
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json)
Hash identifier: WzwyRoge9fqTREzxSt1WpMr+WnHUmKGVKeyToPfrmdU=
Subject key identifier: 97:16:BB:5A:03:7D:D5:FC:89:6D:E4:16:DA:24:6C:7E:CD:D0:30:76
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
Manifest number: 0220
Signing time: Mon 27 Jul 2026 04:28:37 +0000
Manifest this update: Mon 27 Jul 2026 04:28:36 +0000
Manifest next update: Mon 03 Aug 2026 04:28:36 +0000
Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: JsOxdYs1bMgcUOj35DazAj2C1O/K0ndcOxNG0qEo6BE=)
2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=)
3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Validity
Not Before: Jul 27 04:28:36 2026 GMT
Not After : Aug 3 04:28:36 2026 GMT
Subject: CN=6a66de74-6243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:be:fc:f5:b8:84:36:91:16:06:f9:13:90:
97:2f:fe:2a:aa:28:e2:9b:e7:44:50:ec:a9:7b:4b:
b2:f0:13:4c:b5:00:da:5a:97:db:5e:47:e9:cd:e9:
61:03:dc:39:d5:47:c3:41:db:28:8b:3b:de:13:94:
bb:65:05:ea:ea:e6:6f:04:e2:62:4b:9c:87:f8:4a:
1b:0e:47:fe:e7:9e:cf:3f:91:85:58:db:7b:83:53:
8a:b6:5e:3e:f7:5e:b4:66:05:c8:3a:0b:41:c3:b4:
87:ba:91:7e:c9:dc:5a:22:b6:f6:d4:47:90:05:75:
40:61:63:7c:8d:4a:59:ee:11:a4:09:20:31:4e:32:
c2:ba:5f:a8:83:13:ce:b3:4d:a5:f9:2a:70:ed:ec:
98:48:2c:b8:ac:d4:a1:3e:31:6f:73:17:76:00:bb:
8a:05:82:73:7c:d7:2b:27:59:5f:56:00:de:f9:47:
e2:d4:84:ed:e3:c8:18:a8:2f:cf:d1:e3:20:21:15:
94:2e:54:ea:b9:e3:4b:35:03:8a:d0:d2:50:73:52:
75:09:3b:d7:71:45:30:d9:a9:f6:c5:24:69:45:6f:
25:84:2f:5a:02:16:dc:98:84:64:92:46:03:80:f5:
53:65:4e:95:db:3c:6c:75:21:8e:ee:99:6e:28:dd:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:BB:5A:03:7D:D5:FC:89:6D:E4:16:DA:24:6C:7E:CD:D0:30:76
X509v3 Authority Key Identifier:
keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:45:65:92:f6:5e:61:80:d7:7d:14:f3:9b:33:3f:10:46:74:
fb:5b:3e:3c:d8:a9:03:25:b3:5f:90:bb:2d:75:56:87:36:c3:
b1:20:b2:0b:3b:e6:e4:5a:1c:18:77:62:a1:62:8b:82:8f:aa:
f6:cf:6a:9c:92:91:13:fa:54:7a:3c:c9:e9:61:2e:c7:16:6b:
31:a8:63:f5:2e:05:13:b1:9a:37:f7:90:9a:39:4b:2f:61:e6:
3b:4c:4d:01:67:79:91:04:d5:7d:d0:bb:36:24:a9:1f:06:8f:
7d:ed:bf:ef:24:02:db:60:c4:5f:ca:0c:c8:12:c1:d7:0a:94:
c9:90:fa:03:b3:9b:7b:65:aa:4a:b1:94:eb:5f:41:20:e9:d0:
cf:e7:94:bb:7a:4c:a6:a3:7b:40:09:48:8c:b7:46:05:0f:ee:
46:09:0d:74:29:56:f2:38:74:74:f4:d5:d2:f4:1d:e6:8c:12:
7e:91:f5:55:0b:c4:c3:cc:17:de:07:01:e0:dc:a6:24:c4:e1:
35:f6:f6:00:81:72:d4:a7:f4:f1:61:97:6a:7f:f4:88:f7:97:
e9:6d:cf:32:d5:05:4e:fe:26:30:92:c8:2d:3f:f7:97:55:b1:
56:07:59:02:98:bd:dd:57:52:a6:6c:d5:ec:ea:23:ac:95:d8:
4e:f2:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:09 2026 by rpki-client