
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: hdQEQ8GcltINug9AJjicqeihE+Hq2kaq3QVa4m8zbm8=
Subject key identifier: 62:E0:53:22:CC:4E:D5:03:B9:BA:09:6A:49:76:4E:69:4D:8E:B4:92
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 07FF
Signing time: Tue 12 May 2026 21:17:07 +0000
Manifest this update: Tue 12 May 2026 21:17:07 +0000
Manifest next update: Tue 19 May 2026 21:17:07 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: Eu7MkXQXcozQdfud22kJkrRhX74ay5tcPIdVDp4DdtM=)
2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: 7ymgcj6P1279S5XXSpCepa419faVvXeGcEB15wSWpx8=)
3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: wHIhwK0cuu0TCIgwSyAlWZMYLOUEIP5XRfvTBvqmJf0=)
4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: P2CEyl9OyHCD/1DuLCNfzXBBwkFTLi3o8drVnlOWDvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: May 12 21:17:07 2026 GMT
Not After : May 19 21:17:07 2026 GMT
Subject: CN=6a0398d3-ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:59:1f:9f:58:04:84:c2:ce:53:98:0b:f7:
a5:4e:6e:ec:4e:3f:d7:4e:70:90:55:4e:92:e7:e6:
0f:9c:ee:55:f8:9d:f7:4f:e3:c4:28:ec:db:14:41:
0f:53:7a:4d:d7:3b:e3:82:d0:3b:70:e2:28:f9:57:
50:31:b9:7f:8f:33:65:17:55:4f:b6:b2:da:72:3b:
21:2e:f1:e0:1e:25:f7:29:76:e2:ce:b1:ac:36:d7:
53:19:e5:1d:57:ce:13:cf:9c:33:73:34:5d:19:83:
6c:ee:d9:93:1d:84:8b:74:09:1a:81:fe:a8:4a:a9:
5f:39:5b:09:4f:df:9f:00:99:24:b4:4c:18:17:e8:
83:c6:d4:54:d8:38:8d:07:9e:c8:21:2d:b2:7c:2d:
c9:e2:b2:e3:3a:e1:9c:9e:c0:39:03:4e:4a:bf:9e:
c7:c0:5c:f4:92:96:0e:0a:9e:1f:6e:0b:09:82:28:
e2:91:d6:3b:76:43:f1:50:70:97:ea:cc:8d:83:2c:
ec:ed:38:a9:24:da:fd:0f:f3:af:47:33:9c:ac:96:
90:fc:70:e4:21:e2:cf:4f:a4:8e:cd:92:38:84:a1:
12:a7:b1:9c:16:d9:af:61:3b:49:09:5a:0c:61:f5:
03:e6:c1:05:69:d5:e4:58:20:d8:be:31:4f:10:be:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:53:22:CC:4E:D5:03:B9:BA:09:6A:49:76:4E:69:4D:8E:B4:92
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:40:e4:26:af:a1:e5:16:44:2f:ee:a1:5b:fd:bb:17:9e:
42:f6:f6:fb:26:d9:e3:38:72:6c:9e:c1:b0:56:1f:46:2d:af:
d7:b7:8e:04:eb:a5:a3:c6:1e:f2:e7:e1:6e:83:ac:3c:45:ac:
31:07:b1:62:e4:c1:97:ff:a5:05:e6:36:fe:e9:b3:af:f5:33:
87:1a:36:38:dd:e5:e5:c6:95:71:47:5d:75:5c:37:a0:59:79:
0b:d7:2b:4a:f1:37:d2:ed:68:97:8d:3d:bf:39:87:20:b7:93:
af:15:28:f2:44:92:29:3e:f9:9a:f8:06:0f:e4:38:8e:cc:22:
3c:46:5c:6c:7c:74:9b:dc:0d:66:be:06:ef:d3:f8:e3:1d:b9:
15:68:1f:07:4c:ed:9b:fc:f3:ef:e4:84:2c:8a:68:c4:af:00:
a0:d1:df:e2:54:22:56:7d:dc:3e:c1:3e:57:66:74:0e:5d:43:
fa:f7:90:f5:4d:a0:fa:41:b1:83:fb:4d:cd:92:71:76:61:43:
e5:da:e8:2c:4d:9f:ba:88:38:b7:92:d3:14:74:e8:38:d6:8c:
1b:03:9c:6a:85:ab:03:36:da:a3:26:fb:40:11:b8:56:09:8d:
67:b1:35:f5:fb:23:76:63:f0:df:61:6a:76:8d:3e:49:4b:2f:
2b:71:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:00:03 2026 by rpki-client