
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier: QXalBxQ0mVek4j/v59Sb1CmlbN66+w9nlAflqex9Czw=
Subject key identifier: 53:DB:69:BD:F3:FD:73:9C:26:AD:5D:9C:4D:DB:48:50:85:D0:9A:D0
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial: 24E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number: 24CE
Signing time: Thu 24 Sep 2026 15:44:51 +0000
Manifest this update: Thu 24 Sep 2026 15:44:50 +0000
Manifest next update: Thu 01 Oct 2026 15:44:50 +0000
Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: Aqi+VN4AIUpaeLgoFYogyVhmkMnI4ug2XyCmzTS/yKM=)
2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: QCiOK4+KmOrUy5xMwngOwn99titohfwS/g83Zrx37lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9447 (0x24e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Validity
Not Before: Sep 24 15:44:50 2026 GMT
Not After : Oct 1 15:44:50 2026 GMT
Subject: CN=6ab54572-3cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:21:da:a1:46:1d:89:03:4c:9a:59:04:77:
20:d0:ca:97:47:6a:f5:f7:4f:d7:2a:a3:f2:ec:e6:
8a:cd:61:7d:5c:52:49:1b:4a:98:dc:a9:fe:d9:07:
d3:78:6d:5b:82:3e:4e:51:9d:e3:89:7a:d8:ce:23:
83:9d:e7:c0:ec:68:1b:7d:a2:85:e7:85:6c:4a:1f:
f8:b9:a2:4a:29:d9:91:e6:cc:03:cf:d3:fb:de:c1:
f4:14:b1:be:23:8c:cb:69:17:4e:05:54:a1:b6:b0:
6d:c1:22:88:50:c1:e4:43:53:9a:2e:aa:04:f1:3d:
77:94:3d:c7:1e:fd:23:4d:39:29:e9:2c:97:91:09:
38:1c:c3:25:78:dd:4e:96:db:43:13:8a:a6:bc:87:
a2:80:30:5a:00:87:45:a9:d4:3b:72:c7:83:5d:55:
dd:c6:2d:40:a1:57:1f:1a:14:a9:62:71:0b:58:89:
0e:c6:96:68:30:6c:2e:c0:e0:44:2d:1d:c4:35:4b:
39:a3:cf:29:18:93:ee:98:40:dc:d0:d0:3f:7e:2a:
62:4c:1d:8e:ea:a1:cb:b5:a2:23:b6:52:91:7f:f6:
a7:23:29:13:79:f0:07:f5:e3:02:85:a9:94:91:a1:
f3:24:ea:20:12:0f:eb:21:ac:18:18:c2:89:95:c0:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:69:BD:F3:FD:73:9C:26:AD:5D:9C:4D:DB:48:50:85:D0:9A:D0
X509v3 Authority Key Identifier:
keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:46:d3:1b:4a:d5:6c:17:6e:33:2a:10:8d:ff:f3:9e:d0:8f:
13:80:9e:b8:0d:72:b4:2f:89:49:d8:ef:da:95:9f:40:a0:fd:
4d:89:07:e3:ba:f9:38:a8:a7:c7:12:fd:b3:70:1f:0b:2a:d1:
55:c2:45:7e:7e:e2:1b:ca:a3:2e:9c:42:ad:34:13:1d:3f:a1:
05:43:bc:35:e2:69:84:74:23:97:44:bd:c2:57:10:28:99:65:
61:16:f5:2d:ba:b9:56:48:53:0c:4f:3a:24:1f:ab:43:22:bf:
18:60:77:17:1f:75:0c:57:1f:49:88:50:b8:d3:00:e4:47:46:
82:e4:6d:c5:58:09:34:5b:ed:79:62:e8:fc:79:d7:39:f2:b3:
72:b0:63:ae:07:8b:3e:0e:cb:6e:5c:fc:c6:37:a3:25:68:d8:
ca:d3:c9:b1:aa:2d:ea:58:78:ba:80:a9:88:3e:65:cd:61:4c:
03:19:2a:37:ed:08:29:16:18:8f:8a:b8:dd:25:da:07:99:e7:
65:24:18:98:f0:62:31:75:f8:a9:f8:b3:42:0c:74:54:4a:73:
e3:5e:c7:f4:04:f7:5d:4f:09:b3:a2:c9:d7:c4:2b:3b:bd:a5:
ca:65:21:92:37:7c:76:7a:5c:41:f9:1e:8f:61:26:a5:04:ab:
0f:55:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:57 2026 by rpki-client