
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier: EDYLTMAl2OlbTjgfWcd6J6mWxu9j5y6YdsUmBq9/XK4=
Subject key identifier: 76:DC:57:0A:53:F7:E2:9D:EA:BE:F0:23:8D:81:C6:73:FD:28:5A:A9
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number: 04A2
Signing time: Thu 23 Jul 2026 00:49:28 +0000
Manifest this update: Thu 23 Jul 2026 00:49:27 +0000
Manifest next update: Thu 30 Jul 2026 00:49:27 +0000
Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: ID/T70AjhN/3pOEx3BQObe+a56wSlLHsqcUaT5tUhFw=)
2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Validity
Not Before: Jul 23 00:49:27 2026 GMT
Not After : Jul 30 00:49:27 2026 GMT
Subject: CN=6a616518-6448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:4b:d9:5f:9b:fd:f6:22:1f:84:5d:5a:8d:
c9:b4:b7:a3:aa:51:9a:b7:1c:b3:4f:13:ac:89:59:
c3:15:aa:2a:90:c3:e2:90:84:95:10:7d:a3:e2:a4:
90:53:64:01:bf:be:0e:45:3b:5c:96:5e:cb:cc:e0:
d7:a3:1f:28:4b:9d:4d:a5:97:56:71:38:c2:60:bb:
bb:a0:ca:8f:e1:1e:9e:75:a1:42:ff:35:07:a9:d1:
ef:c4:17:6b:97:f1:17:0a:3a:89:c0:0d:5a:58:fd:
fd:16:8b:b3:6a:5f:43:67:4c:44:b3:36:22:60:4d:
ce:a0:7d:3c:65:1c:cd:83:82:a8:d4:d3:80:b4:f1:
b6:7b:b6:9a:7e:b2:02:54:e7:8e:27:01:32:de:30:
a3:87:c7:86:32:c5:f0:8f:a5:e1:e4:44:6c:85:08:
73:59:46:62:4a:1a:a8:47:b8:d1:ae:f7:22:e3:3e:
de:45:ce:84:4a:77:2c:c9:bf:13:b8:ff:a5:43:4f:
42:80:90:05:70:a1:60:93:9a:f7:9a:07:69:f8:d5:
07:f7:40:9b:99:04:46:82:f8:92:52:bf:59:50:65:
66:89:7a:66:eb:b7:9e:32:0c:19:0c:4f:98:1d:2a:
c2:ba:6f:18:5e:e8:30:9f:72:68:68:93:a3:58:17:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:57:0A:53:F7:E2:9D:EA:BE:F0:23:8D:81:C6:73:FD:28:5A:A9
X509v3 Authority Key Identifier:
keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:d1:4c:67:5b:fc:0e:18:26:7b:e8:75:1b:13:4b:1a:27:
03:f9:33:b6:21:48:b7:3b:b2:bb:50:82:51:87:56:02:69:da:
06:a6:d8:89:28:3e:df:94:3a:3f:c4:4c:19:23:4c:3f:00:d6:
23:f3:32:f6:83:18:81:75:69:27:b8:13:5f:00:f5:58:62:23:
fd:1b:5b:00:4b:69:d3:a6:79:5d:8f:25:f0:c4:59:44:1f:f8:
38:1a:7e:94:1f:12:61:75:94:34:ce:d4:ce:c3:40:91:f1:83:
ba:35:53:e3:98:13:cb:90:2b:cc:82:93:bb:78:56:de:a6:0a:
ca:db:60:5c:28:0c:d8:76:54:34:83:b9:c9:cc:1a:e0:d0:29:
37:e8:e6:98:9c:0e:b5:35:38:fa:4e:09:b9:70:56:fa:49:c9:
81:87:d8:44:6b:0a:35:68:2d:e6:13:56:9c:0c:82:25:ed:65:
22:68:be:3e:10:79:8d:fe:bb:c9:92:12:fd:43:23:de:17:4e:
01:f6:2e:53:d8:18:0f:27:df:42:d1:f1:97:49:29:16:ef:61:
16:6a:a3:69:ad:de:5e:d8:92:86:0d:60:bd:15:d5:54:9e:7d:
69:5a:04:84:9f:7c:f6:5d:2c:df:3d:34:70:c8:d1:cc:af:b4:
88:ac:2e:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB
MUE2RkVBM0EwHhcNMjYwNzIzMDA0OTI3WhcNMjYwNzMwMDA0OTI3WjAYMRYwFAYD
VQQDEw02YTYxNjUxOC02NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2K5L2V+b/fYiH4RdWo3JtLejqlGatxyzTxOsiVnDFaoqkMPikISVEH2j4qSQ
U2QBv74ORTtcll7LzODXox8oS51NpZdWcTjCYLu7oMqP4R6edaFC/zUHqdHvxBdr
l/EXCjqJwA1aWP39Fouzal9DZ0xEszYiYE3OoH08ZRzNg4Ko1NOAtPG2e7aafrIC
VOeOJwEy3jCjh8eGMsXwj6Xh5ERshQhzWUZiShqoR7jRrvci4z7eRc6ESncsyb8T
uP+lQ09CgJAFcKFgk5r3mgdp+NUH90CbmQRGgviSUr9ZUGVmiXpm67eeMgwZDE+Y
HSrCum8YXugwn3JoaJOjWBdmvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbcVwpT
9+Kd6r7wI42BxnP9KFqpMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF
NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR
b0RlQkJTcmQ0dXlocHY2am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAllrRTGdb/A4YJnvodRsTSxonA/kztiFItzuyu1CCUYdWAmnaBqbYiSg+35Q6
P8RMGSNMPwDWI/My9oMYgXVpJ7gTXwD1WGIj/RtbAEtp06Z5XY8l8MRZRB/4OBp+
lB8SYXWUNM7UzsNAkfGDujVT45gTy5ArzIKTu3hW3qYKyttgXCgM2HZUNIO5ycwa
4NApN+jmmJwOtTU4+k4JuXBW+knJgYfYRGsKNWgt5hNWnAyCJe1lImi+PhB5jf67
yZIS/UMj3hdOAfYuU9gYDyffQtHxl0kpFu9hFmqjaa3eXtiShg1gvRXVVJ59aVoE
hJ989l0s3z00cMjRzK+0iKwuzA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:58 2026 by rpki-client