
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json)
Hash identifier: Ar5YQb7Dp8zt/ggMXBC9qVBtTZBYIJC8IvhmsNmrwFM=
Subject key identifier: 86:2E:B1:1E:6B:FB:2D:13:0B:31:B6:83:DC:85:5A:46:5D:88:63:78
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial: 06D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
Manifest number: 06C8
Signing time: Thu 16 Apr 2026 22:13:27 +0000
Manifest this update: Thu 16 Apr 2026 22:13:27 +0000
Manifest next update: Thu 23 Apr 2026 22:13:27 +0000
Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: +tOXCdDHj5KsHWczWFdtv1PrO6JXNyOnnjKz2ARZypE=)
2: 190C2054FC4511F0B3BAE0E1466F56BC.roa (hash: VbS3vbL0hqKPBaB8wK0DHbWRgAZrEub7dam1PJVejWE=)
3: 3178D7C2FC4511F09C766CE9466F56BC.roa (hash: amHTyWIq2OtRmCPA/SGgVZzJhBt3f4JrQzwmqyQYO7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Validity
Not Before: Apr 16 22:13:27 2026 GMT
Not After : Apr 23 22:13:27 2026 GMT
Subject: CN=69e15f07-e780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:df:10:89:c4:3d:f5:4c:94:49:48:7a:8e:
c3:7e:94:2b:5f:f0:c4:6b:d3:e7:59:8f:c7:2b:d2:
e0:4e:22:b9:f7:86:f1:46:3b:c0:fb:51:01:dd:37:
bb:6d:eb:69:46:f7:07:75:76:97:66:b4:d4:7b:6a:
b8:2f:6c:4e:ac:02:c7:1c:7c:a4:be:7b:f2:48:d1:
b3:c6:5f:53:f7:dd:d0:c2:8a:7e:ff:b9:d7:d2:c0:
ad:1b:19:f1:5c:6e:3c:c3:5c:f1:70:d5:85:6c:09:
53:42:fb:2d:b9:7a:0d:0e:df:8c:60:31:de:cd:c2:
91:f9:a2:7a:97:43:ea:88:6d:1d:18:75:b0:98:29:
f5:be:3b:af:3d:e9:43:ba:ab:1a:41:fa:73:31:53:
cc:53:c2:c1:39:81:92:0f:55:d8:64:ba:f0:fa:3e:
34:cc:dc:47:93:5c:61:83:2b:bd:11:de:11:50:f3:
06:66:54:b0:94:70:93:6d:93:8e:49:7b:9b:a5:f9:
ab:42:17:16:3e:9a:c0:a8:42:b6:3f:d8:c1:2f:52:
6d:e1:e3:50:68:0c:83:e4:29:2b:a0:ec:a6:82:38:
fe:26:16:38:4a:d1:3d:3a:40:d7:4f:23:1b:b8:c7:
f1:68:59:fc:53:ff:b7:c6:6b:6d:fe:1c:24:bb:91:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:B1:1E:6B:FB:2D:13:0B:31:B6:83:DC:85:5A:46:5D:88:63:78
X509v3 Authority Key Identifier:
keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:e1:13:6b:2b:29:c2:22:a7:26:5d:d1:84:c1:34:cb:9f:
12:4f:4e:21:8f:a4:86:f4:0e:71:52:e9:c3:cf:d4:7d:08:9d:
8b:0f:90:10:7d:48:05:a7:5c:95:0d:9c:08:d1:53:b8:dd:84:
d3:39:02:eb:b8:4c:05:48:e0:47:80:4f:86:48:a5:9d:7a:e7:
1c:26:b9:23:e7:b9:61:af:7f:a8:98:ab:86:a8:75:df:03:c7:
3a:e9:59:38:92:02:90:15:43:0c:1c:28:06:c2:01:81:7c:cf:
04:df:b0:32:aa:bd:b1:9d:7e:da:31:0c:a7:b3:8b:5a:75:11:
f7:f4:d9:10:d4:88:f1:fd:fe:11:4f:bd:f9:15:c3:f0:81:63:
86:16:68:e4:9e:2e:7c:23:97:0f:13:c1:c6:47:39:85:45:2c:
8b:4f:95:ff:be:6f:b0:53:f7:e1:9d:0c:63:dd:80:a4:68:9e:
ff:87:87:a7:83:d9:8b:12:b7:ec:5a:97:43:27:46:73:08:30:
65:c4:b2:96:65:b3:83:b2:f8:27:ac:ea:60:7b:87:29:b2:bc:
80:05:c4:01:ce:d1:7a:3a:ac:9e:4d:7a:ad:43:96:da:ec:b4:
37:91:e8:8a:49:18:3a:5f:1b:b7:da:32:00:59:1a:1b:84:f7:
46:eb:41:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw
NTFFMTk0QkMwHhcNMjYwNDE2MjIxMzI3WhcNMjYwNDIzMjIxMzI3WjAYMRYwFAYD
VQQDEw02OWUxNWYwNy1lNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlfjfEInEPfVMlElIeo7DfpQrX/DEa9PnWY/HK9LgTiK594bxRjvA+1EB3Te7
betpRvcHdXaXZrTUe2q4L2xOrALHHHykvnvySNGzxl9T993Qwop+/7nX0sCtGxnx
XG48w1zxcNWFbAlTQvstuXoNDt+MYDHezcKR+aJ6l0PqiG0dGHWwmCn1vjuvPelD
uqsaQfpzMVPMU8LBOYGSD1XYZLrw+j40zNxHk1xhgyu9Ed4RUPMGZlSwlHCTbZOO
SXubpfmrQhcWPprAqEK2P9jBL1Jt4eNQaAyD5CkroOymgjj+JhY4StE9OkDXTyMb
uMfxaFn8U/+3xmtt/hwku5EYqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYusR5r
+y0TCzG2g9yFWkZdiGN4MB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE
QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP
OEEtTTZNYmI2dnNGSGhsTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnf7hE2srKcIipyZd0YTBNMufEk9OIY+khvQOcVLpw8/UfQidiw+QEH1IBadc
lQ2cCNFTuN2E0zkC67hMBUjgR4BPhkilnXrnHCa5I+e5Ya9/qJirhqh13wPHOulZ
OJICkBVDDBwoBsIBgXzPBN+wMqq9sZ1+2jEMp7OLWnUR9/TZENSI8f3+EU+9+RXD
8IFjhhZo5J4ufCOXDxPBxkc5hUUsi0+V/75vsFP34Z0MY92ApGie/4eHp4PZixK3
7FqXQydGcwgwZcSylmWzg7L4J6zqYHuHKbK8gAXEAc7Rejqsnk16rUOW2uy0N5Ho
ikkYOl8bt9oyAFkaG4T3RutBKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:55 2026 by rpki-client