
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: PMl4U3Gud33MgUsn7/95ancxwnz1WX3l9+aDC2UAUak=
Subject key identifier: EF:14:DC:3D:9B:1A:EE:DC:E2:DE:A3:94:64:61:74:BE:26:91:09:8C
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 08AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 0890
Signing time: Wed 22 Jul 2026 21:18:02 +0000
Manifest this update: Wed 22 Jul 2026 21:18:02 +0000
Manifest next update: Wed 29 Jul 2026 21:18:02 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: +4FkZqAKACMnGqwYvppU0YDRsRYiCvDqL4nKmUR8SXY=)
2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Jul 22 21:18:02 2026 GMT
Not After : Jul 29 21:18:02 2026 GMT
Subject: CN=6a61338a-8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:ad:bf:b4:3e:9c:af:27:3c:56:3d:2f:b3:
27:e6:a6:64:30:e6:73:2f:2c:fd:fd:f6:ce:0e:f6:
ab:90:32:7b:40:77:4a:b6:d8:62:ea:67:5a:05:fd:
a1:46:ff:8e:e1:f7:87:4b:c8:ee:68:60:15:08:21:
88:71:4b:02:0c:9c:cc:b6:f4:b6:ed:fb:0c:de:79:
cc:ad:81:bd:28:64:dc:e9:bd:9b:9a:52:ca:b7:de:
12:df:ab:0f:e6:7b:85:00:ff:16:86:d6:84:60:a3:
36:22:c1:e2:36:5c:d7:9e:b8:1e:d7:dc:5d:8b:d1:
dc:c4:02:5b:b5:12:a0:06:d4:6f:50:07:78:30:8d:
1f:bc:ee:5a:42:3e:15:ff:02:7f:46:75:23:e3:45:
0a:f5:18:51:f9:29:53:dd:1f:cf:ea:8a:1b:3a:88:
eb:51:b9:ee:04:b4:83:4a:99:bb:1b:e8:81:c0:5e:
24:0c:4e:45:a2:8c:5c:06:45:fa:12:8c:42:ff:df:
eb:f2:c0:f8:d6:75:74:bf:27:18:d6:5b:fc:10:d6:
5d:ea:2d:5b:ae:26:42:d7:bb:9c:35:4a:5f:e9:8c:
82:0b:a8:22:4e:05:59:81:37:f8:59:77:c9:d7:7c:
cb:e5:c0:2d:95:60:4b:00:f4:81:eb:95:e8:8a:fa:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:DC:3D:9B:1A:EE:DC:E2:DE:A3:94:64:61:74:BE:26:91:09:8C
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0c:49:a4:44:b1:fb:b0:f3:7c:1d:2e:ac:71:53:b0:d3:ac:
57:3b:c0:9d:9c:e2:fb:1f:19:1f:81:1b:34:56:f6:94:61:95:
3c:ec:5d:15:7d:36:34:73:cc:51:9a:80:7a:7d:6c:16:e0:7a:
a4:41:92:cc:28:b9:3b:6d:fa:d7:e3:a0:20:45:96:37:60:c8:
8a:9d:0c:9c:f7:e5:5e:01:54:df:dd:8d:25:2a:d9:a0:d4:53:
97:d6:93:07:3a:6f:8e:07:b7:3f:f3:fc:aa:da:15:cc:aa:4c:
c1:23:1e:19:eb:cc:a1:c9:a0:12:1d:7b:0e:82:28:3f:ec:d8:
44:cf:5a:29:48:e2:f2:04:a1:ab:4e:86:4e:c5:18:2a:11:20:
41:44:e6:7d:73:f5:c3:c5:18:05:c4:ed:ba:c4:0d:7f:0e:af:
8a:38:60:96:1b:6f:be:bc:e3:9a:ce:55:3c:3a:f1:2c:db:5f:
66:7d:60:9a:27:71:3c:09:f6:06:42:b9:e8:6a:97:e2:7e:cf:
ff:af:dc:41:ba:64:72:2d:15:74:b4:8d:74:33:6e:1b:3d:03:
f1:56:d8:fc:09:be:70:d4:e0:0a:24:60:54:40:35:42:95:49:
b3:83:5f:c1:7d:0e:38:15:77:e8:34:7d:16:3b:60:61:75:64:
59:07:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:03 2026 by rpki-client