
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier: j31/Xeh1lkiDHp+P0lcf0iVPYub3gC4EK6P9vc2XQ2s=
Subject key identifier: 15:C4:44:D2:2E:8E:BD:C2:2F:7A:28:20:8E:1F:98:4A:65:33:D9:1E
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number: 60
Signing time: Thu 23 Jul 2026 10:03:15 +0000
Manifest this update: Thu 23 Jul 2026 10:03:14 +0000
Manifest next update: Thu 30 Jul 2026 10:03:14 +0000
Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: FAGu8ts0FVPaL57U/w66iwhe8W5JFw4cKB/Mkbu0rwU=)
2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Validity
Not Before: Jul 23 10:03:14 2026 GMT
Not After : Jul 30 10:03:14 2026 GMT
Subject: CN=6a61e6e3-e99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:64:6b:19:55:2d:f8:01:d9:a8:7b:63:1d:
9d:d2:01:b6:f1:fb:04:dc:e0:55:1a:d1:57:49:40:
1a:94:f2:26:d6:53:97:e7:ee:a9:89:66:a3:43:60:
56:6a:7b:62:fe:c1:38:79:2e:00:16:bc:89:27:f2:
e3:28:af:96:ee:08:5b:59:ac:80:62:03:36:f3:36:
45:b8:59:3d:a9:33:c9:e7:37:c5:8b:3f:8f:1c:b5:
96:3f:bc:07:0c:40:3b:1c:ba:b8:f4:e3:a9:d8:d4:
34:26:fa:ff:93:d9:59:eb:71:c9:b4:e8:de:e4:bf:
9b:69:11:32:35:5c:94:9a:ac:85:c1:52:b6:7e:d6:
c6:bc:de:fa:37:1c:b8:c8:ac:f0:97:83:f8:9f:43:
52:9e:f5:89:3c:a4:52:b0:9e:fc:d5:d3:a7:10:b1:
62:2f:c0:2f:d4:c4:bb:e6:aa:2f:e0:c6:60:2a:5d:
b7:c3:f8:e0:2b:6b:a5:0f:07:a1:0e:09:b0:1a:19:
bb:fc:f7:bd:57:8f:43:3c:74:48:45:bf:fd:cc:3c:
36:86:55:d9:94:ac:a0:28:96:23:25:1d:65:19:e2:
0d:a9:39:4a:80:62:5d:11:8e:36:85:bf:35:bb:73:
03:89:b0:7f:b4:2a:c8:57:83:c6:eb:5e:0c:fa:b4:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:44:D2:2E:8E:BD:C2:2F:7A:28:20:8E:1F:98:4A:65:33:D9:1E
X509v3 Authority Key Identifier:
keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:90:32:43:5e:f3:44:ea:10:14:23:e3:98:21:bc:3c:9c:aa:
0c:de:42:4c:a7:af:80:01:5c:6c:89:6b:40:4f:48:f2:6d:be:
de:9e:e1:b5:a8:04:64:22:1e:3f:ab:d9:ea:a3:73:6c:9e:77:
d0:2f:7c:15:2c:df:05:78:c1:41:6d:ed:85:ba:61:c4:10:7d:
6a:59:b3:58:d3:73:06:97:90:20:00:e2:17:5a:48:f1:90:14:
72:c6:c6:2f:64:6c:62:c9:0a:b5:ce:cf:c0:45:c3:9f:ee:ff:
e2:44:04:c1:d1:f5:8f:09:c5:1f:8f:3a:d1:ef:12:54:a8:f7:
7d:1f:44:5c:d0:b2:fe:0e:45:d9:b9:0a:10:f3:d5:9b:76:b2:
01:cb:a5:2a:da:d2:cc:c3:1f:c8:61:5e:ea:9b:31:5c:c3:ea:
e4:40:b1:d8:3e:09:7b:c5:8c:91:45:42:14:11:5d:00:d2:ad:
da:db:82:df:17:dd:e1:1c:a8:e4:8d:d5:57:9f:69:fc:d2:fe:
cc:d2:1f:97:b4:ba:16:cc:19:1e:57:8b:58:4d:38:fe:ee:ce:
c2:e9:a7:8c:43:f4:41:49:3c:d6:74:5d:49:21:4e:58:e3:c3:
dc:52:23:ba:d5:38:08:d9:66:6d:c9:a9:32:19:8a:c3:70:ee:
38:e7:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:15 2026 by rpki-client