
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier: E+7qqk5YF5qTmQmd6qvkbYUcISqsihOdlCQe+9Vg194=
Subject key identifier: EC:25:E6:6F:F3:5A:F4:BD:29:15:9F:60:FB:E5:9B:F4:C8:16:84:0C
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number: EF
Signing time: Fri 17 Apr 2026 06:06:03 +0000
Manifest this update: Fri 17 Apr 2026 06:06:02 +0000
Manifest next update: Fri 24 Apr 2026 06:06:02 +0000
Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: 0U5IZARAFaPR6wDq0bZ9LNgrVe/HxwAXwBNUoUFU8kU=)
2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: aMh3gHoepLpqOKWWhGXWigpmXGXNEzE7D6VuL1CBkbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Validity
Not Before: Apr 17 06:06:02 2026 GMT
Not After : Apr 24 06:06:02 2026 GMT
Subject: CN=69e1cdca-f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:f1:51:f5:36:40:ab:da:c3:0e:ab:7d:df:
9d:32:e3:45:aa:ea:93:a9:af:92:17:c1:f1:c5:32:
0d:87:41:f9:f2:36:83:c6:82:5f:42:15:1a:6a:32:
d0:ff:16:bc:4a:2d:82:29:72:17:4c:90:0e:7c:72:
0c:78:9f:f0:fc:42:fb:33:13:00:bd:47:26:5d:3d:
2e:67:a1:0a:37:54:6b:67:d2:63:e6:97:e5:56:52:
1d:31:95:1f:05:b6:01:ed:75:bd:76:16:61:fe:ca:
a1:fd:0a:11:85:76:f2:d4:54:93:12:21:65:6d:9f:
28:14:a6:5c:d6:d9:a3:e2:4f:5b:c9:ee:24:c2:3e:
13:b2:e2:1c:b4:96:14:8b:5d:94:f2:20:7e:76:d7:
a5:e8:de:6e:31:11:81:8b:15:1f:ef:fe:c5:6a:19:
1a:ff:aa:1f:a1:7a:20:10:da:30:e2:05:47:d3:e7:
19:b7:bf:13:5e:4a:72:88:45:58:f3:bc:7b:26:dd:
53:4c:30:b2:b7:a7:d2:99:0a:7d:68:7f:44:27:92:
59:e4:6d:9c:ed:4a:f5:9d:cf:05:ff:af:a0:f5:62:
79:be:39:a2:ef:1a:4d:4e:cb:1b:d5:54:f9:74:34:
68:a3:13:30:c1:86:e5:33:29:8d:92:e0:22:99:99:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:E6:6F:F3:5A:F4:BD:29:15:9F:60:FB:E5:9B:F4:C8:16:84:0C
X509v3 Authority Key Identifier:
keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c1:b9:76:6a:13:d9:04:21:bf:ce:58:7a:ca:11:c7:03:63:
fd:9e:0a:dd:c8:00:6c:bd:f3:0b:50:9c:46:91:84:e3:28:ac:
7a:98:48:1a:14:20:4a:2a:61:7c:01:df:ef:3d:b5:e7:92:4e:
08:38:e2:e0:b6:41:5f:a6:2d:cb:9e:2a:76:d4:7a:db:df:31:
92:4b:6d:71:8a:7e:d9:63:a8:69:b3:b4:2c:02:65:47:f8:aa:
48:72:4e:7e:1a:86:51:4c:bf:fe:57:cb:e2:2d:07:3a:7d:3a:
cb:05:70:ea:2c:b0:b8:78:6f:5a:f6:68:c7:49:85:dc:a7:82:
6e:1b:31:c6:f8:0c:48:41:67:9b:ca:27:70:d3:4a:15:d9:3d:
32:2b:be:93:25:d3:33:2c:67:65:12:13:27:eb:e1:20:4f:b2:
75:0f:c5:15:36:aa:61:a1:f0:f3:fe:21:82:00:34:ba:70:24:
f1:6b:d2:55:30:8b:26:01:dc:03:d9:cd:8c:60:a0:61:66:34:
8b:c9:75:54:b8:a3:8e:36:aa:4b:bd:cd:78:45:0f:14:09:53:
de:ec:7c:ee:5b:99:7a:9c:62:d2:0b:ca:cf:e5:3e:ad:32:2d:
7a:c2:67:33:97:fa:4e:9a:84:8e:50:f0:b4:db:01:96:cd:14:
dd:fe:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:51 2026 by rpki-client