
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier: bTj7Ryli8Kz3U01RLRLq1NHCIFOyKbwV9Ske7NuTH6Y=
Subject key identifier: D4:E8:8B:AF:AE:D3:0D:55:F5:01:48:7A:0D:5C:59:4F:67:9A:03:DC
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number: D7
Signing time: Sun 01 Mar 2026 07:52:18 +0000
Manifest this update: Sun 01 Mar 2026 07:52:17 +0000
Manifest next update: Sun 08 Mar 2026 07:52:17 +0000
Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: NEAlb3HrUwmAdVmrkra0f5UGhiI5yMc8c0wfJG92z50=)
2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: aMh3gHoepLpqOKWWhGXWigpmXGXNEzE7D6VuL1CBkbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Validity
Not Before: Mar 1 07:52:17 2026 GMT
Not After : Mar 8 07:52:17 2026 GMT
Subject: CN=69a3f032-e638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:33:24:56:ea:54:ba:c2:d3:90:49:df:da:
1e:78:1c:a0:2e:67:57:09:2a:87:fc:3f:85:77:e0:
df:31:29:0d:e3:3d:80:80:2f:6b:c0:b3:5e:ef:22:
65:7d:aa:2c:09:39:c3:e9:f1:8f:77:c6:fa:05:f2:
d7:c7:42:98:d1:42:77:60:4c:b9:6a:2f:25:22:fb:
7b:ef:f7:78:c6:bd:c9:60:8c:67:58:64:e6:1a:89:
1b:6b:ef:53:ed:3a:85:4c:86:2a:f8:26:37:67:95:
6c:75:2a:15:37:ca:d0:bf:b3:95:4d:66:9b:8e:a4:
88:73:64:1a:68:8b:a9:90:1a:61:e4:54:47:fd:72:
0f:8a:cd:e1:c5:65:d0:ee:54:07:8f:4f:72:22:43:
8b:f3:2d:3d:11:1c:67:5d:29:a5:52:99:d4:ad:87:
fe:3f:42:3a:36:64:86:d5:e6:1a:b0:4f:5d:6f:ea:
f7:78:07:60:88:9d:7d:85:07:97:ed:6a:4e:3a:84:
30:dd:3f:dd:6e:19:97:08:29:92:64:05:56:9d:cd:
94:aa:98:50:bf:dd:40:69:c7:0a:5c:7c:35:33:0c:
eb:4c:6b:8b:78:bb:af:c6:3e:3a:aa:d3:f3:10:60:
e0:26:5b:d0:6a:0a:20:2f:7a:01:4b:46:1e:65:33:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:8B:AF:AE:D3:0D:55:F5:01:48:7A:0D:5C:59:4F:67:9A:03:DC
X509v3 Authority Key Identifier:
keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:6f:76:51:3b:aa:51:d3:84:3b:44:d6:70:af:bd:4d:c8:
e0:0d:ed:34:54:d4:df:01:72:e3:ec:32:52:58:fb:cb:f3:54:
f7:76:46:bc:38:b4:cd:77:86:ed:86:8e:e0:04:c0:cf:34:58:
11:1e:e4:2d:4f:b7:11:a0:8a:53:0f:1c:de:ab:7e:82:1a:1c:
af:b3:45:5b:1f:2e:4c:c1:b8:97:4e:f5:ce:16:15:06:79:98:
64:08:11:67:c2:30:94:2b:41:f4:bd:b3:82:c9:16:69:db:a7:
73:67:2f:cc:90:ff:83:0f:63:2a:8d:30:d9:a7:a5:d8:a5:4a:
74:3c:b2:86:7a:bd:ed:18:71:13:60:06:42:58:22:6a:a0:9e:
75:c4:1d:2c:1c:6c:d9:bd:30:2a:5f:9b:29:0d:37:b3:89:c9:
08:d2:0f:63:d7:2d:3a:c6:15:d7:f5:de:34:63:4a:bd:9f:65:
22:48:e1:50:ad:66:56:0a:b3:76:65:34:9f:ba:ab:71:23:0e:
73:15:ab:03:5a:f7:e4:3d:8b:be:b1:37:e4:7c:48:93:e8:fa:
c7:c9:14:bf:d1:f5:5e:7f:0b:a7:4d:24:0d:a3:ad:e6:cd:80:
36:5c:38:ae:1d:62:b8:5f:d2:84:8f:cb:e8:da:52:14:d7:a4:
dd:34:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:58 2026 by rpki-client