
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json)
Hash identifier: 9bqmcOiJvGz6b44PMCHAOKbYrYp+S07qE0hMMDMzuqY=
Subject key identifier: 03:88:3D:FB:20:73:D9:F1:0C:72:6D:9F:D8:28:30:5D:82:D2:7B:54
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial: 0385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
Manifest number: 0380
Signing time: Mon 02 Mar 2026 00:46:32 +0000
Manifest this update: Mon 02 Mar 2026 00:46:31 +0000
Manifest next update: Mon 09 Mar 2026 00:46:31 +0000
Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: DsavIjn2LPvS1XsJJqbUsb7ZZhfk+AMYiSUGgHhRcBk=)
2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: G2P7RPVZzQ6H46xf92du5p3KHSSEhU1N0cupaCReWGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Validity
Not Before: Mar 2 00:46:31 2026 GMT
Not After : Mar 9 00:46:31 2026 GMT
Subject: CN=69a4dde8-4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:94:40:74:f7:af:b0:18:0d:c4:78:e3:fd:
5a:cd:86:4f:13:b2:24:1e:ba:95:bc:67:d6:47:95:
51:03:89:6e:ad:81:0b:91:97:3b:8e:d2:99:74:75:
1c:48:31:66:0f:81:63:a0:7a:4e:d4:0a:52:06:b2:
84:aa:34:15:38:ea:85:fd:79:37:27:b6:92:21:d8:
7a:d4:84:49:f9:21:2e:d6:a9:37:05:9e:6d:11:5e:
2d:02:db:32:f1:a3:a1:c7:bd:3b:6f:48:e6:b3:6e:
05:56:85:52:31:bf:ea:f0:88:f9:2e:cc:78:c6:f6:
d4:0f:bd:83:80:e9:c2:b2:e3:fb:de:ef:59:86:6c:
03:bb:6d:b4:39:1d:ca:27:d0:6a:ca:c8:d6:39:30:
8c:26:ab:5f:59:dd:76:78:18:4d:e1:c1:ce:f7:2e:
82:ed:d4:5b:1b:5b:69:2d:78:89:cf:10:3c:69:f4:
a6:ac:9d:42:fa:cb:cf:d1:10:50:22:98:46:e8:c3:
9b:44:aa:cc:a9:71:7e:0a:a3:0f:7b:d3:91:86:2d:
97:e4:dd:14:a8:8a:15:98:1c:01:ef:e6:37:d4:52:
fd:a5:1b:53:76:37:2b:dd:ef:2f:24:49:64:70:fd:
77:ad:98:b0:9e:da:70:ef:6f:7c:4f:d6:19:41:67:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:3D:FB:20:73:D9:F1:0C:72:6D:9F:D8:28:30:5D:82:D2:7B:54
X509v3 Authority Key Identifier:
keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:be:20:50:6b:cb:7b:42:ed:bf:89:fd:92:69:9b:f8:c0:
2c:02:40:ca:68:75:8c:6f:3d:8a:e7:9c:c4:ec:cf:76:16:62:
04:a7:c8:54:9b:63:e8:d8:6a:12:0f:fa:4d:0b:e0:6b:65:91:
64:9a:17:86:1c:b2:8c:02:0e:0b:13:33:6f:9f:55:97:51:ea:
20:36:27:67:40:24:e8:0a:6b:cc:6a:10:1b:5b:67:cb:9e:d5:
4a:ca:63:96:aa:aa:73:46:3b:ea:a2:23:6c:d0:2e:97:db:58:
8b:ae:03:9d:28:78:61:e7:e1:30:5e:07:9b:7b:5d:80:f2:ce:
9e:3f:4f:3a:3a:94:8b:ae:e5:62:0d:89:ef:9e:82:45:01:01:
2f:96:73:90:d6:36:f3:8f:11:76:02:a4:cd:ca:46:d0:a9:5b:
61:22:6b:fd:b2:07:10:8f:7b:61:c6:83:f7:cb:30:55:fe:70:
cb:f8:7e:6d:a3:30:8d:dd:1a:4b:4a:bb:2b:d4:04:81:70:90:
6a:fc:07:5b:dc:1e:de:87:1a:dd:7a:7b:5a:84:81:1b:10:7e:
bd:f1:04:df:c6:27:b5:a8:98:45:de:de:b6:80:80:22:9b:96:
bc:94:7a:53:56:31:c9:28:05:3c:5d:9e:e0:d9:b8:6e:02:e1:
a5:b0:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:28 2026 by rpki-client