
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: sNwFXvw5nhd+EekRILn6+gZsVfLeSWbG5MOYi/6Vz+Q=
Subject key identifier: 98:E1:EB:7F:3C:61:42:A4:E2:71:E7:30:CF:18:4A:C3:68:06:70:D6
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 08F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 08EA
Signing time: Thu 24 Sep 2026 20:19:17 +0000
Manifest this update: Thu 24 Sep 2026 20:19:16 +0000
Manifest next update: Thu 01 Oct 2026 20:19:16 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: 2C2RJ9BSAdPi3ImTOZ2KWCQbqv+YF4a+uP3XfyG3bfA=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: llyuXvewMNe0VqKDq5oyIJpvEqxm6fBiNkxTAaxfIO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Validity
Not Before: Sep 24 20:19:16 2026 GMT
Not After : Oct 1 20:19:16 2026 GMT
Subject: CN=6ab585c5-c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:8d:57:2f:f3:3d:49:af:e8:6a:26:7a:71:
13:65:c3:f9:36:71:c1:9d:f3:3f:2c:70:47:00:4e:
23:82:6d:34:02:95:fa:1d:1a:60:57:f8:31:e8:1b:
ac:55:eb:b4:bd:8f:cc:95:04:1c:1c:62:6a:c7:58:
75:55:00:e7:92:4e:48:d3:48:70:0d:0a:fa:d3:8e:
7d:e5:f6:2b:9f:1e:f6:80:d7:73:f8:63:d6:b0:66:
83:6a:8f:cf:6b:01:9a:04:93:15:74:47:29:cf:83:
b9:17:57:b5:0a:b8:d9:83:d8:5e:1d:64:23:0c:68:
24:e7:8e:32:65:9b:66:5d:c3:70:cb:86:dd:25:7e:
e7:e2:70:49:9a:1d:9a:02:eb:86:21:78:7a:ec:73:
8a:f4:68:48:6b:a1:3d:ed:cc:08:25:c2:45:a7:cc:
51:dc:66:54:12:be:1d:83:dd:8f:e0:01:34:b1:bc:
27:af:1e:8e:2e:de:1a:e7:dd:ca:7b:2f:69:88:b6:
1e:1e:ad:2c:bd:46:ff:ac:be:18:83:46:6b:0e:76:
ae:be:76:c0:68:c8:68:71:b2:14:dd:9c:a7:dc:26:
7f:b2:81:78:2f:0f:d2:75:36:07:11:a3:ac:2f:59:
bb:25:4a:6f:64:95:16:d4:6e:3a:c2:29:31:a2:a8:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:EB:7F:3C:61:42:A4:E2:71:E7:30:CF:18:4A:C3:68:06:70:D6
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:e3:f9:e9:0f:c7:05:cf:ab:8e:93:26:1b:b0:44:52:4d:
de:85:f0:9a:df:b8:d4:b5:3c:c3:be:c9:11:5f:7f:ff:12:66:
b3:a1:07:0e:ed:6e:ac:b8:fa:bb:50:24:f9:a6:42:56:2f:09:
5c:cc:61:b6:33:17:71:09:ab:f1:89:cd:3f:31:61:ad:62:e9:
72:fb:66:27:dd:ac:2e:90:6b:fa:a6:b8:54:23:ce:10:b2:22:
f0:56:19:07:2c:fe:53:99:d5:01:aa:f3:f0:31:b6:a1:10:4d:
57:2c:f5:8d:24:af:62:04:43:87:6b:86:76:86:69:0e:2d:7b:
27:ce:63:f1:e6:a6:81:dc:95:bc:52:59:1c:97:87:3d:26:9c:
7c:04:f2:5e:db:6a:36:2b:52:75:c1:03:cc:12:41:1b:95:fa:
02:2f:1f:3c:ed:86:ce:1b:36:8a:a0:4d:cf:e9:4f:e7:9f:a7:
d0:68:06:41:d1:68:e6:82:bb:ba:c6:ac:de:70:61:c4:1b:b9:
17:f9:90:9d:a0:27:9e:ac:bd:ba:34:ae:62:c7:ff:c9:10:65:
0b:4c:94:f9:98:7d:3b:67:f7:5f:dc:36:4f:25:5f:a3:68:17:
a7:98:6e:09:94:e8:07:ea:be:5e:c6:83:7f:13:01:42:86:15:
1c:76:d6:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB
RDIxMjcwREIwHhcNMjYwOTI0MjAxOTE2WhcNMjYxMDAxMjAxOTE2WjAYMRYwFAYD
VQQDEw02YWI1ODVjNS1jODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9+NVy/zPUmv6GomenETZcP5NnHBnfM/LHBHAE4jgm00ApX6HRpgV/gx6Bus
Veu0vY/MlQQcHGJqx1h1VQDnkk5I00hwDQr604595fYrnx72gNdz+GPWsGaDao/P
awGaBJMVdEcpz4O5F1e1CrjZg9heHWQjDGgk544yZZtmXcNwy4bdJX7n4nBJmh2a
AuuGIXh67HOK9GhIa6E97cwIJcJFp8xR3GZUEr4dg92P4AE0sbwnrx6OLt4a593K
ey9piLYeHq0svUb/rL4Yg0ZrDnauvnbAaMhocbIU3Zyn3CZ/soF4Lw/SdTYHEaOs
L1m7JUpvZJUW1G46wikxoqhHjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjh6388
YUKk4nHnMM8YSsNoBnDWMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5
MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt
OGJYQVVyNDI3WW10SVNjTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANXLj+ekPxwXPq46TJhuwRFJN3oXwmt+41LU8w77JEV9//xJms6EHDu1urLj6
u1Ak+aZCVi8JXMxhtjMXcQmr8YnNPzFhrWLpcvtmJ92sLpBr+qa4VCPOELIi8FYZ
Byz+U5nVAarz8DG2oRBNVyz1jSSvYgRDh2uGdoZpDi17J85j8eamgdyVvFJZHJeH
PSacfATyXttqNitSdcEDzBJBG5X6Ai8fPO2Gzhs2iqBNz+lP55+n0GgGQdFo5oK7
usas3nBhxBu5F/mQnaAnnqy9ujSuYsf/yRBlC0yU+Zh9O2f3X9w2TyVfo2gXp5hu
CZToB+q+XsaDfxMBQoYVHHbWzA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:16:59 2026 by rpki-client