
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json)
Hash identifier: uKQColtMGp4VN5iDxt5Kt5v4plEyZUzIa88zG2lKU9c=
Subject key identifier: 2E:67:2F:8F:37:C8:2E:C2:77:BA:FD:A2:06:6D:94:81:33:C4:07:15
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 09:28:02 +0000
Manifest this update: Thu 23 Jul 2026 09:28:01 +0000
Manifest next update: Thu 30 Jul 2026 09:28:01 +0000
Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: 8u/bMol+2jwPBsbWNDy8xEehNalUDCebqIQ89hY14b8=)
2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: SKL3oSLnK/OGS9FsL+y9x7HH2AFOMsHaA5PqrntVpi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Validity
Not Before: Jul 23 09:28:01 2026 GMT
Not After : Jul 30 09:28:01 2026 GMT
Subject: CN=6a61dea2-2c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:75:05:95:0a:e9:6d:c7:70:65:bb:f7:5a:
5d:e7:00:e8:55:f3:f6:c6:ec:f4:44:21:11:06:aa:
2b:cb:c5:17:6f:47:13:85:e4:18:4d:94:e1:33:3c:
e3:11:c0:12:98:9d:cf:6c:8c:cc:be:5e:da:d5:14:
0b:19:de:05:a6:af:db:7a:1c:45:9f:f3:32:72:ba:
aa:d3:13:43:04:2e:0d:e8:d7:ff:f0:a6:62:54:01:
f6:4d:51:8c:e0:5c:32:c3:7b:79:8d:cd:a8:96:3e:
cf:d5:b0:d4:7f:e1:42:3d:05:cd:65:51:42:f7:12:
d3:bf:22:e3:49:a8:3a:05:c2:4b:9f:80:de:0c:4a:
b5:d0:dc:0a:0b:60:60:e9:04:75:ac:4b:6e:99:a5:
80:82:38:0e:9b:e1:37:78:70:5e:e6:1e:05:3b:bc:
0d:50:0e:51:8f:6e:16:db:64:53:60:70:6a:fc:02:
6a:79:88:69:db:5f:5f:58:58:c8:bd:7d:cc:76:40:
64:71:a5:19:52:68:4d:9b:de:6c:59:b1:ef:8b:3e:
1d:ef:b2:17:e3:57:4c:f0:00:9e:ef:a5:cd:6d:76:
c1:7a:07:68:4e:f9:d1:98:73:b9:8d:fc:6e:a8:b4:
f2:65:cf:4d:87:07:c4:3c:d1:92:47:44:10:80:5d:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:2F:8F:37:C8:2E:C2:77:BA:FD:A2:06:6D:94:81:33:C4:07:15
X509v3 Authority Key Identifier:
keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e0:a6:8c:d3:97:ba:ad:11:e2:e8:5f:28:68:93:45:f7:08:
41:0b:64:a4:91:7e:8a:45:fa:7f:6d:2b:79:de:6f:08:f7:03:
f8:0e:cc:32:d4:34:46:54:70:b9:94:05:aa:ac:3a:aa:23:58:
ab:04:36:8d:c4:a7:b1:f0:98:04:c7:08:33:4e:1a:0c:66:02:
96:6d:9e:65:73:65:d6:66:43:44:62:7d:f7:66:de:0f:4f:df:
cf:86:a6:d9:e3:c1:04:1d:32:a2:4c:89:b8:da:f1:7a:c2:e2:
a0:b6:7d:fa:68:86:0e:d7:24:f8:a7:b1:be:e9:f8:05:5f:5e:
c3:98:2a:2d:12:4f:14:85:b3:ed:46:ce:f7:7d:d3:ca:59:b7:
66:8d:8d:0b:a7:45:85:de:93:8b:6f:5d:23:74:76:f0:9c:88:
47:e0:10:98:55:5a:c7:78:91:22:d6:b8:d8:b2:c8:85:90:b9:
6f:25:ae:5e:2b:a3:34:cc:e2:5e:3c:82:01:6f:f4:7a:5a:01:
28:f0:8b:fe:9e:d7:49:e4:4f:56:cb:fa:eb:f3:fb:4a:38:71:
af:7f:62:10:67:76:b1:f8:04:0a:d9:e3:10:79:30:5c:ae:8e:
68:17:7b:d7:7b:bf:63:10:dd:98:98:9c:56:5e:ea:49:d0:17:
08:4a:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:13 2026 by rpki-client