
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier: 21WgpEwX9e9/oxKdpO7UFuapboVoAnhbzotmGwx6WbM=
Subject key identifier: BD:96:F9:CB:80:34:96:44:A9:A4:3E:A6:73:64:0B:5F:B0:A3:55:4A
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 09:52:14 +0000
Manifest this update: Thu 23 Jul 2026 09:52:13 +0000
Manifest next update: Thu 30 Jul 2026 09:52:13 +0000
Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: jwmsgQZzx0F704ZmzL5aQhl7raRylixKBcd0qmxVl/U=)
2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Validity
Not Before: Jul 23 09:52:13 2026 GMT
Not After : Jul 30 09:52:13 2026 GMT
Subject: CN=6a61e44e-1eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:f5:48:47:87:ad:59:38:90:fc:ec:e3:b0:
6a:44:0c:a7:03:00:d5:1d:40:b8:da:89:0f:4b:7b:
0b:16:8b:90:9e:5d:43:a8:9c:f1:92:a1:e6:90:dc:
49:7b:e7:31:6d:7e:8e:d1:ee:73:be:f4:11:6d:35:
ea:28:de:e6:8a:59:0f:ba:83:a9:76:9e:06:ec:c2:
92:00:5f:05:38:16:74:a7:44:07:a1:46:ce:1b:05:
01:77:f6:03:2b:e5:38:d0:d1:1c:c5:0b:57:03:47:
1c:44:86:00:ce:94:c1:ff:7e:bf:18:d1:98:de:65:
e9:10:87:5b:ae:66:ab:00:0a:53:77:38:7e:f0:fd:
b0:cb:f0:2e:6d:4d:8c:61:bc:ee:34:f6:d7:95:48:
f5:87:8f:da:c7:60:cf:84:b3:bb:22:25:67:50:3a:
63:79:f7:52:af:69:2d:fc:d4:65:20:95:05:ea:00:
8f:1f:39:7b:b8:67:b5:cb:58:5e:dc:73:ef:2e:62:
e7:d1:69:32:90:ee:7f:bc:28:1b:59:f5:7f:5a:66:
e9:73:9f:d7:22:66:54:24:01:36:d7:a2:24:4a:99:
95:6e:e0:bb:b0:64:b9:39:72:4e:ff:75:27:97:a9:
e3:16:7a:5a:15:fb:c3:a6:1d:26:d0:17:69:f5:65:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:96:F9:CB:80:34:96:44:A9:A4:3E:A6:73:64:0B:5F:B0:A3:55:4A
X509v3 Authority Key Identifier:
keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:d2:75:af:f5:67:30:47:63:02:a6:a5:a0:c3:48:dd:7e:
05:d7:66:1f:78:a5:fe:7b:23:35:15:c6:8f:93:12:ac:fe:18:
91:c4:4a:90:50:0e:0d:4a:26:d5:b2:27:d5:ed:37:0c:a4:44:
76:45:d1:b3:51:32:6e:14:ab:c1:9f:00:c7:73:38:13:f3:19:
82:0f:a8:19:08:00:ef:9f:34:93:bd:ae:44:e4:4d:b5:e6:da:
73:3f:52:f6:d5:96:41:8e:f1:38:cb:20:69:ba:50:76:82:f5:
56:05:6e:d0:21:d7:dd:fe:18:8d:00:b1:e7:6a:3c:f6:9c:a0:
b2:8a:76:67:7a:b0:3e:bf:84:67:4e:64:90:aa:d0:42:02:cb:
32:1e:24:cf:f3:a5:be:ba:79:5b:ef:f5:52:2b:ce:4a:dc:ba:
2a:36:fb:26:74:ba:ca:80:3d:4c:6a:7b:70:54:7b:32:2f:29:
51:ca:53:d4:97:d7:1b:94:c3:8e:03:35:35:70:31:e1:ba:c5:
ae:58:13:53:02:b0:da:df:d6:43:65:49:b4:50:6f:f3:44:4e:
3c:92:b6:a2:48:be:ff:a0:8a:59:2f:b3:67:e9:ee:1f:0f:a2:
f6:65:50:9c:8d:a1:2c:c5:62:06:ae:5a:60:a7:47:56:4c:9e:
8c:7d:78:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QkQ2RTExMC8GA1UEBRMoNjlBRTM1Q0RDRTYzN0VCNjQ1RUI1MDY1RURFMTJENThF
NzU5OTIzNjAeFw0yNjA3MjMwOTUyMTNaFw0yNjA3MzAwOTUyMTNaMBgxFjAUBgNV
BAMTDTZhNjFlNDRlLTFlZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdp/VIR4etWTiQ/OzjsGpEDKcDANUdQLjaiQ9LewsWi5CeXUOonPGSoeaQ3El7
5zFtfo7R7nO+9BFtNeoo3uaKWQ+6g6l2ngbswpIAXwU4FnSnRAehRs4bBQF39gMr
5TjQ0RzFC1cDRxxEhgDOlMH/fr8Y0ZjeZekQh1uuZqsAClN3OH7w/bDL8C5tTYxh
vO409teVSPWHj9rHYM+Es7siJWdQOmN591KvaS381GUglQXqAI8fOXu4Z7XLWF7c
c+8uYufRaTKQ7n+8KBtZ9X9aZulzn9ciZlQkATbXoiRKmZVu4LuwZLk5ck7/dSeX
qeMWeloV+8OmHSbQF2n1ZXVNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvZb5y4A0
lkSppD6mc2QLX7CjVUowHwYDVR0jBBgwFoAUaa41zc5jfrZF61Bl7eEtWOdZkjYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0JGNEYyNDdBRTI5
MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJaRjYxQmw3ZUV0V09kWmtq
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWE0MXpjNWpmclpGNjFCbDdlRXRXT2Raa2pZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC
RDZFL0JGNEYyNDdBRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJa
RjYxQmw3ZUV0V09kWmtqWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcJNJ1r/VnMEdjAqaloMNI3X4F12YfeKX+eyM1FcaPkxKs/hiRxEqQUA4NSibV
sifV7TcMpER2RdGzUTJuFKvBnwDHczgT8xmCD6gZCADvnzSTva5E5E215tpzP1L2
1ZZBjvE4yyBpulB2gvVWBW7QIdfd/hiNALHnajz2nKCyinZnerA+v4RnTmSQqtBC
AssyHiTP86W+unlb7/VSK85K3LoqNvsmdLrKgD1MantwVHsyLylRylPUl9cblMOO
AzU1cDHhusWuWBNTArDa39ZDZUm0UG/zRE48kraiSL7/oIpZL7Nn6e4fD6L2ZVCc
jaEsxWIGrlpgp0dWTJ6MfXin
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:57 2026 by rpki-client