
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: ChTdqBNKJcUnBhnG93FTUJ5owJG6QHbnlKufRTQ0TaM=
Subject key identifier: 1E:74:69:D5:A0:5E:C6:8D:03:52:97:F7:A3:0E:3B:1C:CD:35:6D:CF
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 0443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 042A
Signing time: Sat 13 Jun 2026 00:24:17 +0000
Manifest this update: Sat 13 Jun 2026 00:24:16 +0000
Manifest next update: Sat 20 Jun 2026 00:24:16 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: LR+WguTP0jIQ9MBpqprXJqRsyetTofaSktGr5qgyFHM=)
2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: HbDsx8wK6DOfRunn3fkb89gQPdtEbiGqu2/NfV9cVcw=)
3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: awz0vyeOEa2wzssGTfI+LM2VIBRt25P6nvMYDO9Rc9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Jun 13 00:24:16 2026 GMT
Not After : Jun 20 00:24:16 2026 GMT
Subject: CN=6a2ca330-1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:fb:0f:c4:cf:66:24:12:c8:cd:1a:77:b0:
54:d1:39:6f:62:e7:ea:e9:49:24:a0:f4:7f:18:70:
51:57:b1:94:5f:dd:72:45:06:bf:01:5c:ed:95:4d:
98:df:94:8c:33:c7:19:a8:84:df:37:d3:8d:24:66:
13:a4:26:51:ba:27:1b:f0:ba:72:7c:39:48:e3:0e:
29:6c:07:f1:aa:5d:7d:f4:3f:64:0d:dc:52:43:45:
cb:c4:2a:a8:2a:a3:07:eb:97:5d:c1:c0:0f:19:e3:
01:75:43:c3:15:fe:34:a2:f4:cb:6c:31:33:f9:53:
5e:66:2d:08:d4:8b:ca:35:36:9a:83:54:f3:4c:5c:
14:36:5b:b3:64:ea:70:63:20:d9:d1:33:4e:fa:8a:
5f:33:9d:21:f9:8a:27:6d:64:da:e7:1d:c7:40:1d:
e9:8b:40:73:f5:63:8b:cd:17:a2:0c:a3:ee:0c:cc:
eb:c6:e0:f8:94:a6:3f:87:3b:2f:d3:ae:41:2d:d8:
5e:7c:31:47:f3:bf:84:1d:69:6c:09:fc:72:9e:6d:
29:eb:3d:d2:03:ee:43:1d:3f:02:ce:2d:48:5f:6e:
ad:80:23:d5:f2:f9:84:56:a1:4e:e0:f1:5f:ab:8a:
fb:72:d2:e3:38:52:87:d3:7f:44:84:ec:8b:ca:de:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:74:69:D5:A0:5E:C6:8D:03:52:97:F7:A3:0E:3B:1C:CD:35:6D:CF
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b4:86:d8:d7:84:14:3f:e9:44:2e:48:e1:2d:0c:2b:e2:55:
d5:f7:81:76:de:f6:1f:5c:02:89:f0:5a:60:11:49:0e:2c:74:
72:27:ed:c3:92:c7:64:2c:be:3f:06:04:a6:0e:85:8e:91:f1:
05:0d:ed:37:0c:b4:86:18:76:b0:cc:dc:3a:31:52:3b:8f:1a:
31:5b:f9:58:bf:25:fc:f7:06:18:44:09:48:23:64:45:a1:3a:
72:e1:13:15:f9:63:73:2f:43:cd:fb:6f:66:09:b5:d4:cf:07:
69:3a:2d:13:4d:a6:ee:50:24:dd:bf:58:6d:0d:86:6b:dd:84:
4b:6b:e4:c5:1f:0a:2e:40:e2:67:74:55:ab:fd:d4:5f:d1:fc:
05:72:b0:4e:1d:bb:f0:46:34:32:52:43:c4:5c:53:7b:0b:d8:
45:ab:54:8a:b7:40:1e:df:55:8c:12:a6:40:fb:8c:48:a9:39:
14:f1:9f:40:f3:af:e3:6e:0a:2e:61:b6:4f:3f:cb:8f:12:8c:
7c:4d:da:c1:e8:66:e9:6c:6c:37:8e:b4:cb:8d:8a:63:e4:27:
e8:8a:36:31:eb:e9:ff:96:ab:a3:47:66:b7:7d:bc:ee:6e:b0:
61:f2:5b:3f:b2:3a:b8:ba:49:7a:98:ba:f5:62:e1:2a:89:e9:
7c:ff:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:31 2026 by rpki-client