
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json)
Hash identifier: 42Sk/eY994VytAEn01U8gfU20TjeQ1+xwrgL+YwCna4=
Subject key identifier: 47:90:F8:E1:B6:8B:05:A9:E5:40:84:31:C9:8E:25:31:FF:AB:10:1C
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
Manifest number: 0759
Signing time: Tue 12 May 2026 21:48:01 +0000
Manifest this update: Tue 12 May 2026 21:48:01 +0000
Manifest next update: Tue 19 May 2026 21:48:01 +0000
Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: H1Zn6aa4LCwy6B5+OvGAKaCibd1m+6PwpXdOfRy9jOA=)
2: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: s/5lGnLOQhFrFoCvFSY8QuZwJ6dSe5qo2Hz+gxZXbAQ=)
3: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Validity
Not Before: May 12 21:48:01 2026 GMT
Not After : May 19 21:48:01 2026 GMT
Subject: CN=6a03a011-d75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:24:6d:60:4f:60:04:a6:21:cc:10:af:88:
84:ee:d5:dd:dc:97:ae:c5:ac:dc:04:05:d9:70:16:
c9:b9:b6:b2:65:2b:a8:c7:da:b4:33:d2:22:b6:60:
b2:0b:3a:e9:d5:6f:6a:35:b1:07:41:66:67:04:02:
6c:4d:3f:25:0e:d7:9c:fc:9f:f0:88:1b:94:4e:04:
22:69:57:d2:08:ba:12:d6:df:81:5b:72:85:cf:f9:
90:3c:70:e4:b1:23:2d:7d:9b:01:e0:8b:0f:de:f4:
ff:20:ba:b5:59:66:4e:c5:7e:7a:ba:eb:11:a2:63:
d8:83:ff:cd:03:c4:8b:5e:fc:4c:90:a6:99:96:8e:
44:cd:de:23:7f:23:69:ab:41:92:4b:14:9d:0c:d7:
19:4e:ad:a0:38:95:df:0e:7c:c4:c9:d1:66:f1:09:
a8:8f:6e:5e:ae:79:25:9d:0a:e0:a4:26:8c:6f:79:
23:08:41:8f:33:bd:ac:10:0c:8c:4a:e2:0b:f9:ef:
79:23:f9:e2:83:16:e5:19:87:f2:19:f4:a0:cf:d0:
06:4c:59:52:78:7c:60:a8:6b:7a:42:c6:a9:39:3b:
d8:a1:55:7d:80:f1:51:d2:76:7e:64:a4:a6:e0:68:
15:32:4c:f8:ef:36:6a:b2:f3:c6:8b:fe:41:88:2c:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:90:F8:E1:B6:8B:05:A9:E5:40:84:31:C9:8E:25:31:FF:AB:10:1C
X509v3 Authority Key Identifier:
keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:86:01:4c:92:3a:65:c5:6b:fa:88:e3:fc:4e:2a:c2:5e:
09:93:34:06:7c:ed:41:7a:6c:1a:d6:37:15:fe:dd:55:28:f2:
a9:bb:cf:7d:ff:8a:88:e2:23:97:df:c2:40:0f:82:c5:93:cb:
ae:95:d8:81:c2:74:b8:e4:55:27:bd:19:c9:79:fa:ec:d7:b1:
a0:20:8c:05:3d:2d:85:28:cc:fd:f5:22:64:7c:54:eb:d4:6f:
f8:62:b2:a3:88:5a:53:fa:fe:c0:00:47:75:70:6a:8b:ec:af:
10:04:04:dc:89:f6:07:52:9e:e0:43:05:27:95:69:95:e3:61:
7e:11:74:be:4b:1a:0b:81:60:06:5b:f1:59:cf:7d:b2:fa:7c:
df:f3:e3:82:29:d4:d6:5d:3c:30:39:30:8b:ed:f0:ab:25:33:
e2:63:52:f1:9f:73:42:ea:96:31:ed:7f:84:8c:fe:0f:91:cc:
96:65:3e:d2:f5:b8:80:d5:92:ff:5b:c0:83:b1:82:ad:b5:62:
66:45:86:0a:5a:81:db:7d:1e:13:0b:1f:68:25:1a:04:f2:46:
24:fc:e1:a7:de:22:4d:1d:7f:20:67:60:2d:f6:4d:69:97:eb:
e9:f0:28:66:94:3a:5d:bb:18:a0:87:a9:24:ad:71:66:2f:11:
4b:a6:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:16 2026 by rpki-client