
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier: AEa0krc5Hogi1FgVlozu4s0tbuGKXU1sVfEbxAVpZVQ=
Subject key identifier: 7F:05:1C:19:58:12:DE:6E:3B:85:3D:92:FE:36:1A:53:88:BD:EB:9D
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0D61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number: 0D39
Signing time: Sat 28 Feb 2026 18:13:21 +0000
Manifest this update: Sat 28 Feb 2026 18:13:21 +0000
Manifest next update: Sat 07 Mar 2026 18:13:21 +0000
Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: FzLyApMlE68NF5RpbOLZczKAVpsPGIXDNsmNqLESIY4=)
2: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=)
3: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=)
4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Feb 28 18:13:21 2026 GMT
Not After : Mar 7 18:13:21 2026 GMT
Subject: CN=69a33041-c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:60:07:fb:72:1e:c3:a5:ff:a3:75:6b:f4:
99:34:9e:eb:ed:41:e2:b9:5b:bf:65:9e:42:29:30:
91:79:b4:65:d0:5d:b6:fd:c6:c6:87:4b:d0:85:60:
7a:cc:ee:ae:d8:e6:54:53:64:c4:f1:c2:34:1d:9e:
6e:6b:a1:73:ac:be:dd:6a:71:ba:71:37:e4:66:55:
8d:32:38:48:46:f2:97:dd:e7:f9:4b:ba:19:9d:25:
68:30:c8:de:e9:bf:48:46:51:5b:c7:5e:26:e1:f3:
06:2b:42:d1:ed:25:36:07:8a:4f:d9:fa:e5:4e:14:
a6:5e:75:10:43:22:30:c0:20:3f:25:13:ee:74:18:
ac:9d:58:44:da:08:9e:49:2e:b9:38:34:42:fc:4f:
62:e7:77:12:19:68:69:8d:eb:bf:f2:6a:f5:cf:6c:
aa:2f:04:24:24:5d:53:15:9c:fb:d5:0d:33:d7:7e:
e5:40:9e:bd:98:bb:fd:12:86:6c:bb:86:e4:f2:17:
8c:2e:4f:dd:bc:b9:df:c6:f1:c2:42:34:ca:51:e4:
2c:37:e8:4b:d3:44:34:43:08:82:36:22:71:fc:90:
a7:9b:43:d5:5a:4a:a8:32:3e:f5:e8:bc:0b:11:5e:
b5:9c:47:eb:83:81:4a:b7:7d:10:1c:15:30:af:32:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:1C:19:58:12:DE:6E:3B:85:3D:92:FE:36:1A:53:88:BD:EB:9D
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c0:6b:1a:b8:67:e3:33:45:08:11:ac:9d:da:6e:d7:6b:db:
c7:15:3c:2d:67:6a:77:1d:f8:07:43:82:cb:d3:2c:ed:12:d5:
90:0e:4c:d6:3a:75:ee:ae:3d:1f:8b:b6:fc:fa:1e:09:e4:d7:
f9:40:46:7e:ed:51:93:02:b0:6b:9c:a2:28:f7:f4:41:79:49:
94:d5:19:25:47:59:fc:ff:d5:3a:59:e1:45:66:86:d1:8d:ef:
a6:f3:b3:04:6e:8e:85:f9:57:eb:14:01:dd:b9:aa:ce:2c:85:
c2:3c:89:43:0b:c1:6b:4d:77:42:05:81:65:89:fa:e1:94:b4:
9d:ea:fb:49:26:3c:27:7b:dc:55:05:8a:b2:09:3b:ef:4c:14:
61:e5:84:04:03:c3:85:1e:88:ff:31:06:ce:fc:0d:14:6a:21:
65:4e:87:04:fd:7f:91:81:7e:14:f7:2b:86:2f:a3:f5:48:d1:
5c:c6:06:4a:a9:b5:ab:75:07:aa:7a:e2:6a:c7:fe:9c:91:79:
55:99:bd:c3:4c:b4:53:29:2c:dd:95:96:5c:51:e4:81:80:55:
d3:b9:ef:2e:fe:c1:44:67:c9:b3:10:3b:fe:97:01:2b:7d:7d:
fe:6b:6d:57:5f:f3:e8:92:f7:60:8e:24:03:51:8f:f6:df:ea:
12:bf:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:32 2026 by rpki-client