
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json)
Hash identifier: CqKS8ctgfGX6qQIL+i0GlT2JmIDGDECoBKfWo4HXpfc=
Subject key identifier: 8E:56:D1:B0:FB:7E:C1:65:4A:EB:AB:25:E4:96:EE:58:BF:FF:31:E0
Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
Manifest number: 89
Signing time: Thu 23 Jul 2026 09:25:55 +0000
Manifest this update: Thu 23 Jul 2026 09:25:54 +0000
Manifest next update: Thu 30 Jul 2026 09:25:54 +0000
Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: x3asV4uujJlgiurvrBv8bG29QVFkiqWCUXawdxs2+sY=)
2: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: 91XVnfqDvuubQ63399MOb9g9RyzRumGsmN3T5NY63OE=)
3: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: ym/P1+PLUpEQKVLi2u6tem8jb0mTZASUmnMv8PJgl7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Validity
Not Before: Jul 23 09:25:54 2026 GMT
Not After : Jul 30 09:25:54 2026 GMT
Subject: CN=6a61de22-b8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:c6:b2:ca:cf:80:77:20:39:9d:41:d5:d7:
ae:d4:ae:9c:54:bb:10:cf:da:ea:23:76:dd:37:b8:
65:b2:eb:5d:09:a5:de:3c:97:0b:e2:9f:7b:d6:fc:
6a:f1:da:5a:61:cf:97:64:9a:8c:37:bd:1f:62:f1:
ee:1e:04:5f:c4:d2:5e:40:f1:95:1a:d0:82:9b:60:
02:c3:d2:46:d9:6c:6a:49:4c:43:51:2b:17:ea:ba:
ae:e2:c7:05:b3:8a:03:65:b7:66:ed:0f:cf:47:56:
94:31:f0:7d:42:30:8b:20:b5:21:ef:3f:24:8b:1a:
80:bc:3a:89:d9:e9:3b:6f:36:dc:fc:f0:f5:6a:b1:
06:2a:79:c3:de:df:36:f6:a4:62:d0:20:dc:c2:0f:
21:cc:88:8f:21:5a:be:93:b7:8a:1f:3a:ca:cc:55:
33:ec:fe:57:86:fe:b2:32:c1:df:87:16:a5:23:a3:
5b:1b:7a:cc:9f:56:1d:af:5e:97:47:70:c7:29:80:
b8:29:c9:e3:19:df:a3:4a:48:8a:b8:ed:ec:ce:a1:
ba:7d:2d:05:57:e0:4f:4f:a8:4c:2d:a6:8c:63:88:
b9:32:19:fe:f7:cf:8c:38:e6:ea:69:63:eb:c0:0d:
ef:b4:92:b8:af:48:95:3d:2a:01:2d:07:72:3e:15:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:D1:B0:FB:7E:C1:65:4A:EB:AB:25:E4:96:EE:58:BF:FF:31:E0
X509v3 Authority Key Identifier:
keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:61:b0:0b:87:78:04:d7:56:e5:bd:f3:c0:07:eb:c7:3c:
d5:91:51:28:48:17:91:2c:43:29:81:76:f3:db:31:66:66:df:
b9:38:a8:93:7c:fa:7b:2f:17:4c:f1:3d:b4:06:14:46:c6:b6:
b0:c2:47:5a:1e:42:ea:b1:8f:46:84:81:78:73:0f:bc:45:97:
a6:7c:24:55:c2:fc:91:4e:26:18:32:8c:66:e0:ac:f5:04:d5:
09:7b:c2:9e:ac:ca:a0:d0:d0:17:97:e3:30:e0:1e:53:f1:f9:
04:8c:23:b1:ce:4a:3c:db:b2:c3:50:1f:80:98:f0:df:14:b6:
a8:75:a3:bf:c4:1d:17:dd:ff:1a:3e:d7:5c:df:28:b1:9b:b4:
14:aa:68:de:76:a2:c1:8b:02:01:78:c1:c2:9d:f4:14:36:08:
b6:53:ff:cd:fa:ca:ff:e6:fd:8d:8a:7c:40:9c:8a:00:80:92:
1a:27:29:72:f6:12:e3:20:3f:43:3a:dc:e1:48:bf:04:a4:49:
3d:4c:71:d9:27:65:84:ad:c4:3a:38:10:b0:ab:63:42:3d:54:
e4:7d:93:d4:7e:ed:ca:46:62:aa:d9:15:c6:d8:55:5a:5d:fe:
81:4e:7c:76:12:3a:a6:c2:bf:c0:77:45:a6:cb:3b:16:0c:5d:
ed:f9:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:35 2026 by rpki-client