
$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File: ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier: fT6j3VEHiw8xekgE3+giti0T9mz5oEF6aaZ4rLw/Fg8=
Subject key identifier: AC:20:50:F8:23:43:E1:C2:1A:03:EE:C7:3D:57:D4:A2:24:52:37:45
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer: /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number: 0674
Signing time: Mon 02 Mar 2026 02:29:09 +0000
Manifest this update: Mon 02 Mar 2026 02:29:08 +0000
Manifest next update: Mon 09 Mar 2026 02:29:08 +0000
Files and hashes: 1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: rCTz31oXMFG7x8DR6u7xnADRMxId24hP07iAqJlTJRg=)
2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: x6RJn5oQmyrZkTIL+jnIDh/DG4GNtduzvhq+KZOjCjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Validity
Not Before: Mar 2 02:29:08 2026 GMT
Not After : Mar 9 02:29:08 2026 GMT
Subject: CN=69a4f5f5-3cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:89:fe:f3:f2:44:f2:83:c5:72:f6:95:3d:
9e:ec:15:c9:80:86:e1:37:ef:f8:18:e0:e6:38:29:
0a:6b:61:53:90:9a:6d:08:4b:4a:38:fd:3c:9d:7b:
d3:3f:cc:e1:99:ef:9d:8b:e7:e5:43:dd:da:e3:99:
47:a7:27:ab:a4:be:72:c8:5a:27:98:9b:38:74:2c:
15:55:59:40:1b:58:86:7d:72:10:37:b6:0c:8c:ec:
5d:0e:ca:00:06:c7:aa:9d:96:a7:6a:28:f4:6d:21:
69:39:da:a9:aa:49:94:9a:71:08:60:e3:d5:dd:08:
60:c0:30:22:ec:89:66:16:fb:d8:47:05:cd:f5:7d:
27:1f:b7:a3:7a:16:49:86:b3:c4:4d:16:17:59:6a:
d5:5d:4c:97:4a:9b:e2:2a:06:fe:b6:01:57:bd:a1:
6d:91:c1:42:93:9b:2a:be:c1:55:68:09:4e:90:66:
06:38:af:bd:7b:1a:c9:a7:e8:2e:4f:04:e5:09:67:
47:93:5c:36:2a:e4:a6:dd:9a:b1:b3:14:2e:f4:15:
7e:6f:51:f5:9d:e2:2b:2e:46:49:12:93:8a:70:24:
45:fb:1b:19:e5:89:ef:56:21:98:a5:da:2e:ef:2d:
5c:c1:61:8a:3a:35:cb:13:c0:45:36:9b:eb:ff:ee:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:20:50:F8:23:43:E1:C2:1A:03:EE:C7:3D:57:D4:A2:24:52:37:45
X509v3 Authority Key Identifier:
keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:b4:73:19:48:d4:af:26:d4:90:cf:2e:51:e8:03:83:5e:
9a:65:1d:0a:0e:3d:53:0f:14:d1:a0:90:bc:13:b0:1e:1b:c4:
a3:10:9c:20:6f:2c:52:03:ae:2b:d1:ae:b8:9f:29:cc:c4:12:
c8:83:53:9c:a5:51:d9:ac:5c:58:3e:eb:2e:21:1e:73:e0:37:
41:08:bc:f5:b9:c2:77:d6:eb:36:39:66:4c:ed:6f:65:4b:bc:
0d:c9:a7:ea:76:e6:c0:e7:d5:d2:7a:56:62:4b:1d:23:c3:86:
e7:ee:f8:8c:b6:c5:37:00:04:07:56:16:0d:ed:f3:d9:48:8a:
d1:ca:e5:fc:bb:3a:02:5d:c9:cc:99:25:fc:b9:b8:99:25:ab:
be:01:78:09:46:32:5d:54:f6:30:d8:ac:70:51:61:14:99:6e:
8f:8e:a6:a9:95:a0:98:ae:c2:73:fa:51:37:7a:b8:a5:de:23:
61:0a:19:09:40:20:01:8a:51:89:97:1d:7d:a9:a0:e8:87:e0:
14:10:85:82:67:79:61:f6:83:d7:c9:16:3d:9a:02:2e:4c:4e:
59:3a:27:0b:e3:02:64:cf:30:f2:40:d8:77:8e:bf:4a:f9:1e:
df:df:fc:04:8b:0f:40:dd:c6:39:23:dc:7d:8e:91:ad:61:91:
63:e9:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:31 2026 by rpki-client