
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier: 7q+4ioldtLPo0Cwo1Z1QzC7CLDS9Fn7G+kIcggZBAuo=
Subject key identifier: 6B:5C:10:BD:A3:25:75:55:F7:15:A8:32:C3:5A:5D:49:BD:8F:59:34
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 13D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number: 13C1
Signing time: Fri 12 Jun 2026 16:55:29 +0000
Manifest this update: Fri 12 Jun 2026 16:55:28 +0000
Manifest next update: Fri 19 Jun 2026 16:55:28 +0000
Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: Ct1hX5+d+0TwoD6PSqH28DFu+dyqWdmJB/8fMzCfo2w=)
2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=)
3: AE7603724F8711F1ACC1478F91833773.roa (hash: m3sG9C0voTAzwCTrnGEExTYMamH/vClHoEE2jHx5FJc=)
4: F5B633B2283411F1B1D7DF7FCA833773.roa (hash: Kt9rQh1UmXU3aG3p58XCWtin2O3CyyL613kv0PisisY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5079 (0x13d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: Jun 12 16:55:28 2026 GMT
Not After : Jun 19 16:55:28 2026 GMT
Subject: CN=6a2c3a01-c165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:9b:14:99:c0:7a:90:15:3d:b6:49:c6:57:
33:32:52:e2:8c:b6:a3:45:9b:ee:82:32:c4:ea:1a:
2a:3d:45:f9:93:cd:d6:cb:d1:cc:cf:9b:b5:62:0f:
27:c5:5e:8d:15:e7:b0:2e:7b:55:57:48:f3:76:a6:
00:68:b0:c2:7e:86:db:d4:aa:19:7c:5c:e7:d9:b4:
14:86:f1:8d:97:15:a4:9d:10:70:00:ce:b7:ce:24:
23:83:11:96:ed:62:fd:9c:e7:17:b7:4c:7e:3f:d1:
25:5e:03:9d:17:a2:34:4e:63:a3:42:92:a6:f8:88:
73:6f:f0:b0:ca:bd:25:ba:13:e4:4b:f8:b5:6d:54:
c5:68:b5:a7:a3:1a:a2:9a:09:9d:e6:93:39:7c:a6:
a6:79:a5:00:ad:24:85:4d:c7:39:c5:90:82:a9:d2:
59:dc:1a:28:d3:a6:4b:85:ee:a7:a6:b3:83:61:ca:
43:7b:22:46:95:51:d2:4d:e3:53:91:79:5e:d6:fd:
45:09:c3:2d:3a:1f:39:e7:73:4f:f3:56:26:f4:86:
83:9f:b8:7f:02:80:18:33:ac:13:79:a1:03:c7:b1:
94:6e:3c:15:97:08:0d:c2:d7:ac:09:a6:56:65:08:
da:a3:bf:4e:fd:18:f1:34:15:11:75:90:59:13:2d:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:10:BD:A3:25:75:55:F7:15:A8:32:C3:5A:5D:49:BD:8F:59:34
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:ce:58:0e:4f:dd:4b:06:da:23:7d:61:f1:58:f0:70:55:
0e:65:ee:e2:d5:38:2e:04:42:59:14:0d:6f:77:c9:3a:56:3f:
04:7d:95:42:61:43:dd:ba:8b:5e:b4:87:83:22:fa:bb:be:40:
51:c3:f4:86:00:87:d6:3b:f5:c5:00:1d:95:66:71:27:b2:51:
9f:b1:60:cd:0a:89:46:17:b0:a5:b6:8b:e1:38:c1:4d:8b:08:
24:d4:45:fa:75:00:cb:6c:83:76:02:0f:77:2a:23:8c:7a:ba:
a9:25:a6:80:12:e6:7a:d0:2c:1c:05:af:b0:70:a2:37:e8:d2:
05:9d:48:8f:b5:c1:be:87:2e:27:48:2e:fb:b6:d6:0d:5a:e3:
cf:da:ea:f7:29:23:70:5d:e0:92:a8:7a:cf:15:6d:d7:ce:e6:
de:44:3a:e8:90:b6:d8:09:03:d2:88:7d:c1:d6:63:a4:8c:5f:
ad:13:ff:6f:1b:2e:7f:a8:0d:9a:f8:d2:2d:aa:e4:d5:82:cc:
68:73:af:47:00:1e:e9:79:ba:9b:24:34:6d:b0:5c:f4:48:f7:
3e:c4:12:68:d2:79:78:2f:2f:95:9c:2a:5a:54:c4:42:98:a2:
0a:ad:bd:1c:97:31:c7:92:71:bc:f5:9b:c8:a8:96:57:15:77:
80:25:a0:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz
RDY5NTZFMzIwHhcNMjYwNjEyMTY1NTI4WhcNMjYwNjE5MTY1NTI4WjAYMRYwFAYD
VQQDEw02YTJjM2EwMS1jMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDebFJnAepAVPbZJxlczMlLijLajRZvugjLE6hoqPUX5k83Wy9HMz5u1Yg8n
xV6NFeewLntVV0jzdqYAaLDCfobb1KoZfFzn2bQUhvGNlxWknRBwAM63ziQjgxGW
7WL9nOcXt0x+P9ElXgOdF6I0TmOjQpKm+Ihzb/Cwyr0luhPkS/i1bVTFaLWnoxqi
mgmd5pM5fKameaUArSSFTcc5xZCCqdJZ3Boo06ZLhe6nprODYcpDeyJGlVHSTeNT
kXle1v1FCcMtOh8553NP81Ym9IaDn7h/AoAYM6wTeaEDx7GUbjwVlwgNwtesCaZW
ZQjao79O/RjxNBURdZBZEy0DMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtcEL2j
JXVV9xWoMsNaXUm9j1k0MB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2
OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5
YV9vSktEQWhfcEU5YVZiakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlwjOWA5P3UsG2iN9YfFY8HBVDmXu4tU4LgRCWRQNb3fJOlY/BH2VQmFD3bqL
XrSHgyL6u75AUcP0hgCH1jv1xQAdlWZxJ7JRn7FgzQqJRhewpbaL4TjBTYsIJNRF
+nUAy2yDdgIPdyojjHq6qSWmgBLmetAsHAWvsHCiN+jSBZ1Ij7XBvocuJ0gu+7bW
DVrjz9rq9ykjcF3gkqh6zxVt187m3kQ66JC22AkD0oh9wdZjpIxfrRP/bxsuf6gN
mvjSLark1YLMaHOvRwAe6Xm6myQ0bbBc9Ej3PsQSaNJ5eC8vlZwqWlTEQpiiCq29
HJcxx5JxvPWbyKiWVxV3gCWg0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:38 2026 by rpki-client