
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: ir9F4Wtd+4fKMJv5/TjX7CvHK+X7uYmmnb8wD3kTOwU=
Subject key identifier: 74:D8:DD:E0:40:1A:E7:18:65:7D:CF:73:09:8F:E5:E1:24:B1:66:F8
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 0742
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 0730
Signing time: Wed 22 Jul 2026 22:34:26 +0000
Manifest this update: Wed 22 Jul 2026 22:34:25 +0000
Manifest next update: Wed 29 Jul 2026 22:34:25 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: 0irryoRo1efI6EUE+x9DbgG6B+eQ0MKojjhxtZtVzEE=)
2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: lTuyJowUFMLOryc9O4taTNUF2BOa8A0yjVaiNstsNbo=)
3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: SmluGT3rSA2/F6vzSy9ujUd/VTUfXc20Bw3w5gO2FCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Validity
Not Before: Jul 22 22:34:25 2026 GMT
Not After : Jul 29 22:34:25 2026 GMT
Subject: CN=6a614571-5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:c7:5d:24:e6:7a:69:7a:ec:66:68:bc:73:
83:ce:d8:0d:1d:9e:2d:1f:c4:bf:29:cf:be:1d:4e:
bb:0f:c0:9c:3f:81:c4:e0:38:0a:d2:86:5d:9b:4f:
b4:22:5f:9a:c7:42:92:e5:e9:9f:31:fc:71:c3:dc:
e5:dc:e1:33:da:65:41:73:b5:b1:69:e6:63:de:8d:
e3:2f:00:0b:16:d2:4b:f9:6c:dd:1d:0c:be:a3:a9:
60:2a:b5:8a:ba:2e:15:45:08:7f:32:8e:81:71:c2:
7e:77:c7:1e:16:04:aa:25:6c:69:e4:fc:8d:af:8e:
60:7c:c1:53:1d:ad:20:5c:28:3f:1d:5b:44:50:ba:
b3:04:ed:ea:d4:49:80:8f:38:62:ec:dd:ca:d7:f6:
65:26:ea:10:2e:ab:12:99:6d:5c:81:22:a5:17:27:
c4:f9:85:3a:22:cd:4a:e2:5f:b3:18:9f:59:d8:b3:
27:9a:f3:9c:9a:14:84:f6:ac:76:7c:54:62:de:27:
8c:33:d2:41:6b:ab:ac:88:58:9a:d4:e1:51:d2:a3:
8c:e2:1f:28:ad:dc:d5:b0:4d:08:2d:b4:be:fd:55:
28:d9:8a:46:40:b8:69:b4:43:55:47:64:d7:94:af:
f1:f1:fc:b0:ac:5c:b6:b0:5e:d8:23:fd:93:a1:28:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D8:DD:E0:40:1A:E7:18:65:7D:CF:73:09:8F:E5:E1:24:B1:66:F8
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:7c:3a:71:93:a2:3f:9d:5d:e4:aa:ea:33:95:16:9c:a0:37:
a3:64:2f:c9:0f:2d:da:06:57:0d:80:e5:7e:66:97:1b:38:73:
76:b0:24:fc:18:cc:41:bf:7a:2d:85:b4:39:f0:54:9f:1b:f0:
42:7b:ba:a5:41:86:c7:7e:73:95:4c:5f:ca:0a:86:32:db:58:
9d:f8:45:5f:66:e9:12:63:1a:08:03:cd:e3:6e:9b:d3:34:0f:
0c:c3:52:54:e4:93:e4:03:24:1f:48:fd:ae:d2:32:7d:86:f4:
72:d9:aa:ee:11:0d:0b:28:c9:6e:11:03:6f:68:b6:0b:60:94:
b4:71:0c:e7:51:d7:53:58:83:32:ca:0f:2c:e7:97:f5:03:99:
47:46:14:65:cb:3d:dd:3c:f9:48:14:3f:cb:9f:96:64:92:86:
f5:25:04:11:bc:90:59:f5:86:fa:ef:bb:47:1d:35:ce:18:a8:
30:b8:c8:84:83:44:0d:dd:1e:78:18:b6:9d:f4:5a:99:dd:12:
a9:b8:2d:74:69:03:bb:2c:bc:b5:ab:fa:c2:ae:92:d2:20:01:
d3:44:24:2f:f1:e1:ea:0e:36:a9:1a:fa:32:50:65:39:fb:8f:
f4:3b:40:9c:71:db:ef:2d:1e:d4:e3:3c:0d:44:dd:e4:61:63:
8d:81:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:01 2026 by rpki-client