
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier: 6loO1dkfjr+WT9+DRVWkgyqn1UA3Kxe0y4LxpRFxLmc=
Subject key identifier: BE:22:C6:F4:EA:73:5A:E6:5E:60:6B:3F:EC:0C:62:9B:82:DE:C5:99
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 069B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number: 084C
Signing time: Sun 01 Mar 2026 23:39:08 +0000
Manifest this update: Sun 01 Mar 2026 23:39:05 +0000
Manifest next update: Sun 08 Mar 2026 23:39:05 +0000
Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: gV//V3avA1SSWj9JispJ71KzQByVpJm+SkudaWQqCRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Mar 1 23:39:05 2026 GMT
Not After : Mar 8 23:39:05 2026 GMT
Subject: CN=69a4ce1b-1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:6d:63:90:0f:a2:3a:19:f3:cb:23:5c:25:
40:07:e3:13:8b:17:52:de:16:30:ff:2b:22:dd:c4:
d4:e3:ff:42:e2:00:23:7a:64:66:b8:f7:8c:93:d3:
13:5c:af:5a:bb:2a:1b:b5:dc:d2:92:44:48:60:f1:
ed:42:66:04:7a:37:7a:58:95:f7:e5:96:00:43:d2:
ee:4b:f2:6d:36:c0:fb:30:7b:75:c5:d0:98:1c:1d:
30:19:55:8d:9b:cd:51:21:3a:b1:19:68:6a:33:93:
03:52:89:62:a8:c0:d6:3d:3e:81:27:52:70:60:2d:
f9:ba:b0:a9:dc:42:a5:e6:b1:2e:e3:89:a6:3d:94:
79:7a:93:17:3b:58:f3:26:40:90:a6:09:60:1b:b0:
a9:54:1c:b6:22:b2:f1:f1:2e:6b:c2:ae:21:06:a2:
39:46:19:2e:eb:b6:a7:23:95:15:96:ed:ec:89:0b:
d8:c4:a4:f7:c6:97:a0:a0:52:b7:5c:19:c3:c5:5b:
b3:22:2c:5f:b9:44:65:8c:db:c1:c5:93:bc:f9:1a:
56:1b:3c:f9:bd:3a:ca:06:9d:b8:a6:4a:ab:74:eb:
8b:f1:9f:9d:9e:9a:95:a8:fa:7a:ba:aa:63:5c:3d:
8a:42:09:f9:ed:74:15:32:0b:d6:72:a8:b6:84:f3:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:C6:F4:EA:73:5A:E6:5E:60:6B:3F:EC:0C:62:9B:82:DE:C5:99
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c0:d1:3a:4e:ec:11:ba:28:10:d9:43:5c:2f:99:e6:40:f5:
94:2e:ea:7e:b6:46:81:82:18:cb:35:17:e3:da:b7:35:69:da:
59:03:03:bf:14:55:b3:8d:53:57:15:e1:13:1d:52:f7:fc:98:
57:58:87:1a:c2:e2:e2:a1:2a:4c:45:e0:db:81:30:1e:53:6f:
88:69:de:2f:90:bd:d9:b5:4c:01:9c:5d:ac:00:fb:62:b6:93:
ef:78:76:66:7a:80:4d:c5:96:e6:97:db:70:0e:70:50:83:97:
7c:58:98:c7:ff:86:aa:e5:e6:e5:69:7e:0d:93:18:ef:98:3a:
fd:bc:45:0f:f5:56:2b:ba:d5:16:f2:04:2c:28:32:bf:98:4d:
6b:2b:29:ed:f4:92:bd:84:bd:2f:52:cf:fc:45:8d:2b:60:7e:
33:c9:d8:47:1c:69:dc:78:9e:61:7b:cd:91:a0:6d:bf:56:bb:
0f:76:ca:9f:4b:f5:9f:8b:a4:35:09:14:3f:4b:81:9c:ee:8a:
56:af:76:51:a1:dc:62:67:12:9e:98:bd:18:c5:86:4c:6a:54:
ef:bd:91:88:fe:73:60:cf:eb:84:9f:53:e0:dd:51:36:61:71:
8f:e7:8a:04:02:9a:57:96:33:1e:5d:28:08:cc:76:6e:2d:d9:
07:cc:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:46 2026 by rpki-client