
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: 5ybjfcOrYkZFjkyPbjC3qHKLLOv8TexwIS8SX2TLGcI=
Subject key identifier: FA:1F:5F:A6:3E:F1:D6:33:E1:BA:CD:5E:90:24:CB:AC:15:42:B6:E8
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 081F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 0811
Signing time: Fri 12 Jun 2026 21:12:40 +0000
Manifest this update: Fri 12 Jun 2026 21:12:39 +0000
Manifest next update: Fri 19 Jun 2026 21:12:39 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: hPFKQq2b7sPSjyeZSl8F30R6WO6GG0Copynh3Oq9ET0=)
2: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Jun 12 21:12:39 2026 GMT
Not After : Jun 19 21:12:39 2026 GMT
Subject: CN=6a2c7648-25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:db:ce:39:fa:91:97:06:80:31:d2:d6:53:
f8:d9:ad:16:95:e6:29:b6:f0:ad:df:d2:a2:fd:2d:
6c:fe:ad:88:1a:6a:eb:a8:48:79:13:cf:83:03:ca:
72:ee:2d:80:95:3b:f3:cd:6a:d6:df:83:32:c4:1e:
a6:74:59:36:34:18:21:3c:f7:a7:9c:d2:74:b9:60:
2e:8b:bf:37:0a:b6:0e:67:01:4d:29:f3:49:3a:f9:
e6:90:ae:19:46:8d:48:a4:b6:cf:95:67:33:02:5a:
77:13:13:a6:ea:23:74:f3:26:43:ec:18:3c:88:dd:
1a:44:7d:c6:51:65:7c:af:0b:23:b6:93:e0:41:43:
d9:e6:7e:17:bc:fc:da:8b:02:e7:83:7d:ac:14:48:
a9:ef:1b:65:fb:71:66:d0:62:da:42:1c:a7:ec:b1:
ab:2b:d2:e0:f9:6e:bb:e2:f1:bd:db:eb:e8:6b:b4:
d6:38:ff:9c:ba:47:21:93:fd:a6:a5:4a:7b:05:2d:
d2:09:5a:99:d2:30:d1:a1:78:61:06:d3:53:40:b1:
92:b5:1e:90:0f:a2:69:61:d0:97:7a:66:1e:2c:26:
7d:ca:22:94:3a:e4:65:eb:2e:f6:8f:4c:5a:36:f7:
d4:b1:1e:f2:0b:e1:2b:19:a3:fb:08:52:65:af:37:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:5F:A6:3E:F1:D6:33:E1:BA:CD:5E:90:24:CB:AC:15:42:B6:E8
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:a9:d4:30:0c:f4:28:45:21:d6:5c:86:00:ab:ae:9c:4d:
2b:c6:54:20:ef:8d:57:a2:b0:2c:90:c3:95:65:ea:cb:05:82:
1e:a2:25:7d:41:c9:23:5f:17:76:8d:3a:d2:54:bb:7f:2e:bf:
98:4e:d9:37:f8:8c:d1:73:f8:e2:3c:98:1a:52:61:a5:77:09:
2e:3f:49:ea:8c:5b:eb:97:20:52:10:20:25:78:2f:a3:80:1b:
60:70:31:94:0c:06:78:24:d1:06:4a:c0:a4:80:ba:57:26:36:
77:4c:92:60:ff:41:50:6d:06:73:ab:0c:e4:f3:ce:cf:80:e1:
49:9a:37:03:31:fd:62:52:61:c5:c7:94:57:13:b5:54:d8:f0:
b6:55:eb:4a:cf:16:c7:cb:41:51:b5:92:1c:20:48:70:ce:fe:
1c:15:de:7f:46:ee:c3:e1:c7:ca:26:b6:c9:d6:f8:a9:fb:7f:
11:60:17:ec:ca:28:9e:53:8c:5d:db:c7:57:64:cb:6a:a3:c9:
e2:d4:7c:72:f9:85:46:e4:1f:54:15:09:de:f0:bd:6e:63:2f:
9e:4c:53:69:38:84:f1:07:d5:31:27:1f:e2:57:58:d8:70:37:
25:84:98:a2:34:40:63:42:27:07:ec:54:10:d7:3b:62:04:35:
71:73:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:44 2026 by rpki-client