
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: 1kINxjGKasoWNtu33ff+mArupwqvUVt6ALlhHZSEWM8=
Subject key identifier: 69:A5:CA:A3:B7:52:C8:23:D9:33:9C:8B:E1:F6:E3:60:27:93:06:74
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 02EC
Signing time: Wed 13 May 2026 01:26:53 +0000
Manifest this update: Wed 13 May 2026 01:26:53 +0000
Manifest next update: Wed 20 May 2026 01:26:53 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: i70UQ12YIcUgG6l0r+32h5nhXDANT0EpknfJgm7qlh4=)
2: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
3: BA6A2DFC4C6C11F1AD8500D5C2833773.roa (hash: PbS8zTGQiyKi6Ge1rRmLcuGxZz/osOYaiSuloagJRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: May 13 01:26:53 2026 GMT
Not After : May 20 01:26:53 2026 GMT
Subject: CN=6a03d35d-2e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:eb:50:87:5a:f2:f1:d8:3d:5f:25:be:e8:
a2:3b:ef:24:14:3e:07:5e:29:30:90:61:6f:6c:a4:
f2:6b:22:ac:b2:f3:11:41:e4:0b:7f:6a:4f:95:29:
91:69:54:0d:ef:dd:c4:15:bd:3f:ee:c4:ae:85:e2:
4a:49:2f:09:72:fc:c2:ca:a3:14:f9:43:45:ae:63:
4d:d9:75:ff:9d:e9:e4:93:35:ff:9c:ae:97:0c:41:
65:46:69:ee:3f:73:dd:85:0f:db:d2:7c:8e:46:34:
7a:b0:f4:68:5f:93:ce:b6:7a:74:23:c9:ea:b6:ab:
36:5d:61:d0:4f:0b:8b:3d:2b:cb:a1:90:08:2e:f2:
28:ac:b3:a9:c6:17:2c:f9:b0:7d:1d:3f:6f:c3:56:
c2:e5:c6:15:1a:ce:84:d7:1a:8f:30:1c:43:6a:25:
5c:3c:8a:59:02:5a:6f:3d:59:2b:74:25:8d:40:16:
0a:54:7e:fe:f8:08:f6:fa:22:ed:ab:c9:b5:a2:26:
ba:02:1e:e0:da:04:c9:8c:cf:fe:c8:75:00:70:9a:
de:fa:69:ee:38:d2:83:e2:87:c7:a6:03:b5:1a:61:
8c:53:0b:13:63:60:0b:f3:29:5b:73:f8:32:25:4f:
8b:9f:bf:e7:76:6a:7c:88:17:35:ba:e2:4c:55:63:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:CA:A3:B7:52:C8:23:D9:33:9C:8B:E1:F6:E3:60:27:93:06:74
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:eb:4c:28:7a:76:35:61:dc:55:fe:a8:87:a3:6a:78:9f:
c8:c5:af:20:91:68:64:28:f1:43:84:58:36:ea:a9:58:b0:9a:
7b:f7:aa:05:14:de:93:61:ef:5a:df:c5:13:59:7f:d5:62:a5:
4b:b2:2e:1a:fc:11:8e:a0:6c:16:b3:bd:32:d2:e7:49:c8:2c:
c7:1a:3f:cd:b6:6b:e7:f8:db:ed:63:41:f8:f4:d6:8e:65:bd:
1f:11:03:65:b1:33:b7:8a:a8:d4:65:47:5b:e8:67:f7:76:16:
0b:76:00:f6:56:8e:2c:fa:01:2a:8d:ad:45:4f:a7:b8:f8:cf:
9e:42:e3:a2:0c:c5:67:50:93:11:47:5e:ec:c3:87:4d:15:a4:
b7:5c:62:0c:74:5c:a9:e2:b7:62:d6:dd:10:31:e2:fa:47:de:
73:5a:c7:5c:4d:24:ea:53:47:0b:ab:d2:33:c3:d5:80:29:2a:
a9:99:85:2d:45:98:56:b2:86:ed:ae:25:6c:a9:11:35:34:e4:
c4:93:42:93:fd:99:34:10:c5:76:5e:6b:c5:6c:7e:bd:e7:9f:
5d:b2:1a:8b:ee:0c:08:6b:e3:8f:99:05:98:5c:ed:a3:f3:65:
89:9c:78:75:50:36:40:10:6c:fb:a4:0f:e1:ed:20:17:ea:60:
2f:c0:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:35 2026 by rpki-client