
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier: 8MW/Ha20e+nQKcYNF9yxIzOgeTTn0D06J/dJRQ+Z84U=
Subject key identifier: EB:DA:D3:D9:75:48:99:78:1A:77:C9:00:A8:FB:EB:7F:5A:A0:23:4E
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number: 020B
Signing time: Mon 27 Jul 2026 04:50:22 +0000
Manifest this update: Mon 27 Jul 2026 04:50:21 +0000
Manifest next update: Mon 03 Aug 2026 04:50:21 +0000
Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: cqQmYTb3IxkfwrDe44QqkKc8c3n8HoAMTIhcGWhI428=)
2: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: 24csX/QK3Rfd0VNE+KVxc4JCo6pG7QuAjIc0XCJ9N5M=)
3: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=)
4: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: V73rrflKLTiVNK5j3ada2jgTwgOJk55X18oFDRCNd5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jul 27 04:50:21 2026 GMT
Not After : Aug 3 04:50:21 2026 GMT
Subject: CN=6a66e38e-c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:48:74:28:d4:0b:a9:5f:b2:af:1a:da:50:
ab:d3:e5:c0:ad:ff:46:e0:fe:db:b4:71:ab:c4:cb:
23:6e:2b:9a:3f:91:ec:01:d3:48:5b:8e:f5:03:0e:
72:ae:20:20:c8:7d:92:4d:54:f4:6e:12:11:ac:d3:
8a:7b:7a:32:d0:8e:e0:47:36:9c:83:f6:09:fe:e4:
6c:55:eb:1f:12:77:73:18:68:17:cf:2a:bd:7a:c8:
d6:7c:a8:72:11:9d:34:62:13:42:7a:50:8f:e5:3c:
3c:b0:d5:b3:92:e1:ac:ed:93:fc:51:84:2a:20:5c:
af:24:1d:c6:3a:02:6e:7d:9f:cd:13:80:28:08:40:
1b:da:32:f6:14:36:7d:be:36:6d:bb:5f:5c:99:b8:
77:d6:15:b7:95:aa:7b:5b:e4:e5:b0:39:b3:22:9b:
3c:e6:c9:9d:2d:62:88:6f:38:05:b0:c8:77:50:26:
69:a5:dc:ab:10:38:6c:28:58:60:5a:3a:60:8b:6b:
82:2f:79:22:27:0c:de:e6:9f:40:4e:aa:76:0e:27:
4c:d6:78:7d:6c:61:36:fb:82:39:97:bb:52:21:c9:
c8:e7:7d:75:d5:f5:d4:d5:f8:cf:94:f6:4a:16:82:
72:67:2f:bc:bd:47:18:db:77:09:6f:4c:33:f8:5f:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:D3:D9:75:48:99:78:1A:77:C9:00:A8:FB:EB:7F:5A:A0:23:4E
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:3c:48:91:2b:da:77:f4:68:0e:0d:51:83:6a:04:6e:f2:
c8:69:a8:58:df:6b:b3:81:5b:89:0a:59:55:27:be:3c:49:be:
48:4a:d2:66:cd:a2:28:8e:ff:78:1e:1b:14:ff:64:a4:d3:f4:
8f:49:04:fd:01:cd:bc:3d:1a:37:93:01:10:9b:e4:c7:ed:04:
05:c7:ba:e8:8b:7c:32:0f:c5:3d:1c:26:05:16:4a:09:10:41:
3e:98:1e:5a:54:d6:1b:40:4e:bf:7c:38:1c:62:f3:06:e5:39:
c2:20:c1:45:ef:12:d5:27:08:9f:ea:0b:07:fe:20:2a:f8:7d:
e5:37:30:bc:f5:74:dc:ec:94:a3:c8:ef:75:16:d3:53:2a:36:
4d:f2:03:8e:86:20:c0:e3:07:84:61:05:d8:dd:ba:e1:3f:75:
84:9c:61:15:b7:2a:7e:8d:32:64:66:e2:8a:f0:12:0c:ea:23:
35:a3:f0:86:70:3f:9a:ee:81:99:39:7f:ae:d4:eb:81:db:d5:
94:11:a4:f2:4d:32:2d:1c:7e:1d:41:91:77:09:b8:fe:e4:a5:
91:15:0b:31:cf:b3:e2:99:99:b9:ab:16:e8:f9:03:0a:7f:5f:
d7:79:29:79:44:cf:b5:fa:a9:5e:63:48:94:55:fd:0b:94:0d:
8c:14:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:48 2026 by rpki-client