
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier: pqF3m2CeqKSVBIxa8Ejd7B+9qknnAGxLxJby+qmfRhc=
Subject key identifier: AA:CA:89:93:11:0A:16:76:2E:DE:96:5A:09:9B:6B:43:CF:AF:16:36
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number: 06C9
Signing time: Sun 27 Sep 2026 00:09:40 +0000
Manifest this update: Sun 27 Sep 2026 00:09:40 +0000
Manifest next update: Sun 04 Oct 2026 00:09:40 +0000
Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: 9JdKBXN/LxfWA+MA2ma8ZiO7cYk8V/0LNWj52DjxKec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Validity
Not Before: Sep 27 00:09:40 2026 GMT
Not After : Oct 4 00:09:40 2026 GMT
Subject: CN=6ab85ec4-12b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:10:a9:14:57:2a:05:81:c5:b4:9c:73:3a:
06:13:6c:36:59:b8:90:93:07:8c:9e:92:14:9a:08:
06:19:c1:0d:6a:97:f2:d5:e6:34:1d:b0:2a:e7:21:
a8:7a:08:35:61:b6:e3:cd:41:a9:d2:69:4a:1c:11:
e6:c6:c2:22:b9:1f:cc:98:af:ba:e5:f5:9c:7a:d7:
70:b2:c8:15:42:94:f8:f9:16:11:1a:4d:08:03:2e:
44:08:fe:17:f0:37:1a:2c:15:5d:8b:1a:5e:6d:87:
56:7c:f1:df:b7:a6:72:e5:c2:e8:ed:f2:24:a7:fe:
db:d1:6d:78:7c:5e:bf:2a:1d:14:88:28:d0:c1:b0:
c7:c7:20:26:cd:77:b0:04:d0:b3:98:09:12:fc:c6:
fe:3e:fe:8d:1f:b2:7f:fd:08:21:df:2c:f6:d2:ff:
a6:5d:05:17:ed:1d:7a:89:3a:97:45:da:e1:fe:16:
12:96:15:0a:f9:2d:aa:ba:a2:5e:2e:05:bc:88:fb:
96:15:95:94:67:57:83:0a:29:e8:20:8b:c5:ed:e9:
72:b0:5d:90:5e:f3:83:2d:e6:f5:63:ef:bf:b8:26:
cf:97:9b:c0:6e:14:ed:09:1c:06:7b:bb:61:59:a5:
27:2f:fd:54:c8:43:63:50:99:35:81:34:40:bb:28:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:89:93:11:0A:16:76:2E:DE:96:5A:09:9B:6B:43:CF:AF:16:36
X509v3 Authority Key Identifier:
keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:0c:06:d4:01:d7:95:e4:b6:02:6f:f2:8f:8f:04:c9:51:
32:63:e3:4e:d9:8a:e4:b6:32:c1:4d:07:cb:8d:66:2c:5f:61:
eb:b5:7e:10:14:c9:0b:91:67:c7:f3:36:c4:8a:93:c4:b8:8a:
25:eb:55:af:9f:14:b5:e6:ea:f5:d9:eb:b8:f6:a3:64:51:c8:
d3:91:08:de:6b:6b:37:18:2a:c6:7b:22:6d:a9:b5:18:21:0e:
8a:3f:36:42:d5:65:b2:d9:93:4b:7a:5a:b9:e5:b2:f6:0b:db:
71:52:3b:be:fd:35:0d:a1:d2:0d:18:cf:53:3f:b7:c0:55:65:
73:b2:05:2e:44:d9:15:b3:08:fd:9f:4a:ee:81:e6:d3:8c:2f:
f7:ba:aa:c5:c8:35:5e:8a:b3:e8:d0:ac:f5:cb:91:26:90:ff:
69:e0:49:6a:6f:6e:ed:fb:27:47:cf:7b:0c:7f:d2:6d:fd:c8:
cc:67:1b:91:55:08:6e:d8:56:44:63:7a:30:3d:a1:1a:23:36:
61:4f:b4:9d:74:c0:42:6e:f0:c8:25:9a:32:0e:0f:99:69:64:
8e:25:10:86:9c:25:0b:d1:9f:77:b5:16:64:48:a3:a9:d1:ed:
79:1c:e7:ea:2b:72:b9:ca:35:de:c1:de:3c:a3:83:43:f2:fd:
a8:f5:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:50:40 2026 by rpki-client