
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
File: AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json)
Hash identifier: ccszEux/yl7WplTAoghfklUHu5nHKG3/QkjTTQpV14o=
Subject key identifier: 95:4A:9C:3F:0E:A6:CC:17:A8:4D:9F:61:95:B4:E5:4A:76:70:DB:D9
Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4
Certificate issuer: /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
Manifest number: 0266
Signing time: Sun 15 Nov 2026 02:18:08 +0000
Manifest this update: Sun 15 Nov 2026 02:18:07 +0000
Manifest next update: Sun 22 Nov 2026 02:18:07 +0000
Files and hashes: 1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: MEbY8YzP49MrrJHokwcnvFjqJ93Mv2gjUNIf/+IDGic=)
2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: ChPU5idLRzFBAUfZXdVDn4ZS21EQnqWVbj2XL7b56XA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl
rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DF0, serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4
Validity
Not Before: Nov 15 02:18:07 2026 GMT
Not After : Nov 22 02:18:07 2026 GMT
Subject: CN=6af91660-5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:9c:2a:5a:a0:a1:bf:0d:70:55:51:71:4e:
30:07:65:f7:d2:9e:48:5e:3f:54:d2:d1:64:15:c9:
6d:69:d4:cd:8d:f0:e6:e2:a4:fe:d3:6c:bd:fe:98:
31:3b:c3:f7:f6:87:58:0c:c2:ef:cd:77:a5:3a:d7:
5e:73:1c:29:34:3f:37:8a:2d:ef:9c:0c:fd:f7:ff:
21:50:24:b5:bd:c2:0c:54:e4:45:72:a7:70:be:74:
2b:3f:59:34:22:70:b6:c0:b4:c4:ca:ee:c9:00:1b:
15:ba:36:0d:f2:3e:aa:35:42:d4:93:35:cb:64:01:
e0:0c:99:a6:2d:51:7c:33:8d:c4:00:be:b3:5f:9e:
3f:43:6d:45:7b:89:cf:c5:d3:f8:cd:2e:63:29:b1:
cb:f9:7c:bb:e1:15:ab:10:7e:f3:76:af:cb:34:02:
8f:0b:ba:21:c4:84:ba:71:24:09:d8:78:d5:17:44:
2b:2f:df:58:06:58:35:00:d0:35:21:07:d7:58:b9:
cc:8a:db:bc:ab:a4:64:92:d4:76:00:db:cb:91:a6:
f6:9d:4a:1b:47:95:4f:3f:18:3b:cd:5e:ef:5e:b4:
74:8c:bd:08:55:a2:83:94:2f:b2:23:80:a3:19:4d:
4d:10:98:9d:29:a3:78:0d:15:7f:0b:a6:5b:47:4c:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:9C:3F:0E:A6:CC:17:A8:4D:9F:61:95:B4:E5:4A:76:70:DB:D9
X509v3 Authority Key Identifier:
keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:fa:fb:09:e4:73:f1:cc:67:11:cd:1a:bd:7c:f6:f8:70:
1b:37:52:aa:95:78:65:68:30:cc:ec:1e:92:0c:9a:16:e4:89:
f0:7e:73:f0:39:f0:14:84:ca:be:6b:2c:d7:42:97:9e:0b:10:
0e:6e:4b:c5:8d:70:00:11:58:7a:ca:eb:fa:c9:63:83:52:9a:
d3:58:38:18:0d:92:73:5c:4b:3a:4c:87:54:91:e6:d2:3c:f7:
37:41:4f:3a:83:26:ca:fc:a7:dd:8e:ce:ef:7b:c3:8a:fc:d9:
01:d2:ea:15:70:21:f0:6e:6a:a1:1e:14:ae:e0:b8:f4:97:3c:
54:6d:d0:fa:54:8a:41:7c:1b:4f:b2:06:74:2c:05:28:81:e7:
2d:23:4d:03:59:78:fa:de:b1:87:d1:f9:d6:b5:85:c2:c8:9a:
4e:e4:25:5f:b1:18:84:fc:4a:80:af:7d:b4:a8:e9:aa:78:03:
b2:1c:09:66:bc:4b:63:17:a1:12:13:c3:5f:39:66:87:8b:75:
fa:9a:e6:70:77:45:98:ba:21:26:e1:79:a1:72:24:d8:84:02:
ce:29:e5:74:12:35:f2:2a:1d:4e:66:55:99:67:57:10:03:e2:
8e:40:22:21:eb:1c:1d:42:5b:dc:b1:55:21:12:ff:77:42:cf:
58:15:70:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBERjAxMTAvBgNVBAUTKDAwMDhFMkVFQkU2QzU1RjI1OTQ5NDlBNDc3Rjg2NzdC
RkY0QTdGRTQwHhcNMjYxMTE1MDIxODA3WhcNMjYxMTIyMDIxODA3WjAYMRYwFAYD
VQQDEw02YWY5MTY2MC01ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrWcKlqgob8NcFVRcU4wB2X30p5IXj9U0tFkFcltadTNjfDm4qT+02y9/pgx
O8P39odYDMLvzXelOtdecxwpND83ii3vnAz99/8hUCS1vcIMVORFcqdwvnQrP1k0
InC2wLTEyu7JABsVujYN8j6qNULUkzXLZAHgDJmmLVF8M43EAL6zX54/Q21Fe4nP
xdP4zS5jKbHL+Xy74RWrEH7zdq/LNAKPC7ohxIS6cSQJ2HjVF0QrL99YBlg1ANA1
IQfXWLnMitu8q6RkktR2ANvLkab2nUobR5VPPxg7zV7vXrR0jL0IVaKDlC+yI4Cj
GU1NEJidKaN4DRV/C6ZbR0xotwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVKnD8O
pswXqE2fYZW05Up2cNvZMB8GA1UdIwQYMBaAFAAI4u6+bFXyWUlJpHf4Z3v/Sn/k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERGMC81REVGQUNGMDM2
NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1ZmSlpTVW1rZF9obmVfOUtm
LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FBamk3cjVzVmZKWlNVbWtkX2huZV85S2YtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MERGMC81REVGQUNGMDM2NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1Zm
SlpTVW1rZF9obmVfOUtmLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgHf6+wnkc/HMZxHNGr189vhwGzdSqpV4ZWgwzOwekgyaFuSJ8H5z8DnwFITK
vmss10KXngsQDm5LxY1wABFYesrr+sljg1Ka01g4GA2Sc1xLOkyHVJHm0jz3N0FP
OoMmyvyn3Y7O73vDivzZAdLqFXAh8G5qoR4UruC49Jc8VG3Q+lSKQXwbT7IGdCwF
KIHnLSNNA1l4+t6xh9H51rWFwsiaTuQlX7EYhPxKgK99tKjpqngDshwJZrxLYxeh
EhPDXzlmh4t1+prmcHdFmLohJuF5oXIk2IQCzinldBI18iodTmZVmWdXEAPijkAi
IescHUJb3LFVIRL/d0LPWBVw3A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:25:36 2026 by rpki-client