
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File: AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier: WEZaE0waou6Kxyk4Dq8Th2OBkHcLKbSKF7vK7+MdmFI=
Subject key identifier: 9E:06:92:50:A9:48:24:A0:E9:D7:26:21:7F:A0:9D:CB:17:AB:BD:14
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial: 02E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number: 02DF
Signing time: Mon 27 Jul 2026 02:26:49 +0000
Manifest this update: Mon 27 Jul 2026 02:26:48 +0000
Manifest next update: Mon 03 Aug 2026 02:26:48 +0000
Files and hashes: 1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: JOmGzcrA3UKvmjPbhn51ItydGY/OIYi2ofBwrtXnDek=)
2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: akPAZSOa93x2Wngs9MzKkfgLP+esBNNQavCi79ZhFO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Validity
Not Before: Jul 27 02:26:48 2026 GMT
Not After : Aug 3 02:26:48 2026 GMT
Subject: CN=6a66c1e8-3329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:95:59:44:5e:ad:66:9e:0f:ea:43:1b:18:
6e:bf:31:32:fa:b6:c7:86:7b:7f:45:9f:9a:ad:00:
75:b5:0f:19:99:30:e5:70:58:6d:ee:54:0c:42:3e:
ab:95:3f:80:90:04:8e:4b:c4:a5:a7:f1:81:e6:27:
37:e0:69:ce:ab:aa:22:71:3c:c6:dc:70:9a:80:e3:
3c:c8:1b:af:fc:2e:36:4b:7f:e6:c0:6c:8f:a2:72:
62:c3:d9:7a:3d:73:08:a9:d5:db:4b:98:c6:20:28:
1b:dd:09:ed:50:55:47:c0:74:1b:47:87:d4:6f:e7:
8d:9b:13:7b:2e:0b:40:3c:ed:04:8e:43:60:02:ad:
9e:49:a9:c0:41:c6:f1:15:41:81:40:e1:ba:83:00:
7d:62:3d:b3:c2:99:0c:0e:18:04:2c:03:50:22:60:
48:f8:28:ea:cc:e8:fc:61:b7:8c:47:c8:10:32:80:
2a:da:68:a3:49:95:a8:c4:01:35:e9:9b:7d:f0:58:
31:51:14:ab:af:80:bf:3c:56:0f:81:5a:53:65:3f:
aa:b7:bf:34:fa:32:62:31:54:13:32:87:24:36:ea:
67:df:f0:08:1d:b5:af:0b:02:f2:9f:b7:e8:b9:e4:
43:cd:0b:c2:51:5c:dd:b3:8b:eb:0c:22:9d:69:f0:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:92:50:A9:48:24:A0:E9:D7:26:21:7F:A0:9D:CB:17:AB:BD:14
X509v3 Authority Key Identifier:
keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:fa:78:8d:b3:70:81:47:a9:8f:fd:b5:c7:9f:9a:71:e8:0c:
ee:a3:6c:56:35:2d:37:ea:f8:16:16:27:bb:fe:e6:42:13:b1:
19:cf:10:e6:45:da:3c:7d:ae:12:95:57:99:48:57:00:98:6a:
d2:12:72:05:cc:ac:2b:9f:fa:85:a0:02:48:55:73:a3:c7:3d:
f1:e3:5d:dd:8f:1c:06:24:ed:03:39:3c:57:e5:9f:10:fa:bc:
c9:05:a7:13:71:26:9f:23:d2:8c:78:a2:0b:a8:70:81:e7:fb:
cc:c1:f2:09:cf:3f:1f:13:f7:f7:c1:f6:d3:68:5f:f7:5b:36:
73:11:cc:81:15:43:11:7b:81:1a:d6:7c:9a:b6:7c:75:9e:ac:
a7:fe:49:b4:62:63:c5:69:3f:88:cd:cf:b0:29:b9:c8:4b:fa:
06:36:5e:9e:4c:a2:7b:f5:5e:51:79:f0:32:e9:91:64:93:51:
90:8e:25:fe:c3:03:3c:73:78:c4:55:4e:dc:90:b2:25:94:7c:
50:68:ad:cd:61:ad:ae:d7:dd:80:15:de:16:79:34:0f:29:e7:
d8:26:36:ef:0e:13:61:76:b0:a8:9c:10:32:7e:42:9c:04:0e:
17:01:be:25:e8:a5:51:f6:15:63:32:e8:0c:b8:0d:cb:30:99:
14:85:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:27 2026 by rpki-client