
$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json)
Hash identifier: /SlGMrwiulbxs2njI4PVaVt5I1QYKQZ4MmEBqzmT+wY=
Subject key identifier: 7D:59:08:17:E7:1B:9B:5D:21:1E:8D:D2:6B:3B:D4:33:0D:CB:8D:C5
Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Certificate serial: 0549
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
Manifest number: 0534
Signing time: Thu 16 Apr 2026 23:26:56 +0000
Manifest this update: Thu 16 Apr 2026 23:26:56 +0000
Manifest next update: Thu 23 Apr 2026 23:26:56 +0000
Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: s/8My9qbovo9K8+uSMd7M24eFYLmX3c8td62Lwudlo4=)
2: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: 7U90fAJm9Jprxru+K/b/WXWkFIPppoovbosNTZikpMg=)
3: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: tETiEeczeTi6RVos7PRLZrM1yj4bO0TaBc4BLbzROio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Validity
Not Before: Apr 16 23:26:56 2026 GMT
Not After : Apr 23 23:26:56 2026 GMT
Subject: CN=69e17040-99f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c3:7e:2d:f1:29:15:89:a9:78:14:80:89:49:
6a:4f:6e:20:81:16:c5:a9:7f:4a:05:5a:2c:e6:82:
c8:0f:e0:3b:3f:3c:60:bf:39:94:07:b2:0b:ac:b7:
60:ca:ea:2e:79:a8:b5:16:c1:91:b4:aa:ee:10:c0:
96:4a:a8:0d:f4:8b:2b:11:68:08:41:d7:49:91:b6:
ee:d2:38:ef:6e:ef:ec:1f:39:92:8a:01:fe:13:ab:
3f:bc:19:fa:0f:0d:10:3e:52:05:d3:90:4d:51:2b:
27:d8:13:ad:16:44:52:a3:50:23:2d:e8:3a:64:df:
8c:7f:f7:bf:3a:f2:49:c6:dc:b5:88:9c:1a:1e:95:
3a:2e:f7:4c:7d:5c:92:ef:d4:f2:dd:9a:a1:8a:f0:
0f:a9:18:cb:ce:92:0a:cf:1b:16:a2:2e:ff:8a:0b:
cf:48:79:c8:90:db:e9:40:6b:f8:76:28:a1:b2:d7:
50:56:6b:2a:8a:06:f1:e1:fb:8d:81:30:bf:eb:a2:
b4:48:2d:9a:15:f1:53:af:f3:b9:9e:8e:65:90:b0:
2c:d1:db:04:30:34:cd:10:e4:0c:2c:72:01:cb:7d:
d3:ae:ca:ba:3b:a7:fa:97:10:e4:1b:49:3b:36:1f:
16:c1:83:51:64:b5:17:56:cf:cc:04:82:15:ec:b7:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:08:17:E7:1B:9B:5D:21:1E:8D:D2:6B:3B:D4:33:0D:CB:8D:C5
X509v3 Authority Key Identifier:
keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:ae:27:93:e0:07:48:f4:df:d8:a1:36:b9:52:60:ae:2a:
c8:b6:47:71:cf:0f:08:d8:f5:b4:69:65:d7:c2:f3:df:0c:36:
7f:44:c5:3c:b7:9b:86:13:6e:be:40:ce:ae:b5:ce:c2:ba:dd:
a8:b9:9e:19:76:da:d6:00:3b:5c:65:ae:a7:71:80:39:da:88:
75:85:0a:9e:b9:38:31:36:6a:43:95:ba:01:07:20:aa:f1:c0:
e2:fb:17:11:a2:f5:15:63:e6:8f:66:81:1c:c1:ce:82:14:25:
cd:d7:8f:12:ad:ab:1d:1a:d4:e5:69:55:02:30:ba:72:00:2a:
5e:4d:74:91:48:25:79:44:dc:eb:14:00:da:01:c0:ba:e4:40:
33:d1:37:12:7c:69:4d:e9:22:81:d4:96:eb:99:a0:40:53:e9:
d9:1e:58:37:e0:9c:20:65:ae:39:ba:3a:bf:dd:60:b5:80:c0:
16:0e:05:44:de:fa:dc:d4:38:11:21:48:f3:ac:8d:78:5c:ce:
cb:5d:e2:f8:3a:24:4d:5c:67:f2:08:12:37:10:04:83:0f:94:
9c:77:43:c7:bf:65:47:ed:9f:60:76:db:67:27:c7:32:72:ae:
08:57:4d:cf:b6:d6:75:3a:de:a3:a0:b5:7f:8f:3a:97:81:30:
88:81:33:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMwMzA0QkI0MUE5
NkZCOUE3NkYwHhcNMjYwNDE2MjMyNjU2WhcNMjYwNDIzMjMyNjU2WjAYMRYwFAYD
VQQDEw02OWUxNzA0MC05OWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA98N+LfEpFYmpeBSAiUlqT24ggRbFqX9KBVos5oLID+A7PzxgvzmUB7ILrLdg
yuoueai1FsGRtKruEMCWSqgN9IsrEWgIQddJkbbu0jjvbu/sHzmSigH+E6s/vBn6
Dw0QPlIF05BNUSsn2BOtFkRSo1AjLeg6ZN+Mf/e/OvJJxty1iJwaHpU6LvdMfVyS
79Ty3ZqhivAPqRjLzpIKzxsWoi7/igvPSHnIkNvpQGv4diihstdQVmsqigbx4fuN
gTC/66K0SC2aFfFTr/O5no5lkLAs0dsEMDTNEOQMLHIBy33Trsq6O6f6lxDkG0k7
Nh8WwYNRZLUXVs/MBIIV7LccTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1ZCBfn
G5tdIR6N0ms71DMNy43FMB8GA1UdIwQYMBaAFGhRGYH8udr62OPTAwS7Qalvuadv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTk2RC82MjAyQUEzRTQx
MTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2clk0OU1EQkx0QnFXLTVw
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGRVpnZnk1MnZyWTQ5TURCTHRCcVctNXAyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTk2RC82MjAyQUEzRTQxMTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2
clk0OU1EQkx0QnFXLTVwMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACf2uJ5PgB0j039ihNrlSYK4qyLZHcc8PCNj1tGll18Lz3ww2f0TFPLebhhNu
vkDOrrXOwrrdqLmeGXba1gA7XGWup3GAOdqIdYUKnrk4MTZqQ5W6AQcgqvHA4vsX
EaL1FWPmj2aBHMHOghQlzdePEq2rHRrU5WlVAjC6cgAqXk10kUgleUTc6xQA2gHA
uuRAM9E3EnxpTekigdSW65mgQFPp2R5YN+CcIGWuObo6v91gtYDAFg4FRN763NQ4
ESFI86yNeFzOy13i+DokTVxn8ggSNxAEgw+UnHdDx79lR+2fYHbbZyfHMnKuCFdN
z7bWdTreo6C1f486l4EwiIEzsg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:31 2026 by rpki-client