
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File: AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier: kB/DgZfg1BdqKFOH3fxP8qz0ep0LvHHzr7eqGNIWd2A=
Subject key identifier: 53:B3:BE:DB:47:90:3A:97:67:4B:65:C2:F0:73:36:0D:BA:FC:2E:4D
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial: 24D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number: 249E
Signing time: Sat 10 Oct 2026 15:46:31 +0000
Manifest this update: Sat 10 Oct 2026 15:46:30 +0000
Manifest next update: Sat 17 Oct 2026 15:46:30 +0000
Files and hashes: 1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: XC1LSv9pxM4gnONNJmEMwj1EPtxRerYg5+JVLPnX3+I=)
2: EDC8B49086EE11F19E006003A7EE528E.roa (hash: h+jWpQU5RPeD0V9iWjQpKIX46qoIpgt7mOA43N2WPl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9425 (0x24d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Validity
Not Before: Oct 10 15:46:30 2026 GMT
Not After : Oct 17 15:46:30 2026 GMT
Subject: CN=6aca5dd7-1edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:63:75:73:50:ca:5e:21:73:4c:1b:88:75:
ba:3a:2d:c7:25:f8:54:a0:cf:24:62:3b:48:15:56:
d5:6b:c0:2c:19:41:63:bc:b7:23:2d:c7:2a:d8:e5:
c4:95:86:b8:5a:a4:83:de:be:3f:cc:96:41:ca:0d:
06:09:84:f4:63:96:e3:11:df:53:e2:f4:1c:88:e6:
48:b1:74:d6:e6:50:7c:a5:8f:32:5b:26:7f:66:78:
a1:87:08:c8:1e:f0:86:3e:2f:40:fe:64:00:a0:66:
f5:8f:d0:4f:0e:60:90:29:90:fb:3b:35:fd:d3:03:
1b:03:f1:89:a7:5e:2d:29:4c:6d:cc:f0:79:92:08:
b7:6d:c8:b1:ba:79:65:e3:84:1f:0f:91:41:92:d5:
56:9e:6e:61:f4:60:2b:b8:d6:4a:ac:7e:91:df:ed:
16:1a:c4:ea:c5:4d:2f:f9:39:1f:cc:98:0d:92:a3:
fb:16:46:9a:9b:40:fe:79:c5:9e:fe:4b:b2:11:bd:
e2:cd:55:2b:53:bd:aa:f6:bd:f0:ce:aa:61:13:92:
52:18:a0:dc:4d:92:15:db:d7:49:87:4a:ba:ae:5c:
d9:45:8b:01:96:fd:ac:03:f8:21:69:51:3a:87:bb:
b7:15:e6:b8:cf:60:db:31:cb:12:d6:48:e7:18:a2:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:BE:DB:47:90:3A:97:67:4B:65:C2:F0:73:36:0D:BA:FC:2E:4D
X509v3 Authority Key Identifier:
keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:3f:6d:92:79:f1:7e:12:7f:83:2d:86:7d:65:35:1e:30:
71:f1:f1:57:8c:92:ea:83:ef:f5:f0:0f:7d:b6:e8:c5:3d:c7:
35:da:4c:82:c8:ed:30:bf:5c:8c:fd:70:34:71:c8:74:2a:9b:
d1:17:86:78:96:8c:71:cd:4f:43:74:9c:2c:92:7b:c2:b4:36:
9e:89:7e:ee:af:99:4c:b6:ec:4c:63:43:e5:a5:ad:c5:17:6c:
f0:82:af:3a:cd:da:ea:b3:f4:e4:ca:bc:a5:c0:a6:66:cb:7b:
4b:f0:b0:de:ba:f5:a8:77:da:9f:c4:8d:ae:7e:dc:9b:62:a1:
cf:de:6f:06:f5:7e:19:6e:0c:f8:15:29:f6:c9:d2:6a:ed:d2:
30:fb:e1:4b:0a:91:c0:5f:9f:83:68:10:71:f7:4f:eb:01:35:
4c:3c:a2:a0:22:1c:97:4a:7b:a3:ba:de:2a:74:da:7c:a9:d3:
47:04:db:d4:8e:22:b3:7f:1f:21:5d:25:54:6f:d5:ac:c1:94:
36:81:05:37:71:77:b8:8c:0c:36:c0:82:f5:7b:89:13:a4:79:
b7:8a:35:23:06:86:9f:be:a2:51:dd:c2:09:cb:41:af:51:e0:
c2:5f:37:3d:09:41:9b:f3:f2:00:e6:c1:2f:2d:c9:22:02:67:
68:d9:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:18:44 2026 by rpki-client