
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier: nvngF5v3ZyPMDj19/bEo1hbQVMe37iFJSn35nlmJfe8=
Subject key identifier: 87:98:DC:76:BA:D5:37:EA:83:32:6C:DB:16:A9:76:9F:3C:77:4F:13
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number: 0645
Signing time: Mon 27 Jul 2026 01:15:42 +0000
Manifest this update: Mon 27 Jul 2026 01:15:41 +0000
Manifest next update: Mon 03 Aug 2026 01:15:41 +0000
Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: 0k7mnWWzw/KQ5rBoutGo9IWE4ZTBaU0+gFt4+3VEL0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Validity
Not Before: Jul 27 01:15:41 2026 GMT
Not After : Aug 3 01:15:41 2026 GMT
Subject: CN=6a66b13d-d043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:e5:5f:77:d6:8e:b7:0e:6a:04:18:af:fe:
0b:ce:16:65:61:70:79:c6:0a:6b:36:bd:5b:0c:cc:
36:eb:60:fb:5e:67:f0:d2:82:7a:7b:63:42:40:7f:
12:82:24:3a:fe:e4:a4:22:62:0d:d7:30:9c:31:9d:
2a:c7:3f:66:8c:0d:1c:27:03:7a:08:e0:0f:a5:a2:
9c:a9:2d:49:0f:4c:f0:9a:a9:71:4f:0e:51:b5:da:
6b:57:81:c5:ac:21:a1:51:2f:da:31:5a:1d:c6:4a:
c8:ba:68:72:10:fe:d0:20:a4:99:84:6d:da:70:2c:
d7:96:55:0d:0e:dc:0c:01:6f:0a:3b:75:63:73:8f:
55:3c:78:2e:0a:4a:bb:13:7d:91:ac:08:0c:cd:e8:
60:b5:c2:e0:16:67:d4:94:33:c4:e4:8f:e1:9a:31:
bc:df:e1:76:f0:d6:f8:1e:f5:a9:0a:25:cf:96:d5:
46:e2:57:76:18:6a:24:f4:a9:d7:2f:d2:67:9d:a9:
e7:fa:4a:16:19:fd:1d:11:4d:c6:c7:3e:f5:a8:9e:
00:dd:16:a2:74:60:5d:a3:63:d0:f5:44:c6:0a:7a:
21:29:1c:bb:cc:2f:81:28:35:42:61:41:69:b8:53:
d9:63:0f:a9:b7:ca:7f:af:e0:c9:8f:50:32:07:cf:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:DC:76:BA:D5:37:EA:83:32:6C:DB:16:A9:76:9F:3C:77:4F:13
X509v3 Authority Key Identifier:
keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:95:b1:63:69:b4:7f:97:45:89:09:93:02:d0:98:d7:35:
3a:0b:29:f2:82:44:cf:19:f0:76:7f:fb:dd:26:78:ef:ef:36:
6a:68:76:d4:6c:ca:34:0d:52:97:33:54:b3:02:a7:3d:e5:51:
57:8b:45:85:62:d9:ef:b9:e8:05:be:bf:21:dd:66:79:f9:31:
f9:3a:ad:b4:4e:3f:d0:00:63:a2:da:46:2c:7e:27:cd:35:3b:
9d:f5:0a:05:d4:d1:7e:34:74:b7:47:d6:97:c9:0f:05:1b:2e:
22:62:ce:e1:07:1e:a5:c4:9c:1a:c2:ae:c6:72:d2:6a:30:e1:
b9:f8:85:54:99:11:b2:a0:44:41:1c:9c:82:60:8b:b8:5c:ec:
b1:aa:e5:cc:5e:41:c6:a3:eb:6c:1a:34:de:cb:ff:30:38:88:
98:70:98:42:c6:07:26:32:65:9a:6d:36:68:c0:e4:af:f6:1e:
5e:76:c1:5d:fb:6e:8b:f6:a1:14:bd:77:2e:5a:47:2d:72:44:
54:a5:78:bc:27:a2:7b:5d:82:d4:8c:9e:c3:8c:65:f5:d1:e8:
4a:f1:74:fc:64:4b:3c:8b:54:98:8a:0a:f9:f9:58:b5:25:8d:
82:e9:f2:ab:4a:e5:c7:7e:2d:12:fb:d5:cf:9f:f9:b9:cd:25:
06:c4:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:29 2026 by rpki-client