
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: aJO+hYPdzNo2dmgDYxWz7t7K5TyQbT+EbVFuPN0Hrao=
Subject key identifier: 95:12:BC:F7:50:84:F4:11:71:60:B5:44:96:29:9B:72:1E:2B:CC:91
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 0901
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 08F7
Signing time: Sat 10 Oct 2026 20:23:50 +0000
Manifest this update: Sat 10 Oct 2026 20:23:49 +0000
Manifest next update: Sat 17 Oct 2026 20:23:49 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: yqWgGRhcYjcX7CMMPEClBF80szV9XB3LeETBdhcjI9U=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Oct 10 20:23:49 2026 GMT
Not After : Oct 17 20:23:49 2026 GMT
Subject: CN=6aca9ed6-ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:18:ea:b4:04:6f:95:f9:08:73:f8:52:11:
0a:8a:11:2d:63:34:81:b5:f6:5f:74:9f:75:32:9f:
0c:ad:56:fe:c2:09:0c:6c:b3:e3:62:86:bb:a2:f1:
cc:9a:1c:d0:54:33:aa:85:33:7d:08:d5:02:6c:9a:
a8:25:89:2d:06:60:95:4f:1f:d2:04:8e:e8:f1:09:
fd:d4:a6:57:a3:ed:5e:7f:b8:fc:30:46:8b:81:cb:
ff:8a:53:0f:1f:d4:39:e7:e3:13:ee:ca:aa:36:57:
d2:54:cf:7b:ea:86:19:67:41:3e:09:7f:8c:12:9b:
45:ec:3d:18:df:b6:4a:84:78:e2:e4:40:da:41:c8:
71:51:85:6b:ff:40:d1:ad:4f:98:ef:45:a5:e8:de:
87:3f:be:bb:14:97:c0:52:20:75:61:74:c6:ce:64:
39:9a:85:49:8d:25:9a:3b:0e:96:db:86:e3:18:ce:
59:fe:45:9a:57:f5:2e:1d:76:43:25:11:53:ab:bf:
6e:ac:2f:d7:73:3b:00:dd:eb:c9:ad:91:f9:95:ee:
d7:e2:a8:5b:28:57:62:d5:2d:31:13:76:e0:f5:28:
e7:34:1c:7e:a7:dc:bc:f5:1b:4a:4d:11:9a:5d:0b:
8c:86:0c:ca:d0:1f:ee:c8:22:53:f9:6a:b6:01:57:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:BC:F7:50:84:F4:11:71:60:B5:44:96:29:9B:72:1E:2B:CC:91
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:fd:70:14:44:45:01:7a:49:f0:5d:1d:63:3e:fa:6c:5c:4d:
47:dd:ea:14:dd:d6:68:b4:5b:32:87:78:04:8e:29:10:19:88:
3c:20:af:8f:27:28:cb:a1:3e:6d:6d:8c:0e:db:e9:61:87:13:
50:58:54:2c:0c:c6:5c:b5:34:f1:e7:46:80:d6:c3:78:73:39:
53:a8:7e:7e:45:6a:22:57:8b:b1:16:36:09:44:4b:58:0b:63:
85:ee:98:e1:a7:79:60:58:ce:9f:b8:83:55:8b:a4:37:98:aa:
8f:60:8a:c4:3c:68:37:ef:3d:a3:43:d8:f3:be:b0:64:7e:81:
5f:b0:92:d1:64:9d:63:8d:49:b7:00:dd:eb:8d:95:d4:66:a2:
f8:b9:5f:89:31:16:36:74:66:27:f0:03:54:95:4f:57:ff:94:
08:4a:4c:b6:05:5d:c2:97:c7:c1:11:05:07:fc:ee:7d:93:72:
68:57:4c:a8:34:2b:dd:c5:b5:62:04:17:c1:00:c7:bc:98:30:
0a:e2:58:a6:0f:a2:b5:c7:02:03:74:36:f0:a9:4d:84:33:8c:
f0:92:64:fd:15:6e:86:17:c5:25:bb:2e:69:c2:44:54:b6:e3:
cc:25:f8:23:36:85:f5:d7:6e:e1:a4:d0:ba:7d:37:8c:10:4a:
93:b1:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:10:14 2026 by rpki-client