
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: e2UcJx5Sj1fUJOWdzZoqvWoA4AwvNrtmEU9U0+hqV+U=
Subject key identifier: 10:B9:3C:B0:EF:DC:36:3C:39:AA:4F:D1:73:F7:1C:CD:45:6D:00:FC
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 317A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 3173
Signing time: Fri 12 Jun 2026 15:24:40 +0000
Manifest this update: Fri 12 Jun 2026 15:24:40 +0000
Manifest next update: Fri 19 Jun 2026 15:24:40 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: 2r9azNnwLSvGnfm4jYM7duCEQIv4CObZhdIuZiW9T6g=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12666 (0x317a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Jun 12 15:24:40 2026 GMT
Not After : Jun 19 15:24:40 2026 GMT
Subject: CN=6a2c24b8-cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:44:83:9b:b2:14:97:dc:60:27:55:75:09:
8b:73:56:cb:6f:db:d1:5e:4c:56:58:f3:de:3f:f8:
93:5c:0d:a9:3c:82:31:3e:65:01:f6:dc:0b:79:d5:
2b:0b:07:a0:76:c2:38:bd:5e:ae:36:bf:22:51:58:
3e:67:15:ad:f3:2d:61:c2:e9:ba:4e:43:1a:15:6e:
1f:1b:85:dc:62:50:aa:c1:5f:28:5f:13:52:41:0e:
39:54:d3:f6:68:5c:8d:17:28:a2:59:6a:74:b6:d2:
67:06:c2:ca:8c:15:8c:da:29:cc:f9:37:d4:40:25:
77:60:d1:9a:cf:f8:23:b6:a6:9d:e8:bd:5f:b1:16:
3b:02:d1:4a:04:36:9b:b5:75:45:53:ab:47:cd:02:
a8:e9:56:26:f6:b7:35:38:c3:53:98:15:eb:84:99:
66:5b:a9:81:dd:03:5e:9c:fb:8b:12:ce:aa:36:12:
78:cc:50:5a:ee:b7:d3:d8:d8:9c:f4:c3:7e:40:54:
df:94:ab:e7:79:02:da:e7:a6:5c:6c:3b:b1:ae:17:
49:ab:13:16:7f:f2:ac:c1:af:4c:97:89:bc:67:fc:
e1:cc:4f:ab:8d:fb:32:d9:96:13:7a:0f:b6:39:01:
cf:41:4c:e1:32:12:07:4e:a7:96:f4:b1:76:9a:c0:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:3C:B0:EF:DC:36:3C:39:AA:4F:D1:73:F7:1C:CD:45:6D:00:FC
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:33:61:86:26:91:cc:6c:d6:04:f0:29:cc:77:2b:bd:ad:
f0:25:ee:52:75:9d:9d:50:23:0e:e5:51:ff:af:99:8b:32:9b:
d5:af:18:fe:f0:d9:90:08:33:00:e4:cf:62:19:2a:1f:f7:3c:
39:a1:28:40:fd:30:96:e3:59:c1:86:86:d7:ef:50:ed:63:8d:
e3:18:db:7d:08:71:5d:1f:57:28:8c:c9:e2:bb:dd:22:d4:38:
07:ff:ff:fa:e3:ba:01:d7:b9:b1:53:5a:f2:54:ef:7f:a2:dd:
cc:fc:2c:6e:cc:3d:1f:96:80:cc:e5:bd:16:76:c5:5a:fd:8c:
ac:bb:09:ba:cf:f7:7f:f0:11:65:ab:55:6f:3e:f0:24:10:d0:
55:d5:94:39:8c:ad:bf:df:7a:d3:e1:76:d8:49:0d:27:c6:d7:
dc:08:87:8b:6b:68:77:65:56:7f:22:5a:59:1a:9b:a9:31:58:
cd:3c:f0:fe:f6:82:84:c0:8a:57:34:b0:63:cb:10:15:8b:ef:
61:96:55:3d:e7:0b:01:59:c1:63:0e:d8:8b:f8:c5:c2:71:2d:
6f:20:7c:ca:15:83:b9:bc:20:5c:2e:e4:b8:7a:90:09:ca:25:
07:94:35:06:7a:24:91:18:ce:06:91:78:4f:e5:36:42:8a:e0:
4c:80:b1:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2
NUZEODI5QzcwHhcNMjYwNjEyMTUyNDQwWhcNMjYwNjE5MTUyNDQwWjAYMRYwFAYD
VQQDEw02YTJjMjRiOC1jYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnpEg5uyFJfcYCdVdQmLc1bLb9vRXkxWWPPeP/iTXA2pPIIxPmUB9twLedUr
CwegdsI4vV6uNr8iUVg+ZxWt8y1hwum6TkMaFW4fG4XcYlCqwV8oXxNSQQ45VNP2
aFyNFyiiWWp0ttJnBsLKjBWM2inM+TfUQCV3YNGaz/gjtqad6L1fsRY7AtFKBDab
tXVFU6tHzQKo6VYm9rc1OMNTmBXrhJlmW6mB3QNenPuLEs6qNhJ4zFBa7rfT2Nic
9MN+QFTflKvneQLa56ZcbDuxrhdJqxMWf/Kswa9Ml4m8Z/zhzE+rjfsy2ZYTeg+2
OQHPQUzhMhIHTqeW9LF2msCvOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC5PLDv
3DY8OapP0XP3HM1FbQD8MB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG
NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE
anNXVmh0cUxxbFJsX1lLY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaCozYYYmkcxs1gTwKcx3K72t8CXuUnWdnVAjDuVR/6+ZizKb1a8Y/vDZkAgz
AOTPYhkqH/c8OaEoQP0wluNZwYaG1+9Q7WON4xjbfQhxXR9XKIzJ4rvdItQ4B///
+uO6Ade5sVNa8lTvf6LdzPwsbsw9H5aAzOW9FnbFWv2MrLsJus/3f/ARZatVbz7w
JBDQVdWUOYytv9960+F22EkNJ8bX3AiHi2tod2VWfyJaWRqbqTFYzTzw/vaChMCK
VzSwY8sQFYvvYZZVPecLAVnBYw7Yi/jFwnEtbyB8yhWDubwgXC7kuHqQCcolB5Q1
BnokkRjOBpF4T+U2QorgTICxJA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:06 2026 by rpki-client