
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File: AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier: Ge3b3ou6tNOj3pAkvZCwZcStAUlfzu/DAJl//N2G/8g=
Subject key identifier: E3:02:5C:D2:8B:4C:81:B3:FB:28:00:28:19:60:4A:22:AD:EA:98:F5
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial: 24A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number: 2475
Signing time: Thu 23 Jul 2026 23:33:42 +0000
Manifest this update: Thu 23 Jul 2026 23:33:41 +0000
Manifest next update: Thu 30 Jul 2026 23:33:41 +0000
Files and hashes: 1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: a5HLbFxYU399XB06yfyPYz1ALso2Rf5082R3bf+9hCk=)
2: EDC8B49086EE11F19E006003A7EE528E.roa (hash: h+jWpQU5RPeD0V9iWjQpKIX46qoIpgt7mOA43N2WPl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9384 (0x24a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Validity
Not Before: Jul 23 23:33:41 2026 GMT
Not After : Jul 30 23:33:41 2026 GMT
Subject: CN=6a62a4d6-6a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:b7:4c:cb:85:54:43:79:38:6e:29:65:ad:
9b:55:a5:0e:25:20:92:4c:13:0e:92:bc:ac:41:83:
20:4e:65:d7:41:17:66:0e:d2:17:ff:3e:e3:df:87:
58:47:b1:d0:d1:e3:0f:19:d3:37:96:79:f8:f0:6e:
6d:fe:d7:62:46:9b:59:07:f8:f5:51:83:9d:1a:e5:
3b:58:c8:bc:b2:31:cb:4d:13:2f:28:81:1d:76:ed:
2f:03:1b:30:89:a3:86:a5:e7:c4:29:3e:1d:09:81:
06:e0:9b:12:56:11:56:3a:8f:39:0b:80:7f:54:17:
96:63:aa:b4:b7:c7:0e:e7:09:96:ec:03:27:59:bc:
10:69:6f:ff:d8:9a:9f:b8:fb:02:b2:de:6c:c8:e7:
93:bd:59:60:4a:ea:68:5f:28:f2:30:f5:b4:bc:25:
7a:23:b6:27:26:20:e6:9d:7d:e1:dd:dc:f5:1a:1a:
46:2e:4e:10:fe:76:94:27:6c:5b:a7:67:14:24:a9:
54:b0:cd:ed:5a:3d:7e:c6:a8:b5:af:46:e5:41:93:
13:5e:52:e1:64:f5:d7:48:e8:30:e2:c5:aa:bb:d0:
d7:d4:9f:69:bf:ae:e5:b9:c5:44:75:86:09:cd:19:
3e:2b:58:2a:b8:a4:37:fa:93:d4:4b:d6:fd:70:84:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:5C:D2:8B:4C:81:B3:FB:28:00:28:19:60:4A:22:AD:EA:98:F5
X509v3 Authority Key Identifier:
keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:5a:44:8f:a3:be:1b:df:b7:c6:cb:d4:72:56:11:e7:93:79:
53:30:3e:91:bc:5f:a0:89:a5:fb:f7:e0:9c:46:82:fb:28:23:
73:6c:6a:1a:40:6a:fd:c6:47:80:48:28:f8:3c:dc:64:87:35:
ee:5c:01:f3:76:e6:6c:ad:f8:36:b0:70:65:b8:c8:ea:d4:34:
d5:e0:cb:fd:d8:cc:3a:32:ab:0f:b0:f5:df:d5:e6:9b:f4:d9:
b3:ea:03:5f:dd:37:52:7e:c1:83:48:ff:46:54:ee:53:39:08:
aa:20:3c:14:eb:b1:0c:f0:3f:91:f4:15:f6:9c:a3:f0:ad:f3:
19:ba:16:eb:d9:fb:4c:3f:5c:99:25:7c:26:5e:31:8f:92:fd:
ea:fc:e1:d6:c9:a4:09:8c:16:07:1f:be:6e:49:a6:01:d7:0a:
51:85:33:9c:98:2a:01:a0:f0:b5:6d:6f:58:f7:2e:b0:31:a5:
cb:60:33:cb:0d:8f:36:cb:d5:a7:52:38:68:1f:c9:1a:2d:63:
7a:28:12:35:a6:32:1f:2b:d0:62:c8:79:4f:de:96:82:b9:ed:
01:21:59:2d:66:9c:2e:6b:a5:86:68:57:19:23:16:1b:04:c8:
e2:d4:d6:b2:86:49:eb:20:8e:be:2b:68:54:f3:b9:d5:d5:da:
f0:f9:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:00 2026 by rpki-client