
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json)
Hash identifier: wOhFlmadWB5DqWS2XwbbmcEFVrgWIGBbChVI1KgamVA=
Subject key identifier: B0:E5:30:2F:53:21:E4:FD:23:79:F5:0D:41:AC:F8:E8:CD:85:A2:FE
Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
Manifest number: B1
Signing time: Fri 09 Oct 2026 07:43:42 +0000
Manifest this update: Fri 09 Oct 2026 07:43:42 +0000
Manifest next update: Fri 16 Oct 2026 07:43:42 +0000
Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: WQ2pPCByD5c6XY0NoqCwUxkl+d/pTm3Wdd+0tRmK+WU=)
2: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: 91XVnfqDvuubQ63399MOb9g9RyzRumGsmN3T5NY63OE=)
3: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: ym/P1+PLUpEQKVLi2u6tem8jb0mTZASUmnMv8PJgl7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Validity
Not Before: Oct 9 07:43:42 2026 GMT
Not After : Oct 16 07:43:42 2026 GMT
Subject: CN=6ac89b2e-e3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:ee:10:d5:eb:ed:23:d7:4c:1f:f1:0f:ab:
68:a3:20:83:6d:f3:e9:87:49:26:85:2d:39:b2:a6:
59:5a:20:4c:28:ae:92:fc:3c:79:38:fa:7c:79:56:
2a:1d:1b:bf:89:88:f4:04:2e:bf:03:9d:90:4d:28:
27:f5:b7:f9:30:e6:de:89:c5:e3:b8:24:3d:6e:62:
a1:2a:27:63:a0:45:40:2d:16:15:fc:0c:19:d6:5e:
07:80:ae:00:27:6a:28:f3:35:aa:bc:0d:92:b6:5a:
ef:e0:db:53:ab:04:3e:28:57:55:de:33:fe:f7:5c:
c1:1b:b5:44:76:f2:58:9a:4c:4c:c7:09:63:83:b1:
ac:bc:02:d3:8b:77:29:ff:d8:2b:d8:e9:db:0c:58:
18:1e:a6:10:5e:2d:5c:5e:33:e3:69:7f:15:a7:5e:
6f:1b:32:6d:69:77:7a:a8:50:6d:b6:5b:29:18:2e:
21:d3:c3:4a:39:69:08:3f:62:d6:f2:0d:69:96:55:
7b:e2:6b:38:81:ab:01:54:b2:11:60:18:d3:ff:6c:
a4:71:e7:61:38:ac:38:3f:7b:21:f5:9b:2b:9c:1c:
9f:bb:d7:df:a9:45:65:66:70:18:c9:fd:9f:83:41:
2d:64:ff:c1:7f:a7:94:41:ce:1f:ac:27:48:5d:43:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:30:2F:53:21:E4:FD:23:79:F5:0D:41:AC:F8:E8:CD:85:A2:FE
X509v3 Authority Key Identifier:
keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:c4:11:e5:bb:20:7c:ab:9b:3f:e5:b6:86:f7:bf:5c:f7:
b3:56:1d:53:46:e1:ac:bb:12:c7:a4:3e:59:22:02:f9:b3:20:
a1:af:c5:2f:03:a0:52:11:df:91:b7:11:95:29:c8:26:7e:e3:
eb:5a:35:4d:f6:d2:28:a6:f0:7a:a6:2b:94:8e:c5:7d:a6:cd:
0b:20:b2:57:ae:dd:c6:0d:b4:6b:bb:70:35:f9:a9:3c:25:f2:
11:87:96:d1:9e:b7:75:d5:ea:75:7e:97:9d:cd:4e:e2:6f:8a:
bd:d2:d9:0c:32:61:5e:81:99:f9:06:d3:74:4f:ee:e8:be:eb:
bf:e4:be:2d:b0:fd:fb:6f:cb:d1:d9:05:ff:5b:dc:86:06:5a:
e5:cd:46:b3:13:98:c2:cb:f7:a9:3a:34:f4:1f:19:b3:13:c4:
36:a6:c2:1e:58:b4:ae:83:28:b9:5f:a2:85:6b:bd:fa:7e:b2:
cd:ad:df:de:99:06:23:2e:2d:2e:9b:37:d2:09:f4:5e:19:cd:
dd:3d:ac:dd:0f:c9:aa:75:25:9e:d4:10:04:8f:b2:c3:74:54:
80:fd:ed:d9:21:ac:e1:28:93:3d:ba:56:13:7f:d5:ca:cd:67:
92:0c:6c:9f:16:90:f0:da:d7:fc:b3:a6:74:17:e7:72:dd:ca:
20:c3:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:08:49 2026 by rpki-client