39:CA:83:0F:FC:D9:E9:91:E9:7F:D3:F1:70:FA:10:B8:99:69
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 0828
Signing time: Tue 28 Jul 2026 21:33:24 +0000
Manifest this update: Tue 28 Jul 2026 21:33:24 +0000
Manifest next update: Tue 04 Aug 2026 21:33:24 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: HrlcgDO7NXnB/SY8hbmGnXEDRb+hi/cwLZJlj0imbt4=)
2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
4: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Jul 28 21:33:24 2026 GMT
Not After : Aug 4 21:33:24 2026 GMT
Subject: CN=6a692024-d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:bd:34:04:87:01:85:ce:d0:3f:eb:bd:3a:
95:27:d9:fa:7f:06:4c:01:95:89:68:70:6e:32:86:
20:f4:37:d8:ed:87:d7:3c:09:a9:c1:c5:ee:60:07:
dd:39:e6:5f:ea:b3:0a:d3:c2:0f:77:24:b8:6c:ef:
2f:0c:b1:2a:4f:32:bd:32:40:f9:00:9d:b6:f8:1d:
ab:0e:4d:58:43:f6:75:e2:b0:9c:de:86:b9:b6:42:
b7:c9:c9:42:df:3e:e1:ba:b9:ee:40:2d:a0:d3:80:
89:81:a8:f2:37:56:01:9f:e2:01:4f:29:67:f9:0d:
ec:26:24:4b:d2:cf:8c:75:b6:29:c6:55:0f:ba:48:
09:49:4a:45:87:ac:3e:eb:dc:67:79:fe:2d:86:81:
05:47:2e:6d:f9:b1:8c:59:63:ad:bf:83:49:08:97:
be:5a:26:bf:21:ea:10:57:d0:ce:dc:98:7c:23:ce:
3e:f9:6f:bf:c6:b3:c6:88:4e:a6:fb:b9:56:57:d4:
a0:a7:a9:8f:e8:59:f4:a5:8b:4e:0a:b1:78:3f:ef:
81:87:0b:f7:ce:10:06:21:de:59:9d:ce:e2:f1:0c:
02:3f:65:70:b8:dd:33:ca:6d:49:43:f7:67:7c:e9:
6f:f7:2f:f1:f0:f5:7d:3e:b7:37:5c:7d:ea:c0:5b:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:39:CA:83:0F:FC:D9:E9:91:E9:7F:D3:F1:70:FA:10:B8:99:69
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:ae:80:e2:63:bc:30:64:50:15:c6:f8:56:fa:00:fc:ab:
1e:29:10:34:1f:c6:5c:0e:b9:b0:94:11:b5:23:91:ab:08:9a:
7c:0e:9f:92:2a:3b:19:4d:1f:e6:32:ed:79:4a:5b:b6:be:c6:
33:e3:80:7a:1e:c4:03:a3:6f:e7:a0:78:c4:72:37:00:27:e0:
93:95:99:9d:75:5a:0e:a8:43:f1:41:aa:a6:62:2a:99:50:0f:
72:5a:5a:ba:15:a9:97:30:24:f6:28:26:2e:8f:c5:8b:e7:d3:
bb:67:e9:96:47:ec:08:da:e3:4a:ac:59:21:b7:dc:52:74:64:
c8:e7:74:3f:9e:c6:30:ba:7d:7a:16:12:83:57:38:93:4f:f5:
fd:7e:83:39:36:74:d3:f4:42:86:a2:4c:1a:75:6b:49:3b:3c:
26:17:68:1c:b1:e1:fb:84:c0:e7:5e:19:79:68:2c:ef:20:ac:
ef:d3:3d:00:99:21:4d:9b:a6:9f:86:4e:fe:2d:81:d7:bc:c2:
37:3f:f7:17:68:b1:da:71:0b:4b:ef:22:06:8e:5f:53:92:37:
28:6b:57:c4:c2:9c:78:ba:ac:fb:88:cd:cc:31:38:d7:a6:bd:
72:2e:f1:f4:40:7e:29:7a:14:cb:0a:bd:4d:23:59:f0:05:17:
4d:31:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:23 2026 by rpki-client