
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json)
Hash identifier: j8zc9lfkU2MlJPU/4Id3iHdwSDMl7dudI/u1edC5QOQ=
Subject key identifier: CC:85:0D:56:0D:1E:80:3F:DA:33:3C:F5:FF:37:24:4E:84:AB:11:89
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
Manifest number: DE
Signing time: Fri 17 Apr 2026 06:19:57 +0000
Manifest this update: Fri 17 Apr 2026 06:19:56 +0000
Manifest next update: Fri 24 Apr 2026 06:19:56 +0000
Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: yH4o7WCeJ18aHeErGeyaPA9EJeIcHwm/CCa/AvuyM4Q=)
2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: RfHLlcRz+bkkiNXL85ejvAqK1QMc4Bz6mAhB2a1qIb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Validity
Not Before: Apr 17 06:19:56 2026 GMT
Not After : Apr 24 06:19:56 2026 GMT
Subject: CN=69e1d10c-bb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:f2:b2:30:0b:3c:b5:5c:b1:1d:ab:2f:8e:
b3:47:cb:fb:72:5d:70:7f:49:e9:b2:94:52:57:5e:
fa:2d:c9:ba:1a:76:38:5d:0b:ea:ab:a6:4b:62:dd:
5d:3d:81:4b:e6:a0:7b:ac:4f:f8:35:0c:bf:5c:2d:
22:c6:6e:a5:e4:0e:33:21:0e:a8:ca:14:03:42:80:
75:43:59:95:bc:c1:5f:ba:a4:38:3a:c1:db:4c:e4:
b3:14:a4:e7:de:2e:95:d9:2e:7d:b1:7f:94:01:da:
db:1e:3d:7e:fa:1c:33:67:4f:18:6b:ac:f6:89:4f:
51:4f:be:6b:47:68:7f:80:2c:b3:91:a6:c4:53:e0:
80:f5:42:41:62:a5:4e:83:1c:ff:20:3b:01:5d:22:
50:80:6e:90:af:36:97:05:80:09:e4:b1:95:49:3a:
b2:d8:7f:05:c1:59:ad:86:24:f3:37:11:0e:45:02:
25:18:40:fd:a9:02:3d:cc:16:7b:37:89:90:f1:ad:
95:4f:3a:ac:77:f9:b0:9f:68:35:33:33:de:a8:e3:
e7:eb:8f:e1:46:ca:4e:2c:1a:78:d7:0f:33:80:b3:
fd:18:24:1f:7d:ba:34:41:df:a4:18:f8:a7:37:0e:
d1:dd:41:07:2a:15:3b:03:60:2d:1f:50:0e:3e:cf:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:85:0D:56:0D:1E:80:3F:DA:33:3C:F5:FF:37:24:4E:84:AB:11:89
X509v3 Authority Key Identifier:
keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:26:ad:1f:9f:c9:a9:c6:89:9c:d2:fa:12:0a:de:eb:64:
38:c9:d2:28:3d:c5:64:c8:9e:58:8e:a1:97:e9:27:7e:b2:63:
4a:9f:1e:72:b2:52:b4:d9:31:0a:4f:f2:50:b5:68:38:5a:fd:
5c:da:60:9c:43:ff:5a:92:af:eb:5d:03:04:39:f6:62:96:da:
2c:88:87:88:40:ac:98:dc:93:cf:40:97:31:03:3e:37:67:8f:
39:8f:83:87:82:53:a9:33:77:9f:0d:bf:11:e3:97:68:05:6e:
c0:53:80:0c:27:90:0b:87:d4:02:7e:ca:27:dc:31:01:2f:7e:
ba:39:4b:d1:fa:5c:d2:b9:96:1c:cd:1a:3c:dd:f9:21:a5:9a:
04:5a:1c:51:cf:03:b1:28:5b:86:3f:40:8a:0e:e9:6a:73:d3:
6f:bb:02:3a:bf:a5:b7:45:77:7a:e1:4f:fd:86:96:2d:0e:72:
75:72:01:71:4a:c8:a8:72:a9:39:37:1e:f7:42:a3:40:64:53:
7f:b2:3e:f3:48:4f:0d:a4:73:1c:89:d6:25:6f:4e:ec:4a:b0:
b8:36:8a:df:e0:11:f9:4c:36:69:0c:92:1f:63:f6:0c:eb:d9:
52:c8:c3:59:36:cf:b6:c6:84:c2:95:ec:34:2d:65:2b:09:33:
1d:69:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:57 2026 by rpki-client