
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json)
Hash identifier: s84kIUfNRi+400f9A+u1UBSRlsKzCbqexlkUr2n3N4Y=
Subject key identifier: A7:30:C2:94:6F:2D:AD:A2:6F:B0:D7:FE:F7:ED:02:0D:65:CE:4F:C0
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 237D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
Manifest number: 2332
Signing time: Tue 12 May 2026 15:50:24 +0000
Manifest this update: Tue 12 May 2026 15:50:23 +0000
Manifest next update: Tue 19 May 2026 15:50:23 +0000
Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: Fq7RoqS899FYlW2Whbt7cbN0QAgPhzt3ZHKuUgV/abA=)
2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=)
3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=)
4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9085 (0x237d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: May 12 15:50:23 2026 GMT
Not After : May 19 15:50:23 2026 GMT
Subject: CN=6a034c40-6841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:b7:58:6d:5f:f3:b2:9b:4e:d9:32:f0:a2:
fc:14:58:3f:05:3b:b9:5e:49:15:ca:be:fc:d5:00:
8e:02:21:de:7c:7a:4b:fc:37:9c:5c:7f:52:75:c1:
7e:b1:61:2a:65:04:9c:48:6b:c4:80:30:9c:93:74:
26:be:70:ca:d1:d7:64:15:4b:d3:ac:3f:90:52:3f:
e1:23:e3:b9:00:52:c6:47:81:e9:08:9c:4b:1b:a7:
87:50:d5:bc:4c:e1:b9:cb:b4:6c:e6:50:53:21:e8:
ac:bf:a4:1f:71:17:4f:d7:d2:b8:0f:63:89:2c:02:
0f:44:c8:97:9f:cd:01:19:b3:2a:6f:9a:b6:c7:70:
76:e7:4f:99:4e:d4:d9:8c:fe:d5:f5:3b:88:38:73:
9d:a5:53:64:1a:fe:5d:ca:74:76:73:f9:05:45:f2:
cd:fe:7a:b2:9b:76:af:ce:ec:8d:16:e0:ad:bb:40:
78:02:f0:af:f2:97:c1:0b:5e:57:e1:a9:fa:42:7c:
d5:a6:08:e8:e2:ee:bc:66:42:3d:fa:ea:92:78:6b:
fe:d7:4c:db:87:40:ea:e9:85:56:33:98:1a:b1:e4:
86:0c:4c:81:d7:53:85:6a:08:d1:b2:a8:32:6a:6f:
24:d9:75:69:fd:82:b4:8a:2a:ca:fd:4d:5c:9b:3b:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:C2:94:6F:2D:AD:A2:6F:B0:D7:FE:F7:ED:02:0D:65:CE:4F:C0
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:42:81:eb:12:91:16:27:21:d8:22:4a:49:a5:b0:0e:bf:1c:
9b:4c:c8:56:75:7f:80:74:3c:a4:9f:51:8d:04:77:6f:98:f0:
1d:6f:e4:6f:5d:e9:fd:25:26:94:ea:c6:b7:1a:be:65:8d:1e:
2a:8a:63:fd:42:b8:2b:2f:21:4b:de:19:96:fa:47:ce:06:c6:
c9:3b:cc:05:87:16:9c:0a:4a:54:42:dc:ed:b0:04:19:d5:45:
ff:85:08:e2:f1:9a:ca:93:e0:54:7c:ec:77:c0:e8:dc:e8:af:
c9:02:ef:65:33:93:3f:c4:d3:2d:60:69:76:73:49:3c:c3:77:
9a:0b:9d:fd:c6:27:75:cb:22:5c:8b:b9:83:8c:01:20:5c:bd:
67:f0:ec:b1:e7:78:55:a8:07:26:4e:28:f9:1f:d9:bf:3c:cf:
5c:96:4a:c9:9a:87:c6:e8:5d:4a:ed:77:4a:71:4e:a8:01:7c:
77:77:29:3a:b5:be:17:83:72:67:70:54:25:4e:f1:3e:90:bd:
85:e2:a3:cc:1b:61:b1:10:1e:dc:ab:3e:66:25:4f:9a:41:e1:
b4:f8:80:96:2f:d0:62:76:a0:7f:61:92:5b:c4:32:6e:d9:4a:
bd:4f:0e:c7:a5:0a:a0:d3:51:2b:46:2b:0c:26:0a:ab:a4:b6:
e3:ab:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:08 2026 by rpki-client