
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: 9SVwozblMCMBfVwVcoIQ+zKpJ33KsZIkwPbOPJeg/4Y=
Subject key identifier: AF:11:11:93:28:AA:5E:42:87:42:02:06:A0:12:C2:D0:0F:5D:FD:74
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 08CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 08B1
Signing time: Thu 24 Sep 2026 20:37:56 +0000
Manifest this update: Thu 24 Sep 2026 20:37:56 +0000
Manifest next update: Thu 01 Oct 2026 20:37:56 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: yx0pUz209xCcECAEbdIyLHlbJk+lg1eqJXRPCkoI1tc=)
2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Sep 24 20:37:56 2026 GMT
Not After : Oct 1 20:37:56 2026 GMT
Subject: CN=6ab58a24-0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:a2:55:0d:c8:1d:25:fb:c1:c5:f9:14:bb:
02:a0:3e:83:c3:cd:51:9e:32:39:a5:22:e9:63:35:
d7:2f:6a:56:81:25:f5:04:57:a6:dd:26:bf:cd:c0:
4b:02:3c:1a:ad:a7:df:8b:f9:4c:e4:8c:32:d4:c7:
d2:0f:49:d5:f0:a2:bd:97:8c:d9:0f:34:8d:bc:10:
d2:a0:91:0f:91:ce:a2:3b:77:77:fa:49:16:54:04:
80:56:ff:e1:85:c8:e6:a9:a9:82:79:d8:d7:4a:7e:
6e:7a:2c:0e:ce:37:05:83:b7:fc:d7:fb:b1:6e:b7:
77:f2:8f:81:2d:46:52:9d:47:5c:82:06:4c:54:00:
3f:b7:29:9c:5c:0a:f4:c5:5c:88:10:da:a2:49:db:
4c:db:a0:c8:fc:ae:bc:d1:c2:e2:16:c0:48:31:0c:
5d:c5:69:0c:d6:b3:98:a6:e3:9f:c1:df:bc:cf:68:
63:e8:b2:aa:50:c0:6a:be:7e:2f:70:66:69:34:4f:
bd:13:cb:fe:3b:33:1c:ca:1b:8e:da:0e:ef:b3:82:
f9:f7:57:6a:f0:06:12:ee:4f:9b:76:1f:5a:1d:73:
d6:9f:b4:45:30:34:df:d2:5f:40:82:b9:63:28:fa:
77:0b:00:aa:a4:34:0f:14:f0:86:e2:c1:1b:0d:35:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:11:93:28:AA:5E:42:87:42:02:06:A0:12:C2:D0:0F:5D:FD:74
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4b:1c:da:90:2a:0b:a8:5a:cb:79:4c:02:3f:e0:ce:5b:09:
be:46:e9:1d:e6:b4:78:4f:a8:91:a6:c3:ab:f0:b1:61:a8:63:
0f:57:8f:88:40:34:34:05:0a:bd:e0:0d:71:29:41:d9:89:9d:
ed:35:fc:bf:b8:01:0d:29:7e:69:4c:51:cc:72:67:d9:3c:19:
39:74:59:94:d0:bb:03:15:98:3b:aa:b1:a2:18:04:ad:57:d7:
53:19:e9:43:5e:05:ce:ef:8e:18:5c:a3:0d:5f:b7:31:c1:07:
ab:06:b6:94:4e:7a:54:7b:e1:a1:a4:a6:b7:8c:41:38:f0:95:
63:75:67:e7:59:8c:35:b0:69:98:f5:ee:ab:f7:7e:96:c7:14:
a8:93:51:d0:73:c2:9a:46:6a:34:f0:29:1b:2a:19:6b:a8:89:
a8:94:af:dc:ab:a2:52:f9:ad:0d:7a:89:21:67:ba:4c:6c:d8:
cd:7e:42:cf:a3:68:1d:ec:9c:da:af:a3:2e:c4:49:0b:9b:26:
9c:35:3a:40:51:89:c4:75:21:41:f6:78:45:e2:b5:fd:9c:da:
99:d5:b4:cb:08:b8:51:53:95:4f:b7:18:e3:ef:08:7d:99:b3:
d5:08:3d:10:dd:d6:3a:74:60:d8:f5:b2:7a:c2:5b:61:c1:d1:
29:af:ee:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:48 2026 by rpki-client