
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json)
Hash identifier: N8xkusHgrQbP8tkdkLX7HxIyOWPh2YuTTKrzyhjOsEc=
Subject key identifier: 8A:9E:0F:00:94:F7:F9:48:E3:C6:6C:7B:44:68:BE:05:31:74:F7:BD
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
Manifest number: 02BB
Signing time: Thu 23 Jul 2026 02:26:49 +0000
Manifest this update: Thu 23 Jul 2026 02:26:48 +0000
Manifest next update: Thu 30 Jul 2026 02:26:48 +0000
Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: ETlQeIE1x4JhaR+rY2Z/OiJkFJlFgdDKCGjse3JUx4s=)
2: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=)
3: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=)
4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Validity
Not Before: Jul 23 02:26:48 2026 GMT
Not After : Jul 30 02:26:48 2026 GMT
Subject: CN=6a617be9-ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:11:ce:49:cb:ed:5c:8c:ae:f5:ef:f9:ec:
da:6c:3f:51:40:26:05:f0:ac:bc:54:4a:82:ab:8c:
5a:a4:f9:4b:98:87:57:d2:7b:9c:1b:07:bf:88:43:
72:e3:0b:ca:bd:2e:f7:0c:55:a0:72:90:ec:f0:19:
7e:bb:25:b9:17:8d:b9:44:58:b9:b2:35:ab:58:1d:
19:27:fe:f2:03:70:c6:01:cc:39:ab:68:d0:7b:97:
b9:06:d3:6f:34:81:2a:b6:44:e5:8b:b4:b7:54:32:
1a:f7:cb:6e:3f:74:9e:a3:10:c0:b2:1d:30:32:38:
15:1c:6b:e1:34:4e:ce:48:26:3a:64:ab:b8:ad:14:
2a:22:6d:6b:da:6a:35:33:60:22:7f:e1:ee:d9:e4:
81:85:95:92:e5:ff:2e:27:4b:63:25:06:ce:b8:32:
7b:14:0a:bf:b2:8f:94:db:66:7d:0f:27:29:b8:e1:
fc:61:d7:b0:5a:6a:cc:67:72:52:ee:69:a9:93:79:
26:f1:1d:8f:3e:fa:fb:86:e6:03:c9:a2:65:4a:b7:
b0:db:1b:dd:56:82:ba:16:a7:9c:3e:7e:b5:91:1a:
8c:73:00:1f:9d:ba:97:35:c8:af:f3:34:77:8f:e9:
a8:b0:cc:85:96:78:01:8d:23:41:33:d1:e4:a2:13:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:0F:00:94:F7:F9:48:E3:C6:6C:7B:44:68:BE:05:31:74:F7:BD
X509v3 Authority Key Identifier:
keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:84:e7:05:cb:68:18:f6:07:f6:9f:19:6b:92:00:54:5d:
93:54:ad:ce:93:ec:64:07:23:e3:0b:ee:6f:25:c0:63:e5:0f:
06:bc:9d:63:b2:68:18:27:66:08:b6:21:9a:66:41:94:50:f5:
ff:f4:1e:50:6d:f8:d0:0a:3e:ae:93:d7:db:62:b2:22:00:2b:
90:3b:d9:d3:f8:b9:37:ca:5d:19:d8:09:0c:01:e6:b0:a2:f6:
41:fb:5d:6d:11:80:dc:b0:f6:1f:a4:7d:80:69:25:6c:6c:4d:
2e:5b:01:d8:4d:72:fc:0a:5b:67:30:8a:38:c5:9e:ed:d0:5c:
99:f5:aa:e6:8c:d9:17:49:a7:72:a6:8b:f4:86:fb:51:52:74:
a0:75:23:41:0a:f9:67:dd:d6:71:ab:28:d1:ee:88:1f:82:09:
ca:ef:b2:3d:1e:03:be:28:fe:be:24:c4:62:7a:a4:c1:1b:0b:
3b:94:52:03:f8:44:44:92:04:b3:b4:57:f6:c0:37:e2:b0:0a:
53:8f:02:41:64:a8:45:e1:a3:58:d7:aa:d2:2b:7f:5e:b1:06:
ea:7b:55:95:b7:7d:22:dc:c5:1f:54:05:2d:91:dd:fd:8b:b6:
52:05:b3:c9:08:09:ec:e2:38:19:b1:48:64:37:47:9c:86:9f:
5e:a8:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:16 2026 by rpki-client