
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: zSD+B+rY6i6Yx7jNPwsIUR+gCcGV3k/viCcacx1py38=
Subject key identifier: BA:61:30:02:DA:61:41:69:72:5C:02:95:73:38:41:DA:6C:58:76:02
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 07A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 079B
Signing time: Tue 12 May 2026 21:34:43 +0000
Manifest this update: Tue 12 May 2026 21:34:43 +0000
Manifest next update: Tue 19 May 2026 21:34:43 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: aCtFco+Nq/ULqTFOBSDwEBlXtPbO91IKZfOYuXzTYVs=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 9CgW3feWo669bB+n336/YLIKgQZBrzljXQlC++9jPh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: May 12 21:34:43 2026 GMT
Not After : May 19 21:34:43 2026 GMT
Subject: CN=6a039cf3-3965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:af:72:92:90:b7:b8:6a:a0:b1:7e:e2:79:
09:fe:b7:79:0e:d1:7f:32:8f:19:df:41:7d:0f:01:
51:ef:fb:77:3b:cd:78:fb:d9:cd:0a:a7:2c:54:b3:
dc:aa:61:94:13:76:ba:6c:f2:52:56:d5:2f:b2:5e:
fa:1b:dd:7b:be:9c:ff:fb:ad:d6:b9:2f:03:44:02:
80:a7:76:ad:4d:07:48:7f:2d:c7:c9:7d:ca:44:1c:
90:1f:89:ce:5b:41:3f:71:94:64:19:85:4b:f3:a5:
8c:c2:24:d9:33:36:55:7d:a7:d7:81:dc:84:eb:c1:
53:5f:b7:22:fa:86:2f:c5:2f:e1:17:a2:20:84:1f:
9d:c0:f2:91:3b:54:8b:58:59:66:4e:fd:a3:ef:82:
9a:5c:59:bb:43:75:3d:19:9a:b9:4a:b7:64:6f:46:
9e:39:bb:ee:3d:fd:a9:40:dd:ea:62:fe:b2:39:2a:
25:66:ab:9f:3e:cd:ee:56:b5:ea:7d:5d:c4:a5:e6:
12:ea:41:51:9d:d7:6d:d3:06:7e:2b:fc:70:13:8e:
dc:e3:b5:07:92:a8:fb:46:4b:e6:d4:03:da:8e:63:
8c:f6:16:95:cc:52:3b:35:32:ba:e0:e7:d1:91:e5:
cc:da:9a:96:f5:0a:94:43:37:06:d9:56:b9:e0:dc:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:30:02:DA:61:41:69:72:5C:02:95:73:38:41:DA:6C:58:76:02
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:68:f6:ee:0b:5e:68:f0:6a:86:e0:75:89:ff:e0:52:c7:
e1:5a:5b:01:09:b9:e0:75:83:a4:57:0d:39:7a:75:09:d2:b6:
98:4c:3b:cd:c8:c1:6c:28:cc:f4:d9:7c:f7:80:8c:44:eb:a7:
59:87:66:e2:60:d4:9b:35:10:3b:0b:98:c8:ee:37:54:6f:54:
cf:6e:1e:d5:1d:2d:52:e5:20:d6:4c:e1:c9:d6:6d:13:5f:bc:
eb:bf:0e:44:6b:a6:d3:e1:6d:2c:e6:78:ea:08:c3:de:e3:64:
3b:6c:00:9e:8d:bf:7e:f7:87:97:2c:ce:e1:e6:91:7a:3f:23:
ef:2d:eb:c2:d9:ec:0e:07:a9:25:02:22:14:2e:5b:76:99:42:
c7:c0:b3:e1:b9:2c:af:63:0c:8d:03:bc:d2:57:78:e8:8b:34:
88:09:1e:cb:c6:b9:2b:64:fb:bf:53:f9:e6:4c:77:7a:29:82:
49:8f:2a:44:85:64:df:04:f8:69:8c:87:0f:dc:f6:6c:0e:e7:
79:ef:88:96:df:66:c1:80:1f:39:e9:bc:30:93:31:b7:73:da:
7e:98:02:3b:6e:e6:20:0a:e8:57:b0:76:78:99:74:d5:04:df:
d7:08:77:39:ab:af:0b:c8:d0:05:ea:ca:d2:70:6d:3d:74:c6:
c7:46:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:37 2026 by rpki-client