
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: w2j10ZG6gZ0t33z7zY66j3KFMTYSUjKVwiz2tFulvUY=
Subject key identifier: C8:3B:CE:F2:CF:CC:2A:CD:B8:C2:15:D9:91:AD:48:A0:31:5A:03:F8
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 0892
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 088A
Signing time: Tue 24 Mar 2026 20:21:22 +0000
Manifest this update: Tue 24 Mar 2026 20:21:21 +0000
Manifest next update: Tue 31 Mar 2026 20:21:21 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: VqWri1eiMe9HSGMfmUuy6g5TtCm736jzK1bmzQ+Hwi0=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: Lubg1etHnAX3Eexr1F6RZ/V0j32jER/ID7u87KtGroA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2194 (0x892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Validity
Not Before: Mar 24 20:21:21 2026 GMT
Not After : Mar 31 20:21:21 2026 GMT
Subject: CN=69c2f241-d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:7f:64:41:96:a3:2d:29:4c:e5:b0:fa:57:
79:8f:47:6c:7f:b0:d6:43:7d:5b:c6:e4:49:31:79:
2a:5b:23:d4:42:97:ec:03:82:5c:98:8c:54:93:fe:
54:32:6e:58:e0:9a:65:9e:15:43:eb:cf:c2:17:8e:
a9:b8:ed:63:9e:b1:fb:e6:8f:53:d7:17:ca:30:1e:
66:e5:ca:38:0a:c2:cc:e2:a6:b3:22:63:cd:ad:b0:
b6:4a:51:56:ca:d1:48:32:4d:5d:b5:d4:1d:73:14:
4c:ba:c0:aa:0a:9b:cf:a4:9c:0d:e2:aa:05:ce:6a:
04:8c:2d:38:27:a1:11:d3:a0:03:15:da:00:c6:cf:
51:8f:ad:8d:40:80:71:63:ba:24:3d:c3:98:f3:e5:
d6:6d:f6:f3:51:02:83:b3:c8:86:60:b5:79:0f:39:
5c:05:56:76:a8:11:14:48:14:f1:57:f2:af:b5:28:
1a:1c:cc:d0:3b:5d:09:b0:a9:6e:10:85:f5:3c:41:
fc:84:99:62:4b:1a:d6:f2:77:a5:f4:7a:8f:65:42:
e6:54:94:b3:55:79:36:9b:33:60:51:e2:26:82:43:
6f:a4:0e:82:a0:21:df:f5:95:88:8a:6b:1a:3f:fb:
92:23:14:35:07:2b:c2:7c:fc:5b:19:9e:85:7d:6e:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:CE:F2:CF:CC:2A:CD:B8:C2:15:D9:91:AD:48:A0:31:5A:03:F8
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:dc:36:fd:16:f8:72:56:50:c9:e4:c8:b6:2e:17:2f:ef:
72:a4:b3:71:c9:91:64:2a:53:28:ab:d7:a1:4c:16:d9:de:5c:
dc:3e:a7:4e:35:d2:fa:c2:4a:a9:ed:62:da:87:16:3e:6c:4a:
db:c5:79:de:b7:9b:b9:d1:88:3b:d0:86:eb:aa:d0:01:c4:04:
62:e8:71:8e:93:80:ec:41:19:1c:f4:34:f0:59:90:dd:4c:ad:
5f:3f:92:4c:b4:58:70:7f:48:48:f2:1a:a7:75:50:d5:57:1e:
03:ba:85:be:73:36:d2:eb:51:3a:4f:09:45:ba:43:11:88:91:
c5:05:de:7a:4c:c8:ae:30:a6:36:8c:53:91:58:10:a1:f7:2c:
29:1a:4b:7d:06:19:9a:eb:a9:5c:be:9f:00:b2:f3:b8:26:84:
06:12:fe:1f:f5:08:62:e7:f6:5b:19:6c:fb:49:a9:ea:56:29:
50:0e:da:d6:45:b6:ad:3f:c0:69:90:1f:43:4f:d2:79:e5:bb:
b2:ef:8b:40:17:74:ca:c1:2a:8c:b8:2a:4c:ca:39:0e:c9:da:
f2:1b:19:d2:d2:c1:33:bc:a1:60:70:75:c1:3b:16:3a:0e:1b:
8d:a5:de:90:3e:77:08:f6:46:db:e2:a4:2b:8d:24:5a:a8:f8:
9c:96:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:17 2026 by rpki-client