
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: wpMs17v0p4ZevIXNoCj2UCManWH3IfHHc33KBTaQ+wQ=
Subject key identifier: 97:F7:80:51:D8:48:22:19:13:98:F8:9D:E3:52:80:B2:A0:A1:3A:82
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 0899
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 087C
Signing time: Fri 12 Jun 2026 20:51:52 +0000
Manifest this update: Fri 12 Jun 2026 20:51:52 +0000
Manifest next update: Fri 19 Jun 2026 20:51:52 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: XwDK5QOzFcb2uHdwqD0t6AES1hAfWlA8u4+ybvrWM1c=)
2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Jun 12 20:51:52 2026 GMT
Not After : Jun 19 20:51:52 2026 GMT
Subject: CN=6a2c7168-d12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:3f:a8:dd:49:ac:c3:2f:16:90:65:ac:9b:
1f:9e:f2:ce:0b:0f:99:d3:8f:01:ed:c7:70:dd:d3:
19:af:17:68:55:f2:61:d7:ca:2d:2b:18:c7:b2:94:
a6:28:30:10:64:a4:b2:e0:f9:10:57:b6:57:8c:ca:
be:cc:44:7c:61:ff:c8:2a:e4:ce:2a:08:fe:82:53:
a9:16:f3:49:fa:0a:b4:d9:26:ab:0f:14:16:9e:60:
5c:39:5f:53:d2:91:b3:b2:46:66:7d:11:e1:d1:1f:
18:36:18:80:ff:59:d2:7c:a2:73:d2:c1:e0:a7:36:
48:76:4c:cd:5c:12:b4:fc:fe:8b:e6:90:80:2c:82:
9d:e0:ab:e8:c1:75:48:28:01:a9:86:3b:05:7a:e6:
ea:41:35:ac:bc:d5:de:9b:b9:f1:42:67:a7:13:05:
26:95:4d:73:0a:ab:a2:22:88:65:43:4f:3c:bd:63:
87:23:46:47:6b:7b:84:ed:b8:03:3a:c9:01:ed:35:
cf:e8:13:89:f6:4d:2e:54:91:1a:ac:0d:b7:d7:42:
b6:e9:c8:96:3c:84:aa:3f:4f:ce:a3:dd:17:ca:26:
c9:e4:69:0b:6f:19:6a:63:84:5d:09:42:35:fb:a3:
c6:04:12:af:8d:05:88:41:f7:85:d3:33:34:a7:5d:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:80:51:D8:48:22:19:13:98:F8:9D:E3:52:80:B2:A0:A1:3A:82
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:94:43:f5:14:92:90:cf:cb:c4:dc:31:be:de:0a:b3:d7:4b:
96:e6:01:80:45:09:9f:b8:6c:38:98:c7:f6:69:2a:00:45:c8:
4f:36:d8:c1:3a:e7:34:f9:8e:12:92:96:2e:e0:34:c4:94:41:
29:3c:2a:60:da:2b:e8:18:b0:e8:8c:32:46:7a:ec:0f:b3:69:
05:fb:61:a7:3b:b2:4e:f0:c5:f4:47:51:86:f2:e6:ba:fd:f7:
11:5b:76:a8:ad:2b:d1:3d:8d:cc:31:a5:1d:0c:8c:a0:b6:66:
1f:e8:6b:04:ca:f6:7d:a5:4b:e5:46:8d:c9:e6:dd:87:52:10:
9b:94:f4:4e:aa:6b:64:84:0f:7f:9d:2e:a1:40:8d:8f:09:60:
47:df:f2:23:90:e4:de:67:d0:e5:56:d6:ff:a3:4e:3a:cc:30:
92:17:29:e9:c9:bc:41:de:d6:b0:e2:99:2a:c3:90:68:82:58:
1d:bd:e6:42:3b:c8:01:8b:9b:40:35:8f:7c:5a:92:a3:e2:7d:
f5:56:5f:93:57:dd:4d:ca:0e:1d:13:0e:8b:b5:c4:33:e8:7a:
63:03:77:47:25:14:c4:6e:4a:39:ae:3e:03:43:65:fd:e0:2e:
2a:33:4e:ec:85:35:27:af:69:eb:5a:dd:b5:95:b4:cd:98:b7:
58:07:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:41 2026 by rpki-client