
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json)
Hash identifier: QMqk53ZmPe/NMtUize82AXZ+sjiu/AmzYPOGtapupqU=
Subject key identifier: AD:F6:B6:A5:0B:75:26:0B:81:95:99:AE:EB:1D:B5:44:46:0D:80:28
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
Manifest number: 06F7
Signing time: Wed 22 Jul 2026 23:26:52 +0000
Manifest this update: Wed 22 Jul 2026 23:26:51 +0000
Manifest next update: Wed 29 Jul 2026 23:26:51 +0000
Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: Noe/P2lh0hdiiTL0CCrkqdVHHfRp4aoFmS2YwMadH4U=)
2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: ncVMvzPJ7BKlb60UcgyZrrfn0WZQ6WrxuL1LEKNyyZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Validity
Not Before: Jul 22 23:26:51 2026 GMT
Not After : Jul 29 23:26:51 2026 GMT
Subject: CN=6a6151bc-30bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:17:60:3b:ee:dd:41:2d:4a:ed:26:76:95:
ab:1b:9e:94:ec:f5:8d:8c:ad:b5:05:e6:2d:74:be:
2c:a2:ba:6b:1d:e2:e6:62:75:e2:af:86:9d:45:ff:
3a:db:a4:7f:e7:d3:66:d7:48:d2:98:e4:c0:9b:cd:
61:e7:16:28:69:24:79:99:7d:33:df:b3:a1:71:8c:
89:aa:dc:64:92:37:d6:14:2b:2f:2d:88:8e:e1:92:
36:b7:6d:5a:66:61:12:3b:55:0f:b8:21:6e:d4:38:
72:91:97:03:9f:9c:34:67:0e:f4:eb:12:cc:71:3d:
d7:a8:47:ef:7a:b4:2d:c7:bd:53:45:54:ab:c1:14:
41:f8:b0:ce:3b:54:c0:d9:2a:3c:f5:1d:e7:88:03:
36:27:1c:e4:d4:8e:21:cd:e6:6c:ec:ca:06:a7:3e:
61:13:7f:b0:61:90:d1:f9:ad:89:86:12:fb:3e:ad:
ed:18:8d:f9:39:26:6c:e2:f3:6e:f4:d7:a5:31:2a:
6d:8f:29:4a:b4:75:e5:e1:41:bb:45:62:e7:c0:49:
8f:5a:de:11:7b:96:5e:53:f2:8b:20:19:b4:a7:aa:
6f:08:5e:56:34:bb:c8:08:46:67:df:40:8d:06:22:
c5:0c:01:62:d4:af:26:5a:c3:78:b9:d1:8f:19:3f:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:B6:A5:0B:75:26:0B:81:95:99:AE:EB:1D:B5:44:46:0D:80:28
X509v3 Authority Key Identifier:
keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:85:00:b5:79:e5:69:4c:dc:6f:d7:32:de:59:61:0e:74:
fb:02:8e:ee:37:2d:2c:8a:51:ab:cd:d1:8e:39:a2:4d:c8:1b:
7e:dc:ac:e8:96:b0:67:0a:ce:bc:29:d1:d8:02:eb:70:b9:d8:
0b:36:f6:6f:92:fb:fc:82:26:61:dd:f0:e9:17:3d:93:65:6f:
ef:75:f5:4b:55:c1:d8:35:c1:de:04:69:13:8e:cd:97:74:55:
a4:fd:37:e5:2f:9f:74:15:80:2e:38:9e:4c:1e:de:d7:cc:73:
4b:e0:6a:05:b5:7a:b1:60:47:52:61:e7:c1:9f:96:ab:68:af:
fb:01:62:10:b2:2a:07:56:6c:6e:ba:9e:2d:cf:b9:f0:0d:21:
a1:4d:65:82:a7:b5:83:45:06:33:68:ad:4f:fe:2b:4c:88:cc:
06:29:76:2e:63:56:af:7b:2e:31:32:fd:db:28:fe:73:94:55:
b5:73:37:f9:5b:8a:3f:78:ac:0e:fb:b9:26:57:79:20:84:5a:
e1:7e:21:2b:af:81:e1:01:a7:4c:df:01:5f:78:f8:1a:b9:ce:
d9:54:17:87:7b:6c:3f:67:0f:8e:ac:fd:29:23:b9:18:94:0c:
d2:af:f9:3d:ba:56:c5:b6:85:86:04:cc:91:bf:b0:eb:77:03:
6f:51:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:03 2026 by rpki-client