
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier: slAhnI+/iWqYTWyjUgMCgf9NnU7ZoqQ4JCISHsaieIo=
Subject key identifier: 9C:FB:20:5D:DB:B1:52:DB:22:69:29:04:08:D0:3A:FA:16:10:AD:39
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 01:29:04 +0000
Manifest this update: Mon 02 Mar 2026 01:29:02 +0000
Manifest next update: Mon 09 Mar 2026 01:29:02 +0000
Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: /XqKjZGBfLgM4hoddZtd5cKZAbJxAPOYS4V2VGmtCW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Validity
Not Before: Mar 2 01:29:02 2026 GMT
Not After : Mar 9 01:29:02 2026 GMT
Subject: CN=69a4e7df-0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:ee:2a:f1:10:a0:83:90:74:83:1e:27:25:
2f:75:93:7f:9b:45:9d:9d:2a:eb:81:b6:08:f0:74:
b3:53:b5:ff:7e:7e:90:26:41:22:29:51:8a:c2:d5:
bb:8b:8d:40:30:23:93:28:93:79:91:49:33:1c:9e:
dc:c3:cd:06:61:2f:df:72:e7:1c:65:22:6b:b2:b0:
94:93:27:f0:36:b6:7a:b9:40:f7:12:ba:da:d8:d7:
ce:06:45:d7:7c:3a:40:ff:d4:31:49:f2:2b:e8:65:
86:8a:a3:c7:7e:54:24:d6:98:fa:0d:59:02:a7:87:
a5:de:a8:ea:85:05:4f:9a:f9:a6:d4:dd:f6:8d:f2:
a0:9c:4f:b5:28:a3:9a:f9:1b:dd:52:70:62:fa:cf:
ef:48:ed:4e:db:69:0a:a1:19:44:ea:71:15:4e:5b:
a2:06:15:e1:7c:e9:26:f7:53:4a:de:5f:e7:49:92:
dd:b0:59:2d:23:fb:39:20:0d:e4:52:63:58:00:aa:
57:72:8d:7e:a9:cb:1d:23:82:87:73:27:db:64:89:
d5:56:04:9b:82:99:71:99:5d:42:d6:e7:28:65:15:
43:ec:2a:f1:8c:31:cd:c0:2b:ea:dd:e0:9f:0d:b7:
14:00:49:51:e7:a0:be:c6:f4:30:38:2c:d2:43:1a:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:20:5D:DB:B1:52:DB:22:69:29:04:08:D0:3A:FA:16:10:AD:39
X509v3 Authority Key Identifier:
keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8b:3a:8c:36:99:b1:8d:a2:a4:8d:53:da:d2:02:22:8a:7b:
bc:8e:45:d4:8c:91:90:2d:1e:43:bc:57:29:a1:f0:65:7f:86:
a0:77:a3:68:fd:0b:7a:4c:b9:e1:82:41:cf:f6:6b:60:9a:68:
e9:a4:92:35:4f:c1:1e:2b:f3:fa:fc:a4:e0:b7:0f:8e:b5:01:
8b:61:a8:27:78:3d:3c:c4:95:e2:57:28:31:b5:cd:da:95:65:
05:5e:f2:a1:5b:e0:55:da:7a:af:32:42:bd:c1:1c:f4:55:d5:
c2:12:25:9d:f8:b1:48:a6:16:08:2a:3d:11:5f:d4:a6:eb:f1:
f7:bf:fe:44:4e:91:29:1f:ba:1d:3a:55:c0:53:8d:f4:be:b7:
35:75:17:8e:16:33:1b:27:48:91:90:19:68:25:02:37:69:f2:
75:56:0c:88:74:08:3f:d2:3d:f2:0e:7e:66:8b:9d:75:15:40:
10:dc:74:9b:3f:ed:8a:73:29:25:8f:91:39:d2:a2:ab:a2:63:
d6:30:0d:18:da:9d:e0:68:a1:ca:73:79:71:37:53:d8:34:02:
48:5b:41:39:8c:66:15:c4:59:1a:1b:1b:e4:59:73:67:88:af:
95:1f:6b:66:26:dc:0b:32:8c:1b:9c:dc:22:c5:ef:ee:0d:1a:
d2:df:ba:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy
QzJBM0I3NEUwHhcNMjYwMzAyMDEyOTAyWhcNMjYwMzA5MDEyOTAyWjAYMRYwFAYD
VQQDEw02OWE0ZTdkZi0wNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4pruKvEQoIOQdIMeJyUvdZN/m0WdnSrrgbYI8HSzU7X/fn6QJkEiKVGKwtW7
i41AMCOTKJN5kUkzHJ7cw80GYS/fcuccZSJrsrCUkyfwNrZ6uUD3Erra2NfOBkXX
fDpA/9QxSfIr6GWGiqPHflQk1pj6DVkCp4el3qjqhQVPmvmm1N32jfKgnE+1KKOa
+RvdUnBi+s/vSO1O22kKoRlE6nEVTluiBhXhfOkm91NK3l/nSZLdsFktI/s5IA3k
UmNYAKpXco1+qcsdI4KHcyfbZInVVgSbgplxmV1C1ucoZRVD7CrxjDHNwCvq3eCf
DbcUAElR56C+xvQwOCzSQxoS5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJz7IF3b
sVLbImkpBAjQOvoWEK05MB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD
NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo
cTZWVktFREF5ckFzS2p0MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsYs6jDaZsY2ipI1T2tICIop7vI5F1IyRkC0eQ7xXKaHwZX+GoHejaP0Leky5
4YJBz/ZrYJpo6aSSNU/BHivz+vyk4LcPjrUBi2GoJ3g9PMSV4lcoMbXN2pVlBV7y
oVvgVdp6rzJCvcEc9FXVwhIlnfixSKYWCCo9EV/Upuvx97/+RE6RKR+6HTpVwFON
9L63NXUXjhYzGydIkZAZaCUCN2nydVYMiHQIP9I98g5+ZouddRVAENx0mz/tinMp
JY+ROdKiq6Jj1jANGNqd4GihynN5cTdT2DQCSFtBOYxmFcRZGhsb5FlzZ4ivlR9r
ZibcCzKMG5zcIsXv7g0a0t+6fA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:40 2026 by rpki-client