
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: 6Mhyp1t8QlYmzdTESNL+7d1ej1t+YC3BdeCsym4LbNs=
Subject key identifier: EB:4F:53:E5:C2:00:34:B7:0D:7F:68:AF:07:2C:C5:C7:09:00:32:14
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0E9D
Signing time: Tue 12 May 2026 17:45:45 +0000
Manifest this update: Tue 12 May 2026 17:45:45 +0000
Manifest next update: Tue 19 May 2026 17:45:45 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: jjNrxT68RZD573YHmrqMXNp5TmcE890c7fAaFfOh3KI=)
2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: oPPYxBYmiiy4enhiiy5O2BkIuc1yyliJlPvf0DwR6C8=)
3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: 4waDGGKnkJeLLa4QkYuztqh/mv8xS12LSc+ievo5tLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: May 12 17:45:45 2026 GMT
Not After : May 19 17:45:45 2026 GMT
Subject: CN=6a036749-e14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:82:c1:4f:2c:43:ce:bd:26:2f:7f:b6:72:
45:65:4c:cb:fd:b0:e8:c0:b6:f0:25:d8:50:d2:0e:
4e:07:74:a7:78:de:2d:23:fa:01:cd:74:7c:c5:45:
bb:2f:fb:68:49:6d:ff:ae:62:c2:2a:e6:5c:7b:30:
26:d1:da:47:a7:fd:ab:b7:d8:39:e2:b2:76:a3:99:
8c:9d:94:c2:7b:ea:5d:41:c1:64:5e:6c:09:d1:55:
be:e1:cb:55:4f:3e:08:ae:b5:64:ce:cc:87:d0:64:
58:37:ac:d3:e9:e8:a7:d6:9d:d0:af:05:fe:0c:0f:
23:42:54:47:b8:e0:16:ff:b6:90:20:0c:68:08:cb:
78:39:5c:ae:43:68:50:5b:d4:a2:67:60:3b:60:93:
f6:50:1c:8d:16:07:1c:9e:7f:08:37:17:ec:61:47:
8f:1b:0c:bc:5a:93:94:45:22:a9:76:69:67:80:61:
02:d0:77:15:96:c6:f9:b6:59:9b:ce:69:eb:69:58:
32:f1:e5:b6:5c:db:26:6b:fe:72:62:4a:da:fc:aa:
44:b8:6c:2d:2f:1b:30:97:da:bb:7d:f9:1a:89:47:
c9:d9:d3:9b:fa:15:5a:b8:e3:64:e6:41:fb:75:bf:
d8:d3:d1:9f:8a:ae:fd:3e:f7:49:e3:01:ad:9f:90:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:53:E5:C2:00:34:B7:0D:7F:68:AF:07:2C:C5:C7:09:00:32:14
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:be:d7:e7:7e:17:e0:d5:25:0a:9b:77:c7:c8:f2:89:e7:
83:e9:50:fd:fc:69:90:41:20:ac:8c:03:1f:3a:8b:87:1e:39:
17:d8:c4:80:79:11:e4:15:32:50:5b:35:f9:36:5e:ac:50:d4:
0d:5b:b2:63:f7:63:ea:65:0e:3b:17:83:c1:9d:45:38:a8:49:
fc:17:a1:2e:de:08:61:68:1d:50:3f:ce:c8:7c:e9:09:6e:5f:
41:d4:9c:0f:88:81:e3:de:68:c4:bf:8c:54:e6:e7:00:b8:65:
0a:6a:b4:35:10:65:c8:09:66:71:93:91:39:b3:10:5e:28:a9:
3b:93:1b:91:3f:8a:0d:ae:34:23:8d:80:43:7c:24:f1:10:d1:
a2:7d:96:75:63:10:0a:23:21:4e:31:f8:c7:53:8e:89:18:33:
9f:44:85:a5:23:76:3f:78:77:35:df:ee:7a:86:1b:9a:0c:2f:
e5:1e:c3:16:de:ed:b8:e0:c9:a2:30:92:72:7f:b3:8d:10:f5:
9d:a1:28:fd:eb:90:6d:97:ed:f7:3b:16:14:5f:c6:ba:9e:64:
4b:fd:1c:c1:4a:07:2d:36:50:56:0c:0a:40:66:1c:51:eb:d9:
a5:98:3e:6c:30:09:85:04:5c:eb:1b:a6:40:9d:e4:0b:cb:18:
41:bc:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:44 2026 by rpki-client