
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
File: AuKPnUYFERN7IUeII6e0gzlWUhI.mft (raw, json)
Hash identifier: xdDmE+ET5PvIwxY4ttc1JJVcdRMuHJAdCPtObtogsF4=
Subject key identifier: C1:9A:E8:76:90:1D:69:80:A6:25:AB:7E:3E:04:D3:B7:57:C8:BF:E4
Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
Certificate issuer: /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
Manifest number: 20B1
Signing time: Sat 10 Oct 2026 16:42:55 +0000
Manifest this update: Sat 10 Oct 2026 16:42:55 +0000
Manifest next update: Sat 17 Oct 2026 16:42:55 +0000
Files and hashes: 1: AuKPnUYFERN7IUeII6e0gzlWUhI.crl (hash: 1DEFVbO7VWNe0MRICFht1aW4arSD1C36dUSofDlvI0s=)
2: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (hash: FZAnwklk6MNpZ09M4h/w2yQBQkeE1AMv7TnT7r6kRDo=)
3: 65A7D4A0974A11EF961C4937C4F9AE02.roa (hash: XtGl+unPvtr4jCUZhmemIB6ESQEYqKeSRRZlA1Rf4Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147609, serialNumber=02E28F9D460511137B21478823A7B48339565212
Validity
Not Before: Oct 10 16:42:55 2026 GMT
Not After : Oct 17 16:42:55 2026 GMT
Subject: CN=6aca6b0f-f3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b7:87:aa:73:d5:3f:dd:10:f7:6d:04:51:8d:
65:18:10:73:7b:c9:1c:f0:e5:d7:00:5b:d8:98:17:
28:f2:f3:80:73:82:74:a5:89:84:7d:b5:c7:c3:7e:
da:6c:c8:04:33:92:17:e8:87:ca:04:ee:06:7f:18:
e6:08:30:0c:77:7b:d0:8b:91:41:d7:1a:08:d4:52:
2b:be:7e:f4:55:de:e2:cc:64:94:08:68:4d:3b:1c:
7b:db:6b:42:05:6b:b0:ca:f8:e0:6a:72:fb:ba:67:
e2:73:bc:8f:c2:18:52:96:82:b4:37:40:5a:90:7c:
46:45:48:01:57:a4:57:cf:bb:d0:cb:ba:24:8b:9e:
6d:b5:b8:ce:46:30:99:e8:08:bf:df:26:2c:c5:1e:
7a:24:90:be:eb:b6:ac:3b:4e:79:e5:e9:a2:7f:21:
3e:23:0d:db:ef:37:cd:4b:7d:e3:72:60:e3:0b:4a:
60:49:c0:c5:66:c5:7e:9c:fd:5f:41:2f:5e:37:ee:
e6:f7:30:0b:7f:ae:8d:5e:aa:46:14:22:38:4b:10:
11:52:95:5a:89:38:45:17:e6:13:48:bd:ed:03:0e:
bc:7e:06:1d:bb:6a:23:9f:03:c1:6e:3a:3e:f1:68:
85:9a:17:df:bb:04:e4:5f:ca:c4:a5:b9:7e:96:03:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:E8:76:90:1D:69:80:A6:25:AB:7E:3E:04:D3:B7:57:C8:BF:E4
X509v3 Authority Key Identifier:
keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:64:d2:88:06:00:38:2c:b4:b3:72:ce:47:eb:b7:1f:c1:37:
df:2f:f5:5b:28:fe:21:78:61:f0:85:c9:8c:ae:9b:2b:15:4c:
d7:c7:b2:8b:be:cf:80:b9:b8:10:8d:2e:3a:b9:e0:2d:36:a0:
09:1a:8e:84:bc:a6:c0:88:a3:0d:f4:e1:08:30:00:6e:a9:03:
7e:5b:e6:a7:ea:29:6f:5f:5d:95:a8:fc:f4:a1:f4:7a:07:73:
22:2d:61:0f:3e:aa:83:f6:9c:eb:58:eb:eb:28:b3:31:da:92:
57:84:d3:35:9c:fb:0a:67:aa:59:46:b6:26:a6:bb:fb:c2:cb:
35:29:19:fc:1a:5f:8c:0a:07:48:13:58:c0:87:77:3e:8c:7c:
c5:f8:23:89:01:51:4f:34:b0:0e:2e:fb:1a:a3:a7:72:b1:e0:
ac:5a:2f:6c:8f:1d:28:d7:8b:78:aa:65:64:7e:2a:5e:a8:ac:
2a:36:6d:27:2d:6c:fa:c7:97:a8:40:e3:0c:30:0d:88:f2:ff:
fd:dd:70:20:1f:5c:7e:41:fa:d5:29:8a:c9:21:5f:ad:9e:df:
db:19:3d:e2:73:f9:1b:01:83:74:d6:28:cb:aa:35:ed:c4:26:
dd:c0:7f:0b:5d:e1:d2:42:3d:59:e3:c3:61:8a:2b:16:49:ba:
cb:f6:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:21:34 2026 by rpki-client