
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json)
Hash identifier: YxiFauddFPiuQ6JIKRNRaQjTQbud3cQgXbN042VpKTQ=
Subject key identifier: 62:12:8E:8A:29:57:9C:26:20:37:79:B1:72:0B:45:FD:F4:66:47:2B
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 1791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
Manifest number: 1779
Signing time: Tue 12 May 2026 16:36:32 +0000
Manifest this update: Tue 12 May 2026 16:36:32 +0000
Manifest next update: Tue 19 May 2026 16:36:32 +0000
Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: p8DmvH/skNh8IBfmIkQaJc1Vg86xYu25OVfURmqSQ+I=)
2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: Fg8/Dw7mAMJse8JvCxq2d50l5CfSCBU4vZ7nmbzgYwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6033 (0x1791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: May 12 16:36:32 2026 GMT
Not After : May 19 16:36:32 2026 GMT
Subject: CN=6a035710-00e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:52:37:b0:4f:96:30:ba:79:50:31:11:89:
87:24:b7:05:ba:53:01:5e:dc:81:fb:88:6f:f9:ac:
f6:34:69:26:9f:51:27:57:21:82:52:d1:1b:fa:5e:
ce:10:c0:8c:1b:4e:a5:11:2b:06:cc:62:d1:51:d9:
76:95:1b:04:70:4c:8d:55:72:83:82:4d:bf:d5:cf:
f3:07:0d:e5:9d:62:57:7e:a9:d8:0f:c5:c2:5c:a7:
5c:e5:43:5e:c1:d7:63:e9:d4:03:37:ab:31:54:70:
75:a2:c6:26:56:38:8e:e8:82:52:d5:ed:8a:a5:43:
a7:21:9c:f5:a0:23:e6:82:55:de:df:f9:2c:cf:b9:
78:75:0f:ed:65:19:12:b6:eb:97:de:bd:b6:88:d0:
e9:1f:e4:de:88:b8:c9:3a:a0:8a:d2:71:f0:42:57:
86:81:7b:c1:16:70:53:b0:38:29:42:76:a6:0e:4a:
7a:2d:23:f6:d0:9a:84:64:5e:8a:d4:2c:53:a8:88:
f3:49:22:a0:43:6b:11:1f:9b:25:22:36:0b:fc:29:
a6:d1:61:9b:2c:ee:8f:d9:1e:1c:c7:62:01:0a:96:
ac:1d:e6:cc:6c:1e:84:56:8c:a2:fe:e4:d8:3a:8c:
71:18:9e:81:0d:90:14:23:01:7f:89:ba:bd:45:d1:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:8E:8A:29:57:9C:26:20:37:79:B1:72:0B:45:FD:F4:66:47:2B
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e4:61:09:6d:83:61:a1:d7:6f:5f:6e:22:46:70:53:44:c4:
78:76:22:72:50:10:af:12:dc:85:28:16:17:db:4f:60:65:3b:
02:c0:8e:8e:18:3d:51:03:3b:f9:ab:0e:ac:aa:56:43:de:c7:
60:a1:47:c9:f0:10:27:d6:d6:32:d2:d6:86:1a:c9:9f:0e:80:
a0:31:ac:08:f9:70:39:a7:dc:26:3d:03:64:f6:e1:b7:f8:0f:
23:86:2c:62:fe:b5:3d:f5:84:3a:16:6b:6c:d8:12:d5:35:48:
10:5c:66:d5:32:59:39:5f:17:45:a7:db:c4:a2:03:3d:a5:d8:
b5:5a:9e:1d:7e:43:7c:4d:13:ce:8d:f9:91:9a:91:a9:c2:d8:
05:89:21:b5:05:e4:35:bc:11:99:43:16:2a:b1:b7:0a:8f:44:
0b:d0:29:b7:25:e9:e7:84:9e:7b:a8:44:da:67:62:70:db:42:
7a:7c:d0:aa:fb:50:10:e9:53:3c:37:8e:55:2b:35:55:d5:3d:
c2:ff:8f:b9:5e:6d:19:6b:42:34:0f:29:ff:37:7f:40:ae:06:
10:65:79:af:81:fc:3d:78:d6:95:62:f2:59:e0:7e:44:d6:cf:
69:c1:6b:34:4a:65:15:f5:b9:fb:14:32:50:e5:fb:6e:c0:54:
e3:da:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:42 2026 by rpki-client