
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: KEWtdXupzb3aVjqVrQ68hlcIE2oDpjhl5XSONkSq7dk=
Subject key identifier: 24:54:85:CC:B4:A8:2F:15:01:D6:8A:72:EA:CC:34:90:FA:B2:56:98
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: 0104
Signing time: Mon 11 May 2026 06:15:52 +0000
Manifest this update: Mon 11 May 2026 06:15:51 +0000
Manifest next update: Mon 18 May 2026 06:15:51 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: oUuPQEUCXlYXjLZXxUSaNPO3DSrjAFSmTl/gaJAJGxQ=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: May 11 06:15:51 2026 GMT
Not After : May 18 06:15:51 2026 GMT
Subject: CN=6a017418-b403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:59:a3:3a:6f:9f:3f:c1:cf:cc:62:48:a3:
db:15:38:6d:be:f6:51:3e:50:33:c0:43:24:d3:be:
47:a5:48:d7:f2:21:44:3f:db:82:15:e2:22:24:9b:
79:8f:61:21:b7:53:bb:97:ac:13:b3:d4:7a:19:9f:
84:69:f1:66:82:49:aa:7f:2d:ab:49:6f:3b:1b:ef:
1a:61:e7:f4:4a:8a:b7:5b:2b:e6:7d:cc:3f:c4:01:
da:de:57:6a:83:79:eb:d8:77:94:a5:d4:b3:e1:49:
3e:79:3a:3e:c9:9a:44:fa:71:57:04:02:3d:75:7a:
37:3e:6b:85:74:99:31:cc:10:e5:c8:35:4f:55:50:
2b:15:d5:11:ca:93:da:18:2b:5a:20:8d:5a:fa:45:
8b:03:83:2f:42:b3:54:53:39:0b:59:96:90:da:6e:
82:82:78:5d:4c:3b:f1:dc:2d:0b:bc:90:5c:6f:4d:
e9:29:5b:e1:22:a2:ca:4b:fe:0f:8a:75:8c:35:15:
2b:a7:f5:7c:1f:9f:fe:d3:6c:1a:10:9e:a3:cb:86:
1c:a7:8a:72:f2:95:4f:81:a1:5b:4c:be:83:65:5f:
74:0d:c7:09:ae:2e:4c:28:60:8b:60:b7:2a:2f:46:
38:b2:99:6c:3d:e2:e4:7d:61:8d:4f:d3:15:fa:5b:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:85:CC:B4:A8:2F:15:01:D6:8A:72:EA:CC:34:90:FA:B2:56:98
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:ae:1d:0b:e4:df:20:6e:92:ca:10:a8:6e:7a:70:c7:5a:
92:e8:61:58:ff:62:5a:ee:73:03:3e:40:e7:f6:cb:8e:fd:a8:
08:1f:1d:fc:4e:eb:a0:4f:15:dd:95:72:a7:0b:16:6b:14:81:
35:19:a7:9c:22:ce:88:c7:77:6b:c5:1c:0b:a6:fe:6b:88:41:
e6:fc:76:ed:52:31:aa:7a:03:34:2b:ea:ae:d4:2c:16:72:3e:
22:e4:a5:f1:af:c3:c1:06:b5:67:d2:cf:42:8c:53:89:9a:a3:
89:a7:b9:94:fb:c7:77:e6:5e:94:8e:fb:11:f1:25:9c:4a:91:
3d:a2:16:f8:15:4b:84:1c:ef:cc:e2:db:42:bb:1d:b2:31:70:
48:fe:88:2c:d1:96:61:30:15:db:4e:62:13:a7:c0:eb:78:d4:
35:97:37:8b:46:48:72:70:83:7d:4f:6e:f7:fc:67:85:f1:c2:
c8:6f:98:fb:dc:83:4f:aa:e2:0b:bc:c3:f9:ea:ce:b0:26:d3:
e5:7b:48:7b:2b:af:dd:89:c1:4b:ae:a9:94:e1:12:36:19:56:
21:8e:2c:66:c5:00:bd:06:b8:00:53:b1:f9:48:10:52:ab:78:
c2:26:dd:04:52:a7:34:c7:bf:be:44:c5:e1:f6:c6:f5:e1:c6:
7b:fa:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:52 2026 by rpki-client