
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier: 69au0ppKl+lQdKT9w8pPVZCE/ui4caB5CjLa05aKqqU=
Subject key identifier: 09:63:A3:C2:B4:A4:FF:C3:4D:FD:A7:8A:22:CC:37:EB:6B:95:61:86
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number: 7D
Signing time: Mon 11 May 2026 07:58:20 +0000
Manifest this update: Mon 11 May 2026 07:58:19 +0000
Manifest next update: Mon 18 May 2026 07:58:19 +0000
Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: S33DSgLQKWmez7gZFmC8tehv5Uhy3EWbtRieKvF6QKQ=)
2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: DOrKq68OV6bv6i78b+TQ33vm1VYkB4ogKWrurv8Roro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Validity
Not Before: May 11 07:58:19 2026 GMT
Not After : May 18 07:58:19 2026 GMT
Subject: CN=6a018c1b-2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:e9:b3:5f:f2:44:9f:03:cb:40:1c:5c:76:
22:46:cc:85:d8:14:ed:d1:f6:38:a9:f0:05:65:3b:
c1:e8:49:d1:84:a0:cc:04:07:11:f2:c0:b5:52:03:
4a:e7:f1:e2:50:4b:3d:17:7f:71:42:91:04:3c:d9:
58:f9:18:2c:88:0e:0e:3a:c2:e9:a7:ed:f4:d5:17:
8b:ec:5c:4f:4b:0a:bb:4b:52:9e:ff:fe:d2:8d:f8:
17:f2:6a:a8:34:ed:63:bc:b0:8a:7e:61:04:3b:9c:
f9:87:06:6b:fe:ba:dc:e0:2f:17:f4:bb:d6:68:d8:
80:58:24:23:5a:ce:02:42:5f:8e:c0:83:4b:e0:25:
0b:dc:d2:14:90:ff:ba:4b:9e:1e:fe:d2:77:bd:69:
2c:69:5c:99:6e:d0:aa:4d:2e:3c:db:28:5d:1f:94:
a1:f5:42:df:65:f2:a0:85:03:58:24:1c:da:4f:4f:
2d:02:cf:ff:93:45:cb:1a:13:45:69:dc:58:c4:28:
8c:db:7e:5d:dd:80:91:4d:83:be:66:41:52:94:f8:
cb:1f:88:9a:ed:84:b8:f7:51:d3:f5:99:de:29:5c:
09:73:b7:9d:4d:24:ef:d6:58:bb:ca:ec:a2:7a:01:
9f:1c:44:ee:ff:23:d7:9c:b8:eb:8b:95:ae:32:34:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:63:A3:C2:B4:A4:FF:C3:4D:FD:A7:8A:22:CC:37:EB:6B:95:61:86
X509v3 Authority Key Identifier:
keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:0f:56:70:8c:c8:e5:93:72:58:70:f7:50:f0:78:ac:42:91:
28:9d:d7:4a:3e:45:16:9b:61:a0:41:9a:a2:b3:bb:80:b1:90:
37:ad:ef:36:79:5b:40:5f:70:31:91:9d:8a:f2:57:c4:84:d4:
8b:53:9f:9b:8e:37:df:14:a2:6a:85:5b:c1:b0:5d:b5:e1:f0:
c8:6a:dd:11:1b:a2:f3:75:de:8b:07:f6:df:f3:c1:56:29:cf:
fd:28:d6:8f:6d:8a:e0:07:4a:8a:bc:0c:56:be:41:89:89:b1:
36:e2:cd:ab:55:aa:52:0a:0a:b4:3b:5d:3e:a7:cb:bd:d9:21:
cd:a7:4d:ff:8f:b9:69:50:41:f9:c8:e5:e8:da:44:d7:fe:f5:
25:e3:51:75:50:4b:0a:bf:d7:af:1b:65:73:48:de:4d:2b:89:
5d:04:ed:87:63:7f:0a:e3:57:bb:c2:6f:03:17:44:cd:2a:0d:
86:e7:9b:8f:34:cf:c2:3a:a1:90:5b:68:9b:67:44:bf:30:1a:
e3:84:15:d9:38:75:ed:e8:e0:30:65:7a:23:c7:26:75:71:fa:
39:d9:ee:0e:e0:d1:c5:41:d1:a7:67:8e:9a:c9:15:d8:e6:51:
a9:f8:02:93:32:ae:2a:41:da:bb:a4:ad:b6:d4:48:46:27:6e:
ff:57:c9:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU5RTMxMTAvBgNVBAUTKDAwODRGNDdBNDM3MkM4RjhBN0Q1MTE4M0Q1MDM2QzU5
M0QxOUUxQzMwHhcNMjYwNTExMDc1ODE5WhcNMjYwNTE4MDc1ODE5WjAYMRYwFAYD
VQQDEw02YTAxOGMxYi0yMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArv7ps1/yRJ8Dy0AcXHYiRsyF2BTt0fY4qfAFZTvB6EnRhKDMBAcR8sC1UgNK
5/HiUEs9F39xQpEEPNlY+RgsiA4OOsLpp+301ReL7FxPSwq7S1Ke//7SjfgX8mqo
NO1jvLCKfmEEO5z5hwZr/rrc4C8X9LvWaNiAWCQjWs4CQl+OwINL4CUL3NIUkP+6
S54e/tJ3vWksaVyZbtCqTS482yhdH5Sh9ULfZfKghQNYJBzaT08tAs//k0XLGhNF
adxYxCiM235d3YCRTYO+ZkFSlPjLH4ia7YS491HT9ZneKVwJc7edTSTv1li7yuyi
egGfHETu/yPXnLjri5WuMjTdqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAljo8K0
pP/DTf2niiLMN+trlWGGMB8GA1UdIwQYMBaAFACE9HpDcsj4p9URg9UDbFk9GeHD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlFMy80NENFNEVEMkEz
QTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9BSVQwZWtOeXlQaW4xUkdEMVFOc1dUMFo0
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTlFMy80NENFNEVEMkEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9BSVQwZWtOeXlQ
aW4xUkdEMVFOc1dUMFo0Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeA9WcIzI5ZNyWHD3UPB4rEKRKJ3XSj5FFpthoEGaorO7gLGQN63vNnlbQF9w
MZGdivJXxITUi1Ofm4433xSiaoVbwbBdteHwyGrdERui83Xeiwf23/PBVinP/SjW
j22K4AdKirwMVr5BiYmxNuLNq1WqUgoKtDtdPqfLvdkhzadN/4+5aVBB+cjl6NpE
1/71JeNRdVBLCr/Xrxtlc0jeTSuJXQTth2N/CuNXu8JvAxdEzSoNhuebjzTPwjqh
kFtom2dEvzAa44QV2Th17ejgMGV6I8cmdXH6OdnuDuDRxUHRp2eOmskV2OZRqfgC
kzKuKkHau6StttRIRidu/1fJAA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:43:58 2026 by rpki-client