
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: TyihTDvIAcv7GmyAzAoDmh5DwLXZFnfuJCig56a3rxs=
Subject key identifier: EA:E6:A7:47:AC:E7:8B:B2:18:2B:AB:5A:E0:61:C1:B8:AC:50:C5:71
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 070A
Signing time: Tue 12 May 2026 22:06:37 +0000
Manifest this update: Tue 12 May 2026 22:06:37 +0000
Manifest next update: Tue 19 May 2026 22:06:37 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: Y0j9oFnNcrdMBg8SJd6sXUvFit9TntgS9q6xg3+fiuk=)
2: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: /5wXx4cmTVQVdguvfntlB2W6kj2rZMU7vB1692wCKvA=)
3: 8D20F290411811ECA0929516C4F9AE02.roa (hash: fjAS87Fa2KTDfIBPfFBgVc4CwHe6EqcmmF1tEiz37Qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Validity
Not Before: May 12 22:06:37 2026 GMT
Not After : May 19 22:06:37 2026 GMT
Subject: CN=6a03a46d-63ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:65:79:e0:93:08:57:ca:a3:55:5a:b9:42:
45:a5:d1:d7:4e:be:c9:f3:6c:a7:7d:a5:fb:59:68:
65:58:dc:85:25:cd:f7:2f:0e:7b:65:0c:10:4e:2e:
0e:76:69:93:ee:91:6f:5f:93:bd:0f:8b:7d:7c:76:
10:6e:c0:95:6b:7e:bb:f9:79:6e:f6:4b:11:e9:7c:
c1:f7:a0:dc:a5:23:fc:92:47:9b:11:d1:5b:64:98:
14:53:52:6b:85:18:40:46:bf:87:f2:71:39:6d:47:
64:47:d4:ba:6a:e0:ac:bb:a5:60:69:7d:72:94:46:
8d:ba:91:90:d4:56:56:bb:ae:73:e1:51:5a:b7:43:
90:3d:d2:24:59:ad:80:b5:2f:0b:87:ea:c2:01:46:
64:0d:c5:b9:43:4c:2c:46:b2:00:ff:bb:29:4d:76:
cb:cf:9c:05:d1:da:6f:59:2f:06:6d:e4:a3:a5:82:
8a:24:65:c4:27:36:06:a2:87:5f:46:1e:15:9a:4f:
47:79:3d:59:c8:e6:90:a2:ba:1e:e1:42:a0:56:5f:
09:0e:4b:7a:2e:f8:ca:58:da:de:45:16:1d:be:24:
85:e6:3f:d7:ee:e1:b2:39:c5:08:64:5b:c6:f3:aa:
a4:dc:d4:3f:01:14:1e:bc:39:ad:e0:86:d7:0b:10:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E6:A7:47:AC:E7:8B:B2:18:2B:AB:5A:E0:61:C1:B8:AC:50:C5:71
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ea:c2:3e:4d:52:92:54:52:31:b3:a8:29:be:c1:1f:d0:2b:
2e:d8:f1:9f:3e:d7:de:84:18:ec:0f:8c:52:63:bf:ca:36:ef:
eb:53:17:97:bc:c4:85:4b:12:af:46:27:11:27:0b:d2:cd:73:
5e:0a:3a:95:2c:37:91:fe:b3:f3:34:95:79:7e:29:49:da:d7:
2f:30:46:6b:dc:e3:e6:54:7a:cb:db:e7:be:f1:d4:e1:54:f7:
64:32:8b:3e:07:74:7b:35:f6:ba:f7:a3:e6:50:f8:93:8b:74:
9e:c2:db:1c:68:74:17:2f:87:c1:27:86:96:1c:c2:98:64:6c:
df:7b:24:a0:6f:03:c4:f7:25:9f:29:9a:67:de:06:21:93:1d:
ef:98:fd:0e:f2:f0:f2:e3:60:bd:e1:96:7f:1b:f2:05:9e:9b:
bb:38:f0:d9:3f:b5:ad:1e:1c:47:ee:e5:b3:71:4d:90:e6:a9:
79:99:90:d6:c5:b2:76:73:ec:fc:fc:8f:ce:6a:56:07:55:88:
a6:cb:0e:3c:e6:b4:b0:37:31:6b:f8:e8:57:e8:50:1e:f7:de:
1c:1d:8b:8b:c6:15:8e:cc:73:37:0e:ed:cf:76:e5:e0:59:c7:
59:56:01:7d:2c:1e:cb:db:1e:d7:4f:9c:1e:8f:77:c8:40:a4:
b7:72:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:10 2026 by rpki-client