
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json)
Hash identifier: wPG4wGoWgr8PUQCkDhUdlXiUbxAL7D1/CWFLhudjrZM=
Subject key identifier: CC:4B:D7:D3:35:4A:38:99:B2:C0:72:EB:6D:2B:17:69:37:DA:AF:05
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial: 07B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
Manifest number: 079D
Signing time: Tue 22 Sep 2026 21:17:22 +0000
Manifest this update: Tue 22 Sep 2026 21:17:22 +0000
Manifest next update: Tue 29 Sep 2026 21:17:22 +0000
Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: YsU+hn+tU5UKHN1aMy9jlFcZSFa75Kj/hT/cGylru9s=)
2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=)
3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: s/5lGnLOQhFrFoCvFSY8QuZwJ6dSe5qo2Hz+gxZXbAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1971 (0x7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Validity
Not Before: Sep 22 21:17:22 2026 GMT
Not After : Sep 29 21:17:22 2026 GMT
Subject: CN=6ab2f062-7aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:99:32:f3:26:ee:cf:e1:3c:28:25:48:5b:
7d:57:a8:8d:01:0e:65:bb:a7:b6:8c:ff:b5:6b:dc:
8b:81:7b:b6:bf:51:bd:2d:41:87:96:84:15:d1:df:
86:f7:74:62:e8:d3:b1:18:e7:bb:56:6d:1e:b1:05:
2d:60:2f:e6:5d:bf:d1:f8:cc:ba:00:c8:13:67:e6:
8c:59:47:89:cb:92:20:7c:48:e2:56:4c:86:8a:9d:
5d:4a:12:09:ac:ee:da:77:f1:ff:78:ea:b8:89:81:
d8:42:96:71:41:c5:8e:7f:eb:5c:61:81:17:68:0e:
ae:df:1c:24:ee:81:a3:25:ca:f5:56:48:8a:78:86:
c4:2d:98:ff:3f:cf:a0:b3:d7:7b:6f:cc:3b:07:19:
c7:6d:49:95:3e:e3:82:84:c4:24:de:fa:f3:6d:50:
1b:2d:30:41:40:bc:fe:4f:7c:25:a8:ec:54:16:46:
e1:81:b1:ab:7b:c6:31:7d:94:96:e8:9e:37:da:5a:
dd:01:d0:ec:88:4d:52:5d:e8:fb:a2:f5:72:f5:87:
b3:04:fa:0f:2b:c9:dd:e2:6a:16:98:5c:7a:c3:08:
c6:3c:92:e9:7d:10:0d:3e:86:aa:a5:aa:22:d4:a7:
4d:be:73:8e:13:87:bc:0d:d2:bd:06:50:a0:9c:8e:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:D7:D3:35:4A:38:99:B2:C0:72:EB:6D:2B:17:69:37:DA:AF:05
X509v3 Authority Key Identifier:
keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:56:cc:17:01:eb:7d:8d:50:bf:a3:44:ad:e3:42:9c:6c:2c:
5a:d2:76:1b:57:e9:f1:7d:59:eb:ed:7e:cf:d1:ff:40:0d:90:
9f:65:5e:70:f0:21:1b:5b:9e:cf:38:cc:3e:db:cf:57:0b:47:
f9:b6:f1:1a:92:07:df:21:16:1a:ca:f7:2a:e0:82:11:71:48:
8c:29:bf:75:8c:72:b2:fc:0d:5e:b7:72:8f:4b:9c:2d:f8:2c:
27:d1:eb:30:65:4c:9f:ef:0d:78:24:2c:83:8d:18:5d:68:16:
2d:a3:0d:a7:e0:5e:31:ce:8d:59:63:2b:44:be:01:53:e3:77:
99:27:e3:37:44:05:d6:d9:e5:1f:d6:66:af:15:4f:39:3a:09:
2b:39:29:06:2a:0b:12:63:43:2a:dc:70:25:91:41:f9:31:2b:
fb:b1:20:ed:25:a5:75:7e:10:57:01:9a:34:4a:a0:4f:93:a0:
bc:38:d7:05:95:69:b5:d7:36:3b:f1:16:8f:f9:6b:a7:27:d2:
ab:19:35:9a:41:3f:e0:64:b2:a5:01:48:ac:28:a5:4c:13:6b:
ce:42:86:04:95:6e:45:6e:14:23:2e:33:18:b2:ec:09:21:31:
d3:dd:d9:af:2b:5d:44:03:ad:ec:f5:8e:26:f4:ca:86:77:1d:
1c:50:70:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG
NTRBODVCNzkwHhcNMjYwOTIyMjExNzIyWhcNMjYwOTI5MjExNzIyWjAYMRYwFAYD
VQQDEw02YWIyZjA2Mi03YWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtguZMvMm7s/hPCglSFt9V6iNAQ5lu6e2jP+1a9yLgXu2v1G9LUGHloQV0d+G
93Ri6NOxGOe7Vm0esQUtYC/mXb/R+My6AMgTZ+aMWUeJy5IgfEjiVkyGip1dShIJ
rO7ad/H/eOq4iYHYQpZxQcWOf+tcYYEXaA6u3xwk7oGjJcr1VkiKeIbELZj/P8+g
s9d7b8w7BxnHbUmVPuOChMQk3vrzbVAbLTBBQLz+T3wlqOxUFkbhgbGre8YxfZSW
6J432lrdAdDsiE1SXej7ovVy9YezBPoPK8nd4moWmFx6wwjGPJLpfRANPoaqpaoi
1KdNvnOOE4e8DdK9BlCgnI7vEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxL19M1
SjiZssBy620rF2k32q8FMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE
NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO
MXROOV8yRXhPTmIxU29XM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIFbMFwHrfY1Qv6NEreNCnGwsWtJ2G1fp8X1Z6+1+z9H/QA2Qn2VecPAhG1ue
zzjMPtvPVwtH+bbxGpIH3yEWGsr3KuCCEXFIjCm/dYxysvwNXrdyj0ucLfgsJ9Hr
MGVMn+8NeCQsg40YXWgWLaMNp+BeMc6NWWMrRL4BU+N3mSfjN0QF1tnlH9ZmrxVP
OToJKzkpBioLEmNDKtxwJZFB+TEr+7Eg7SWldX4QVwGaNEqgT5OgvDjXBZVptdc2
O/EWj/lrpyfSqxk1mkE/4GSypQFIrCilTBNrzkKGBJVuRW4UIy4zGLLsCSEx093Z
rytdRAOt7PWOJvTKhncdHFBw8Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:16 2026 by rpki-client