
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: x+yV9rthzlXAriJmgZbC66M8C14ldehBe/Ib/WuXi4g=
Subject key identifier: 3E:86:EA:35:51:E1:20:F5:BE:05:FE:08:93:E0:49:70:F1:2D:0A:AF
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 07EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 07E0
Signing time: Thu 24 Sep 2026 21:14:02 +0000
Manifest this update: Thu 24 Sep 2026 21:14:02 +0000
Manifest next update: Thu 01 Oct 2026 21:14:02 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Hb/uqWpwjvKmUseEYgSCBQ4cgffS9Rgn9LsFBO6lQfE=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 9CgW3feWo669bB+n336/YLIKgQZBrzljXQlC++9jPh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Sep 24 21:14:02 2026 GMT
Not After : Oct 1 21:14:02 2026 GMT
Subject: CN=6ab5929a-d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:4f:99:32:c9:ab:7e:15:1d:88:e2:19:17:
c7:f0:ab:be:e9:b8:22:77:1a:19:da:13:60:13:c2:
f7:dd:e0:29:e0:56:55:c5:5b:be:9d:a9:78:48:fb:
ca:19:70:11:a3:88:6a:7c:95:31:17:9b:61:27:00:
90:2c:1a:75:c6:2a:44:a0:49:64:57:16:e8:b9:37:
bd:4e:26:bd:49:30:24:cb:8c:c1:5b:06:80:d6:25:
87:4b:57:a4:19:cc:ad:05:62:55:b0:96:f9:e4:32:
f0:6a:1e:74:d2:0f:d3:53:4a:f0:98:03:c2:13:87:
5c:18:d3:4b:d4:7a:fa:7e:90:96:bb:17:82:d1:bd:
55:fa:00:b7:d8:65:79:db:a4:81:2d:d3:3b:5f:d3:
bf:93:08:7b:70:94:3e:51:ba:43:b2:28:a5:79:36:
1a:bb:3e:ab:be:f6:09:a1:b8:ba:9e:55:15:2e:79:
cf:38:8e:c0:38:e1:5c:08:88:4f:14:ba:88:5e:5b:
81:bd:84:c1:bd:30:5b:00:e8:18:f6:7b:24:ec:8d:
9a:2f:d4:99:94:6a:cd:09:c5:24:32:7a:77:91:40:
a1:59:c0:0b:0d:5d:43:a5:50:b4:72:ee:e7:92:16:
93:96:de:3b:c7:99:bf:88:6a:21:08:6e:38:0f:af:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:EA:35:51:E1:20:F5:BE:05:FE:08:93:E0:49:70:F1:2D:0A:AF
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:05:56:1f:d1:de:1c:86:8a:e0:fb:6a:31:68:b8:0c:17:
b5:4b:43:94:30:be:be:90:fc:c2:97:76:61:1c:0d:c3:7a:5e:
c7:33:0f:9a:55:de:d1:06:e2:a8:af:3f:53:be:56:9c:8a:7c:
02:d6:73:30:d8:1e:f6:08:75:fd:bb:a4:67:4e:76:fe:13:e3:
a1:dc:46:91:e7:d6:f6:4e:9a:4b:2e:d6:67:13:7b:94:3b:12:
07:f7:1a:f7:da:21:83:85:7e:e0:8f:90:a7:46:22:80:77:2a:
b0:0e:8a:41:a2:af:5a:27:89:18:3c:5b:e5:44:f0:3c:32:09:
46:c4:57:8a:92:b2:5e:1a:3e:dd:72:92:42:97:84:5b:39:9a:
5c:35:75:76:40:23:da:e2:88:44:05:de:e1:14:13:de:e5:5f:
0d:86:82:82:67:8c:a7:54:54:89:63:df:a7:9a:7a:77:c4:0a:
01:a6:20:19:8c:1c:60:e8:0e:d2:01:14:45:80:ba:31:0d:88:
f1:9b:9e:d1:a9:58:11:7d:5b:f0:2e:35:ff:e1:7e:58:01:15:
a4:b4:3d:d2:72:84:f5:44:25:c9:21:c5:51:67:ab:03:0f:c6:
64:4d:41:ca:6a:f8:5e:f5:1f:c3:7b:a8:5a:5b:dc:14:fb:97:
88:05:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:18 2026 by rpki-client