
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: r40PmmgvCznKkNks/zEwRX0Dlblz3I1MtJd94t7LmiM=
Subject key identifier: D1:00:83:BF:B5:AF:46:4C:F9:71:BA:3F:CD:26:25:90:89:78:35:AC
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 07E6
Signing time: Tue 24 Mar 2026 21:00:53 +0000
Manifest this update: Tue 24 Mar 2026 21:00:52 +0000
Manifest next update: Tue 31 Mar 2026 21:00:52 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: alZ3oRihY6HULivNW96IP302HWT4fJmHdDjnOPPoV1c=)
2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: P2CEyl9OyHCD/1DuLCNfzXBBwkFTLi3o8drVnlOWDvg=)
3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: 7ymgcj6P1279S5XXSpCepa419faVvXeGcEB15wSWpx8=)
4: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: wHIhwK0cuu0TCIgwSyAlWZMYLOUEIP5XRfvTBvqmJf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Mar 24 21:00:52 2026 GMT
Not After : Mar 31 21:00:52 2026 GMT
Subject: CN=69c2fb84-fa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:c2:f5:0a:af:fc:21:75:fc:8a:a7:83:41:
0f:58:b5:af:50:42:90:51:07:cb:b5:72:e8:6a:be:
2e:d7:ea:54:fe:ab:9b:28:1f:ae:f0:9b:dd:ff:30:
28:21:ce:1a:f8:a4:9a:ca:9b:9b:71:53:6d:55:be:
17:da:16:3a:e8:62:3d:be:12:75:79:f2:8a:8e:5f:
d4:d8:7b:2f:23:08:9f:e3:e4:6f:82:5e:78:47:cf:
82:4f:14:ad:60:3b:d7:27:7d:1a:dc:99:79:87:2d:
12:81:22:a1:10:d3:12:73:ae:ff:a0:c2:ae:d5:46:
6c:dd:bc:a5:39:dd:9c:20:03:54:37:90:0d:6c:51:
45:d7:d1:45:fa:97:77:9c:e8:b4:d0:bd:d7:c4:2d:
bf:13:5c:85:0f:44:00:df:97:2c:0f:8c:46:ec:c3:
fc:63:8c:5b:74:4c:08:2b:a4:ac:23:c7:9d:0d:1a:
90:7e:55:69:a4:a7:27:a2:2b:42:68:12:d3:c3:96:
7d:dd:c7:97:db:77:45:5c:79:05:b6:f2:11:c4:e5:
e7:ce:eb:1a:de:d3:bb:d6:4a:3a:92:61:b7:fb:02:
3d:d5:71:ed:91:5e:d4:b5:51:da:80:df:04:d5:71:
37:e4:a8:fc:e5:bd:6c:da:8e:62:58:01:a4:9f:77:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:83:BF:B5:AF:46:4C:F9:71:BA:3F:CD:26:25:90:89:78:35:AC
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:53:63:b8:46:97:23:76:90:4d:de:54:c2:e7:cd:12:de:
fe:f8:fa:a3:1c:95:67:12:0c:16:fb:f5:14:3a:23:7f:61:ec:
39:e2:0c:21:3f:62:2a:b6:45:b3:7b:d1:ec:1c:cb:05:82:a1:
52:67:78:0c:b9:c5:40:6f:33:ab:a4:32:50:6d:57:1d:ff:74:
ee:57:05:97:d7:c9:c0:ea:5f:d4:cf:e3:c1:e6:8e:74:a1:78:
a1:52:28:8a:29:02:74:29:15:ba:3f:f2:47:70:e7:e3:72:80:
b0:30:d1:67:fc:60:ed:d8:0b:cd:8e:e4:65:17:67:e6:9b:f6:
fd:8c:c1:a3:27:86:89:43:96:2b:00:b5:70:47:3d:38:ea:fe:
de:46:89:f9:f6:3c:27:f6:62:b2:96:d6:6d:0c:31:fa:c1:df:
95:ae:16:24:2d:e8:ec:7f:48:e1:51:93:4b:77:ae:c9:f0:2e:
ca:6b:8a:e2:18:1d:86:e0:c9:5d:9e:b0:8e:57:1f:76:cd:1e:
de:25:57:1a:01:1d:03:fa:ea:a4:72:3f:d8:84:37:c5:7e:8c:
75:f3:a6:26:a8:6d:e7:b9:ba:fc:85:9d:e2:7f:7c:ac:81:18:
8c:ca:84:2d:b8:1a:01:3d:b0:d6:7e:fe:ff:be:4e:96:99:02:
66:de:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:07:14 2026 by rpki-client