
$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json)
Hash identifier: waZBd5kBaEXYuT8+RPZ/vy1sCbFj/iSkIBvEA/Xb2Zs=
Subject key identifier: E1:A5:06:86:54:A7:5A:4E:2C:67:D9:46:A7:04:48:74:F9:F7:F0:A2
Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Certificate serial: 1121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
Manifest number: 1117
Signing time: Thu 26 Mar 2026 17:12:27 +0000
Manifest this update: Thu 26 Mar 2026 17:12:27 +0000
Manifest next update: Thu 02 Apr 2026 17:12:27 +0000
Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: XKAGt4jrs+523e01Pt7UmlVL9jPQVmQlSmJMCwtRuCg=)
2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: SI73iX7YVYH0Z3qx2ioj4CoqGRWdJrbUA/hXufqjWIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4385 (0x1121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Validity
Not Before: Mar 26 17:12:27 2026 GMT
Not After : Apr 2 17:12:27 2026 GMT
Subject: CN=69c568fb-77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:02:34:c4:8e:02:1a:60:ea:61:06:e0:2a:
8a:e0:a2:d6:d4:4e:e5:de:50:e1:6b:21:d4:f0:13:
e2:e3:93:dd:94:9b:06:bc:da:3b:d5:e5:e4:33:a1:
7f:c7:f1:27:4d:90:e7:fe:1f:1b:bb:f0:3c:bc:0e:
02:28:a1:07:39:06:24:34:d6:21:77:34:bc:98:d1:
18:01:59:d1:02:04:8a:cf:84:fe:50:41:2b:b2:94:
db:bc:42:95:3a:b9:be:9d:26:46:a9:43:77:9c:14:
d8:b9:4c:15:60:45:81:1b:71:73:cf:96:1e:a8:81:
6c:ac:d2:dc:fd:4e:f3:30:01:bd:27:ff:0c:33:91:
2f:ef:82:fe:13:90:b0:9b:53:5e:c0:01:d8:23:0c:
99:31:2c:af:17:9f:73:00:e5:6d:a4:38:ab:26:38:
bc:c0:89:2f:ed:1d:b0:8a:b7:5f:22:55:6b:29:a9:
2d:dd:7f:fc:ad:cd:bb:20:8a:8d:82:f4:8c:ef:74:
b9:7e:43:8c:7f:a3:c7:8f:7b:f7:17:3c:d4:fc:16:
93:eb:2c:99:7f:59:3b:5a:bc:00:b4:cd:a8:9f:ba:
25:03:ce:8c:6b:bd:17:e0:4a:67:6a:47:55:09:18:
de:e3:af:60:d7:98:11:c0:6a:0f:2d:86:f1:8d:60:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:06:86:54:A7:5A:4E:2C:67:D9:46:A7:04:48:74:F9:F7:F0:A2
X509v3 Authority Key Identifier:
keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:d9:37:13:c5:c6:3a:85:11:9f:34:c4:7b:1d:79:e5:1e:
af:35:32:2d:ca:9d:34:df:e3:0d:80:93:89:d6:3c:1e:27:0e:
81:8b:91:28:ef:33:8c:39:cc:66:54:fa:ec:0b:af:b4:27:bd:
fe:04:19:16:0f:64:bc:32:6b:83:4c:e3:58:de:4e:d8:73:8e:
82:7d:7e:c0:a2:ac:1b:cc:06:81:1f:5f:8e:6f:ce:7f:4a:0e:
fb:4b:73:04:01:c5:46:33:01:6c:ed:5e:b6:db:56:12:fb:65:
17:ad:08:a0:9e:e8:b3:e9:22:eb:63:e5:0c:de:a4:9e:32:86:
f0:93:e8:07:00:22:d5:1b:25:11:c8:4e:bc:87:ca:8f:ca:fa:
ca:4d:23:51:4c:be:ab:91:0e:4f:10:68:41:7e:0e:b9:83:00:
fb:8c:4e:51:51:72:17:d4:e8:ee:69:25:e5:dd:01:2f:da:2b:
c2:cb:fc:70:c3:b6:25:30:37:be:25:00:bb:59:79:b5:f1:27:
2e:bd:cd:74:34:be:79:6f:a3:26:63:bf:76:82:7c:97:4f:ae:
38:9e:7a:90:69:b9:ed:9c:a4:31:02:c0:68:31:68:ec:d6:78:
9a:9b:1f:81:87:08:9f:79:5e:e1:0d:d0:72:d9:b9:42:02:f6:
f8:f1:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:00 2026 by rpki-client