
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json)
Hash identifier: CGZ706ddebFQvHHm96d9U9qe1ynDLUEcWg4qIiWz694=
Subject key identifier: 71:95:06:6A:71:48:0B:DD:26:79:C0:19:BB:EE:3E:D6:C9:CC:14:30
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial: 06BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
Manifest number: 06B1
Signing time: Mon 02 Mar 2026 22:19:22 +0000
Manifest this update: Mon 02 Mar 2026 22:19:21 +0000
Manifest next update: Mon 09 Mar 2026 22:19:21 +0000
Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: Th2ToiJKxIJNrlsZoG3h0NbS8jX9b7ahe97ovxGm/X8=)
2: 190C2054FC4511F0B3BAE0E1466F56BC.roa (hash: VbS3vbL0hqKPBaB8wK0DHbWRgAZrEub7dam1PJVejWE=)
3: 3178D7C2FC4511F09C766CE9466F56BC.roa (hash: amHTyWIq2OtRmCPA/SGgVZzJhBt3f4JrQzwmqyQYO7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726 (0x6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Validity
Not Before: Mar 2 22:19:21 2026 GMT
Not After : Mar 9 22:19:21 2026 GMT
Subject: CN=69a60ce9-aa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:97:4e:7e:31:4b:77:88:15:82:35:30:0b:
8b:46:2d:d1:72:da:6c:ee:3e:1c:6a:b4:c5:23:21:
b3:c7:71:5c:7c:5b:48:89:6a:0f:95:a5:f2:05:64:
c6:e5:c3:87:61:2b:39:57:89:2f:b3:42:79:7c:d7:
24:03:9d:79:de:0d:29:00:4d:8f:55:aa:87:a9:af:
16:58:8c:6a:cd:71:b5:f3:d4:2b:a5:46:62:e8:de:
1d:25:cd:ac:a1:c0:4c:2f:80:d6:64:a9:cb:e4:81:
76:c6:44:04:48:4d:a6:61:c4:01:70:c7:47:28:d9:
f2:cd:94:df:0a:d3:71:58:3f:62:c7:27:bd:05:ab:
e2:1e:cd:26:56:c2:5f:3c:2b:01:47:dc:69:f4:62:
6a:5a:f2:48:a6:5a:a8:5c:18:cf:90:58:92:18:71:
28:8f:d9:5b:f7:f3:53:23:43:4f:ac:b4:b8:2e:94:
e9:16:b8:02:6a:da:c7:1e:97:0e:05:8c:a4:89:c0:
ff:5a:01:8b:bd:26:6c:79:b2:f2:9c:71:6f:14:0f:
89:da:c8:ed:20:39:5b:49:e0:44:59:30:9a:8f:8f:
a6:d5:a3:fd:89:02:df:04:5a:55:c4:dd:f5:f2:9c:
59:c1:c6:4e:37:fc:8d:1c:fe:0c:df:ab:dc:fe:ca:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:06:6A:71:48:0B:DD:26:79:C0:19:BB:EE:3E:D6:C9:CC:14:30
X509v3 Authority Key Identifier:
keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:47:b0:6c:af:90:df:56:5c:e2:c7:f1:27:38:f5:df:27:a1:
30:1f:ab:72:f2:13:ad:09:c3:0b:a3:c0:f8:b5:b2:ac:9c:ec:
b7:7b:e0:9b:d9:9a:73:f7:21:fd:c6:bf:14:bc:70:4d:34:fe:
8b:ca:b9:56:f9:13:37:88:4c:eb:99:48:df:f9:84:5b:af:63:
f9:da:0f:6b:29:df:86:e4:ee:27:fb:67:74:28:2d:75:84:48:
67:99:2e:79:75:ea:36:06:0c:9c:08:c0:29:c2:e2:1f:0f:60:
53:33:06:04:44:ea:ac:b9:cb:bf:f4:e6:1b:87:5c:8a:5b:cf:
57:17:68:ea:28:6d:cd:19:c9:15:32:6d:7c:f0:28:f0:36:05:
51:fd:09:50:e6:88:1a:85:b6:be:0f:66:39:76:66:0f:bd:da:
c0:fd:a0:7d:7a:86:be:c1:c5:7f:6e:bc:38:89:25:6c:9c:ee:
d7:88:03:5e:30:8d:97:59:d4:26:6e:b0:a1:74:1c:16:3f:a6:
03:31:2e:f0:d8:5f:c9:c8:92:cd:a7:98:ef:91:7e:72:64:95:
4c:ee:25:cf:68:04:e9:df:16:a6:06:ff:5b:54:c5:01:7c:a2:
e1:9a:78:40:a2:df:bd:ca:e5:1d:87:74:b3:10:78:4a:39:46:
d6:17:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:28:56 2026 by rpki-client