
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: mfoCAD2EqABeYEQImJmxcNcnQYo0U2a6XHH5hrJmagY=
Subject key identifier: 93:1B:EB:42:19:A3:F6:CD:5B:EE:E5:0A:F3:7E:68:DC:2A:33:54:D0
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 045C
Signing time: Sat 19 Sep 2026 00:04:42 +0000
Manifest this update: Sat 19 Sep 2026 00:04:41 +0000
Manifest next update: Sat 26 Sep 2026 00:04:41 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: To7CMe+wmv3S8TKAMX9xjZc+S8yRGlZvdZOouO/k/Bk=)
2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: awz0vyeOEa2wzssGTfI+LM2VIBRt25P6nvMYDO9Rc9w=)
3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: HbDsx8wK6DOfRunn3fkb89gQPdtEbiGqu2/NfV9cVcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Sep 19 00:04:41 2026 GMT
Not After : Sep 26 00:04:41 2026 GMT
Subject: CN=6aadd199-d025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:77:03:23:bb:b1:c5:88:6d:78:f1:cb:57:
af:43:b0:50:94:e1:14:79:0e:0b:96:3c:b0:23:b2:
34:ac:84:be:46:a2:84:66:0a:09:a9:47:02:db:9c:
1d:8c:a3:59:2b:5a:59:0b:d7:f4:68:24:2d:63:43:
cd:5e:80:17:39:a9:5b:b8:69:07:b6:52:d7:5d:6f:
4a:e5:78:c5:86:c0:1a:dc:44:21:87:d6:e9:96:be:
91:ea:e4:65:47:fc:54:36:06:cf:8d:c5:ec:62:14:
6f:70:9c:7e:68:50:41:d9:b1:56:ec:bf:f0:5d:1b:
3c:ba:43:4c:45:5c:a8:13:a2:96:b3:4b:55:5a:55:
a9:e3:15:22:c9:a9:7a:94:a7:ff:df:5a:a6:8a:1e:
7c:30:d6:ba:b3:af:19:d3:ab:06:69:a2:4a:16:2b:
c5:80:93:c7:70:43:b9:9d:99:d4:88:50:78:ae:46:
e3:ab:9c:3a:d2:4b:67:f5:ee:45:23:57:8d:4b:6f:
bb:ca:4b:62:83:12:13:a2:93:a3:d5:e8:e3:bc:29:
20:b5:db:76:2b:06:9e:00:d2:28:0d:d0:53:90:0c:
5b:8b:d2:1f:e4:df:a9:67:45:66:93:6e:09:98:bc:
33:85:f1:24:e4:ac:87:ee:0d:53:30:86:e1:e4:03:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:EB:42:19:A3:F6:CD:5B:EE:E5:0A:F3:7E:68:DC:2A:33:54:D0
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:d8:18:99:d2:d1:09:9c:8c:f6:8c:0e:89:e7:c9:db:24:
82:a7:90:c7:51:24:66:36:ea:47:14:eb:91:ef:3e:86:75:2a:
89:13:25:b9:28:a0:8a:a5:b7:4c:00:62:77:d9:ad:55:dc:8d:
ed:74:1c:de:64:f8:45:47:13:70:1a:0d:e2:10:93:93:d3:d0:
99:93:5f:e2:5b:83:ec:bd:41:fd:63:55:00:1f:15:18:f3:5f:
6f:c4:36:0b:c4:d2:b8:0a:d2:7f:b0:33:cf:8b:27:b8:16:56:
cd:56:e7:3a:e4:91:0e:5e:1b:29:19:77:97:09:c5:e7:92:d7:
4b:09:d5:09:53:2f:ae:38:23:b7:7b:d7:f8:f1:57:6b:ab:eb:
1d:cb:ff:1e:cc:85:c9:10:79:dc:67:fd:42:89:99:c6:b9:a2:
80:84:34:a3:2c:df:a6:85:cd:f1:a8:44:1e:79:6e:f2:a7:9d:
fd:f5:c9:22:48:9e:49:10:d3:99:93:24:0f:a3:bd:1f:d0:39:
e2:aa:8d:e8:14:3f:ae:f7:33:df:cb:6d:0c:2d:ae:c1:19:e4:
87:db:ae:0c:3e:10:86:07:69:a1:9f:4b:56:19:ce:66:ca:9e:
a5:da:86:4d:74:4a:33:fc:d6:dc:71:1a:b8:dc:e9:36:1d:94:
17:33:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:22:28 2026 by rpki-client