
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json)
Hash identifier: 34jg2NxaEnNoFmWFd1fpLM4UZAUBZcvNjh+di1oBQbE=
Subject key identifier: 05:A3:BB:81:2C:8A:F3:59:01:26:68:8A:3B:3B:0E:35:8C:EE:A4:E9
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 17BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
Manifest number: 17A0
Signing time: Fri 24 Jul 2026 16:43:48 +0000
Manifest this update: Fri 24 Jul 2026 16:43:48 +0000
Manifest next update: Fri 31 Jul 2026 16:43:48 +0000
Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: 4oUWD8fI2EdjBU9Qcg5mFq3OzYe7itpLNPu/JChRrGg=)
2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: RfIwQugUF5e4NxZfyETqjmTf0Zh9v0gdDlStWYdhYuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6074 (0x17ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Jul 24 16:43:48 2026 GMT
Not After : Jul 31 16:43:48 2026 GMT
Subject: CN=6a639644-4a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:b7:4d:54:ab:23:9e:cd:29:4d:67:f2:82:
ea:8c:90:85:2c:22:d1:56:9a:8d:f1:3a:c1:a9:36:
1d:67:0b:c8:bb:4c:40:3b:c9:eb:56:b6:05:12:3c:
b9:f6:d5:12:2e:ec:de:02:ed:44:03:34:24:ad:39:
4f:99:dc:e0:27:5b:fb:3d:05:8d:b5:24:40:6e:fa:
2c:6f:2f:31:31:98:e1:65:50:ad:1d:7a:81:27:ac:
3b:93:14:21:43:a5:ff:4c:b0:d7:e0:5b:f3:3d:b7:
de:63:46:77:53:70:9c:2e:e8:85:57:65:e5:7e:d7:
60:47:ad:c7:5e:98:c1:ac:cd:02:41:94:ef:0d:fc:
a0:8c:4c:2b:43:28:e4:e4:9a:e2:86:37:50:15:dc:
3e:7d:56:92:f9:65:87:f8:a0:42:4d:00:55:a7:65:
28:d9:e5:15:3f:bc:0f:d6:cc:d3:47:71:52:9c:a5:
92:48:22:0b:7f:9f:4a:7b:96:f0:8e:e2:78:a1:ed:
f3:3b:68:c8:b5:3f:3f:18:8f:b8:5a:e2:10:80:46:
70:0e:12:f7:aa:bf:1a:27:d8:79:9a:39:f8:8d:5e:
74:0e:74:aa:d6:50:21:96:40:5f:ff:1d:61:b2:ed:
b8:23:7e:97:ec:c9:04:d6:c6:25:ba:ef:a3:97:43:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:BB:81:2C:8A:F3:59:01:26:68:8A:3B:3B:0E:35:8C:EE:A4:E9
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:8e:b0:4e:44:9d:59:dd:5b:7c:60:3c:d0:79:3f:58:4c:af:
70:91:6b:bb:3b:82:93:fc:29:64:c7:6c:6c:8e:b4:f3:0e:1d:
cf:e9:23:a4:44:e2:4c:94:be:53:28:30:21:d5:63:6d:37:ef:
d5:75:21:91:75:18:aa:f7:c8:7a:b7:15:df:a7:da:21:d5:0c:
23:ec:36:55:03:f1:a4:9f:15:05:d3:b5:45:6c:54:78:8a:6f:
55:75:87:80:03:65:8a:a2:b6:59:e2:5a:6d:10:a2:2e:38:45:
7d:46:9c:b8:f8:d5:c8:5e:0f:4a:d2:e5:66:9e:f7:b2:e1:b6:
e9:80:fc:76:61:b5:42:4e:13:0b:24:9d:03:8c:72:b4:7e:15:
55:63:e0:93:50:7c:53:d9:f5:b1:80:a8:96:94:f5:71:aa:32:
ad:19:50:cf:83:a4:a1:d9:09:43:2f:d2:1e:af:92:20:c9:91:
1b:54:0b:08:12:f9:60:be:94:18:d7:51:38:fb:a6:55:dd:be:
21:1e:1f:c2:49:39:d6:79:a3:9c:4d:d4:9a:11:a9:94:62:be:
ab:21:92:e4:1b:86:c2:e8:e1:c8:02:de:71:c1:90:1f:08:69:
18:9e:2a:c5:13:8a:ed:af:05:74:90:9c:82:a3:b6:c1:92:25:
1a:e5:85:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD
M0MwMkVDRjQwHhcNMjYwNzI0MTY0MzQ4WhcNMjYwNzMxMTY0MzQ4WjAYMRYwFAYD
VQQDEw02YTYzOTY0NC00YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm3i3TVSrI57NKU1n8oLqjJCFLCLRVpqN8TrBqTYdZwvIu0xAO8nrVrYFEjy5
9tUSLuzeAu1EAzQkrTlPmdzgJ1v7PQWNtSRAbvosby8xMZjhZVCtHXqBJ6w7kxQh
Q6X/TLDX4FvzPbfeY0Z3U3CcLuiFV2XlftdgR63HXpjBrM0CQZTvDfygjEwrQyjk
5JrihjdQFdw+fVaS+WWH+KBCTQBVp2Uo2eUVP7wP1szTR3FSnKWSSCILf59Ke5bw
juJ4oe3zO2jItT8/GI+4WuIQgEZwDhL3qr8aJ9h5mjn4jV50DnSq1lAhlkBf/x1h
su24I36X7MkE1sYluu+jl0PIQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWju4Es
ivNZASZoijs7DjWM7qTpMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB
NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6
anpyN1dhaldKeFhEd0M3UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF46wTkSdWd1bfGA80Hk/WEyvcJFruzuCk/wpZMdsbI608w4dz+kjpETiTJS+
UygwIdVjbTfv1XUhkXUYqvfIercV36faIdUMI+w2VQPxpJ8VBdO1RWxUeIpvVXWH
gANliqK2WeJabRCiLjhFfUacuPjVyF4PStLlZp73suG26YD8dmG1Qk4TCySdA4xy
tH4VVWPgk1B8U9n1sYColpT1caoyrRlQz4OkodkJQy/SHq+SIMmRG1QLCBL5YL6U
GNdROPumVd2+IR4fwkk51nmjnE3UmhGplGK+qyGS5BuGwujhyALeccGQHwhpGJ4q
xROK7a8FdJCcgqO2wZIlGuWFUQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:57 2026 by rpki-client