
$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json)
Hash identifier: o3WDeqRC1jMC2Zf1/aIbCuZ5//EcTn/VR08B/Oi9MgA=
Subject key identifier: 99:44:9C:74:06:C9:E1:46:E9:AD:BD:28:6E:A7:29:A4:F0:E5:A1:98
Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Certificate serial: 1139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
Manifest number: 112F
Signing time: Tue 12 May 2026 17:15:23 +0000
Manifest this update: Tue 12 May 2026 17:15:23 +0000
Manifest next update: Tue 19 May 2026 17:15:23 +0000
Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: 8y8HItmbl95vJP0lyv9ccEg9ELuZSgiBs3doFsYQgWY=)
2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: SI73iX7YVYH0Z3qx2ioj4CoqGRWdJrbUA/hXufqjWIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4409 (0x1139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Validity
Not Before: May 12 17:15:23 2026 GMT
Not After : May 19 17:15:23 2026 GMT
Subject: CN=6a03602b-82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:81:88:35:c7:1a:6f:88:6c:65:dd:c8:d2:
83:8b:f8:8b:ae:6c:3a:ce:82:d6:74:06:ea:7e:0f:
39:60:41:d7:97:6d:b4:40:7e:fc:46:78:d2:bb:c8:
8b:a0:e5:09:c5:9c:cd:f6:ca:39:86:f8:f4:2f:4c:
28:48:87:a9:00:f3:93:7f:98:b4:30:26:87:ea:49:
d9:b4:e6:55:f6:bd:3f:f8:58:e8:68:36:38:7e:63:
72:da:f9:90:ab:35:da:7b:5b:6d:9d:cf:3f:93:38:
2b:21:7b:e0:00:aa:bb:b7:0b:21:c7:65:00:bb:28:
f3:48:35:66:3a:15:ca:53:48:55:ac:bb:41:6c:28:
68:79:6e:3a:dd:f9:c1:6f:3d:f5:94:5c:a4:e4:c2:
d8:dc:d1:f2:45:7e:0c:13:83:d4:a8:bc:1e:0f:98:
46:fb:c3:bf:d6:a8:42:8a:df:cf:3d:b7:7a:e5:26:
a6:ff:7a:df:18:26:0b:ac:71:67:cd:f5:88:a1:96:
43:69:c9:88:8a:eb:ba:d3:73:2d:64:f0:23:a4:81:
36:56:a0:37:fb:90:30:4d:b1:1b:21:1b:b1:6f:60:
44:08:58:d1:c1:0f:72:ff:41:21:1e:4e:e5:78:41:
a1:27:c7:94:0f:50:c9:59:c7:18:fb:93:7b:c8:95:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:9C:74:06:C9:E1:46:E9:AD:BD:28:6E:A7:29:A4:F0:E5:A1:98
X509v3 Authority Key Identifier:
keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cb:4c:3b:52:1f:75:e6:a8:a5:55:9e:30:cb:2a:db:39:9e:
a6:c2:3b:c0:af:bf:6e:8b:c8:9b:f8:0a:51:b9:a0:b1:bd:54:
81:f1:bc:e6:25:32:4e:d0:b9:40:3f:78:a7:45:8d:2e:c0:ea:
ef:41:d4:7d:85:50:4a:0d:5d:c8:81:30:6e:05:88:6a:66:4f:
d1:63:9c:3d:07:85:36:a4:57:da:70:1b:25:cc:f3:39:11:56:
7b:0a:1b:be:55:df:b9:26:45:af:bc:b6:ce:61:9b:20:95:d0:
cd:e0:6e:b3:82:85:06:c8:4d:0e:d0:6d:1b:db:54:60:3b:63:
8a:49:67:ca:36:fe:97:89:c8:b7:72:b0:6a:cb:fe:8a:73:22:
88:12:04:9c:2c:40:d8:ac:11:ae:68:ae:69:b3:71:a0:07:88:
85:0f:94:df:ab:46:06:7d:a8:43:5f:de:54:f2:3b:e8:49:7d:
d8:3e:db:34:6a:9c:0e:89:84:62:26:53:73:d3:0e:12:78:50:
3e:a9:85:43:76:8b:9a:ff:e3:af:6f:f6:a5:b8:92:f2:98:d8:
4d:67:ad:3b:6a:d7:2c:e3:e5:5a:9d:06:1e:4f:9e:53:95:f1:
ca:99:c0:e0:b8:9b:28:13:7a:0b:ff:d4:2a:4d:51:48:36:78:
56:74:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:22 2026 by rpki-client