
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: RHkKU88i6HqwtXS4xPxopaPyMLSvV+K4kxvuN7UHFJk=
Subject key identifier: A3:5F:AF:4C:4C:08:F8:BD:5C:05:65:C5:BA:F8:B9:EB:32:AF:FE:30
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 040C
Signing time: Sun 19 Apr 2026 00:22:49 +0000
Manifest this update: Sun 19 Apr 2026 00:22:49 +0000
Manifest next update: Sun 26 Apr 2026 00:22:49 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: pGRemezNexcKLvp7nD3fV+KgiUC1MruxCE4DtralH8s=)
2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 5k3DQfhGz/SABytY61becc5MlxRt/8ivV4iotQ7Zt+8=)
3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: 2Yw2VLmkAKkVffOJoK4BP4cvhiQPwiNPf/uzPwBmVbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Apr 19 00:22:49 2026 GMT
Not After : Apr 26 00:22:49 2026 GMT
Subject: CN=69e42059-17d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:a5:31:2a:1f:c3:fa:7a:5d:0d:ac:17:a0:
f2:ac:fe:d7:83:05:02:92:21:60:77:7d:0a:73:f6:
8a:d0:17:51:c8:2e:aa:36:3f:f2:b1:6c:75:e0:d8:
b8:3f:91:86:b8:96:25:c3:8b:14:7f:f6:56:14:e4:
94:c9:22:1e:15:38:05:bf:6b:e9:b4:b2:49:da:fe:
56:82:a9:e3:d8:e8:55:65:49:1a:01:59:44:29:12:
5f:6e:41:cc:ab:df:84:17:66:fa:c4:39:2a:a7:6a:
cd:f5:da:82:69:c5:a2:ce:61:19:3e:9b:b2:08:95:
f1:f4:cb:ad:c0:ec:b8:de:87:74:8d:cd:d6:74:08:
30:8b:9a:16:0b:ae:52:4e:e0:61:74:5b:7a:86:82:
d9:db:f9:09:b5:ae:e3:d2:4f:4e:51:4b:0a:7d:05:
98:e3:eb:78:0e:ca:86:79:df:23:57:d5:83:cd:ee:
30:da:0c:11:74:54:f6:da:32:34:1d:5d:1a:ba:33:
0d:82:6a:7f:d1:ff:5e:f4:bf:3c:e5:e0:15:ff:8d:
4c:ce:4a:27:b4:19:8d:4a:3d:20:d8:72:64:b0:05:
7d:d3:cf:04:0c:fc:41:7b:15:83:c5:88:b4:a3:2b:
2c:4c:a6:94:77:86:99:cf:18:73:48:1e:08:25:18:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:AF:4C:4C:08:F8:BD:5C:05:65:C5:BA:F8:B9:EB:32:AF:FE:30
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9f:12:0d:ac:21:7a:f9:71:c0:d6:6d:28:5c:cb:a4:1a:a7:
a4:76:36:4a:d9:9c:55:f4:bf:33:5f:fc:53:4c:ed:8b:01:5d:
4f:18:e1:ac:e0:c7:a0:b4:ae:6b:86:df:ee:d1:15:e0:2e:8d:
d7:5e:5e:b8:cf:81:8b:15:a7:6a:d8:7e:77:6b:e4:0e:13:ec:
19:1a:60:17:27:32:e9:5a:7d:6e:2d:cb:b6:32:05:67:3b:1c:
7f:0e:ea:6e:69:70:86:40:28:e0:7a:80:26:8a:0c:cd:86:c7:
bf:ef:2f:7b:f5:43:ab:88:72:b3:c6:27:68:65:ef:72:8b:e4:
0f:56:5b:5d:2a:90:9c:1b:70:6d:eb:10:72:d2:dc:ae:d2:a4:
2e:88:dc:63:a6:68:89:8c:6d:c5:f6:fd:dd:3c:90:a3:2a:52:
b1:d9:ba:5c:f1:26:f3:53:0b:5d:05:41:a2:df:33:35:81:dc:
22:af:4a:ea:92:09:a9:47:d3:94:55:50:c7:79:83:5e:f2:81:
9c:e7:57:99:b6:7a:c6:bf:c8:32:87:87:7e:f6:d1:76:5c:d7:
86:84:6d:57:8b:a0:bc:7b:10:e4:29:7c:82:02:1c:7c:ca:a7:
69:b6:4a:e0:85:ce:e0:9e:29:b3:e3:db:46:66:be:c5:88:e5:
f1:e4:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:25 2026 by rpki-client