
$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File: ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier: zYX2T5KL6m3AsTLwobsdVLFxXgtLu/UkrOgAaiBQoeg=
Subject key identifier: 54:90:F7:80:C9:84:3E:03:58:EC:26:58:22:30:87:59:E9:09:A8:19
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer: /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial: 0688
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number: 0681
Signing time: Tue 24 Mar 2026 22:12:22 +0000
Manifest this update: Tue 24 Mar 2026 22:12:22 +0000
Manifest next update: Tue 31 Mar 2026 22:12:22 +0000
Files and hashes: 1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: Se75MK3hEbP+XJIyPxFIOLekrTq8+AnAtRz9AupHcwc=)
2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: 0o5U/MwsDi8SqCWm3ZLcLDqEydnXo1sYsBEII39u+FU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Validity
Not Before: Mar 24 22:12:22 2026 GMT
Not After : Mar 31 22:12:22 2026 GMT
Subject: CN=69c30c46-15e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:27:d8:74:23:15:05:89:9d:18:de:f4:1e:
ca:4f:3e:58:76:89:fe:c3:bb:f3:02:81:63:12:40:
38:99:6c:28:d4:01:5c:e3:b0:d6:6d:c7:13:fe:bf:
94:81:9d:6f:a3:31:99:bc:9c:66:73:9b:82:64:4a:
84:6f:b5:84:c1:dd:22:b2:52:96:a6:c7:7f:cd:29:
8e:60:73:73:57:40:dd:f7:fa:5e:65:5c:c2:45:41:
0e:37:17:38:1e:80:b9:8c:98:5a:46:11:20:7c:41:
1f:e3:a8:a4:48:e9:28:53:86:96:9d:3d:45:d4:f0:
a6:64:4a:df:55:8c:52:92:40:35:e0:b7:88:b3:5e:
40:ac:17:55:4e:1e:7e:df:ea:c0:2c:ec:c3:92:9d:
77:96:fe:b7:26:49:d1:a9:85:78:c8:4f:e9:0e:02:
92:e3:5f:0a:7c:88:5c:76:25:d9:f9:2f:7f:70:60:
09:96:1f:a2:97:fd:91:d6:4d:da:56:45:40:3a:ec:
1d:05:8c:2e:9b:d9:8a:0b:5e:f7:3e:4b:3e:21:7b:
d5:98:5b:7e:16:55:e0:4f:41:9a:ab:a3:ea:1f:4d:
41:e1:ff:3d:05:ed:18:84:a4:0d:ce:31:11:26:9d:
e5:e0:93:99:0e:01:8b:46:1b:31:e0:2b:2b:4f:72:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:F7:80:C9:84:3E:03:58:EC:26:58:22:30:87:59:E9:09:A8:19
X509v3 Authority Key Identifier:
keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:fa:3b:a9:c3:f6:4c:21:59:61:83:ea:ed:e3:14:8b:79:9e:
4f:09:06:19:e9:20:6d:a2:55:ee:17:dc:95:0b:e0:0b:f5:1c:
9a:ca:eb:bb:83:3e:6e:35:9f:a1:67:d1:df:6d:6f:ff:76:3e:
07:7d:70:71:db:11:60:cf:00:b7:38:1f:92:8f:ad:fb:99:f8:
c6:5b:80:78:67:c3:03:d3:c7:6b:d8:a4:1b:2c:85:06:a9:31:
89:d8:01:06:d4:a6:70:3e:46:d3:ca:eb:3b:29:9b:5a:86:87:
2f:b2:cf:2d:20:07:9e:9e:d3:5d:bc:8d:79:c9:11:f5:28:77:
ba:99:e4:7c:71:41:0f:39:67:ea:9f:ea:e1:ad:9c:0a:48:b2:
ba:d7:b5:61:a7:d0:ef:7f:b6:0a:bf:ce:95:e3:87:56:21:62:
5f:8b:cc:2d:da:06:f2:21:43:37:36:1d:85:c7:77:56:0e:1a:
25:16:ce:00:1d:81:14:58:02:33:e1:55:2f:97:67:a5:17:bb:
17:b5:d4:06:ab:e8:60:ac:2c:b7:8a:d3:7e:d3:18:5a:bd:e2:
90:3c:18:c5:db:83:01:8e:fd:ac:8f:69:3a:b0:41:46:ff:2c:
5b:92:dc:98:f0:6b:a8:b5:05:60:a0:ab:62:fc:fc:5c:72:d8:
b8:28:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:18 2026 by rpki-client