
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: HG2BxH19c9s+O/01wEfHBnNpI71PcFGKupjBgG7AK6c=
Subject key identifier: 91:DF:E5:6F:2E:46:30:3B:AA:AF:D4:7D:F1:DD:65:C0:76:A8:76:62
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 0786
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 077D
Signing time: Tue 24 Mar 2026 21:17:53 +0000
Manifest this update: Tue 24 Mar 2026 21:17:53 +0000
Manifest next update: Tue 31 Mar 2026 21:17:53 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: AMUnHfzhhjVwzbPZNCYBk5a8KjKK6YaNDUB96chJh9Q=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: rrXR/mMfp+nNvMtlgu5ETQ6qS5+fNe9L+Axb6mpDm/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Mar 24 21:17:53 2026 GMT
Not After : Mar 31 21:17:53 2026 GMT
Subject: CN=69c2ff81-beee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:87:e7:cb:b2:34:1f:6e:00:c3:e1:54:fb:
5b:bb:4f:3b:0f:52:1a:ef:58:8c:dc:f9:3f:04:ad:
4b:a3:30:ba:23:87:68:22:e5:39:c4:6d:c7:82:a4:
51:85:02:88:a5:c6:78:90:82:f2:e1:9b:83:4e:2f:
7b:98:8b:26:96:b0:48:8a:10:0b:b0:fd:8c:c8:f8:
49:2f:d8:ef:95:9b:ce:36:1b:76:2b:9e:86:ac:b2:
8c:21:01:e4:75:b2:f0:30:0a:0e:7f:ae:18:5e:51:
5d:8d:9a:c0:50:c4:c7:c7:08:d9:cc:6d:19:aa:19:
b5:55:2e:c0:54:89:6b:fd:31:a3:d1:08:90:ce:c5:
95:c3:29:fd:fc:06:2b:1f:d7:a9:b3:01:6c:7e:0d:
23:01:b3:56:79:95:36:1b:eb:8e:6a:ba:cf:cb:4b:
46:4c:54:ae:b4:f0:fc:25:38:d2:e4:47:7a:40:ce:
4d:cd:1b:2a:e1:19:a7:88:3e:5e:b1:60:46:5f:35:
0b:99:e6:01:68:7c:e5:40:06:ca:db:86:ee:0e:96:
93:e3:b6:76:9e:bf:e5:98:55:93:d3:1e:15:30:b2:
cd:ba:ca:df:3e:5c:0f:db:73:a4:0b:01:2c:49:6f:
d3:91:a8:10:8e:bf:88:f3:e8:80:6f:d4:e8:cc:ab:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:E5:6F:2E:46:30:3B:AA:AF:D4:7D:F1:DD:65:C0:76:A8:76:62
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5b:1b:bf:cd:c6:44:d9:13:5d:e7:d2:99:a5:e0:08:60:a2:
d7:36:e1:5e:4d:0b:28:cd:76:0b:0f:42:2f:8a:c9:5e:57:6d:
20:19:4b:9f:e5:31:9b:b0:02:36:c1:1e:80:df:fc:50:0c:61:
e3:22:2b:3d:49:cf:70:98:19:ee:74:8e:78:f5:34:fa:38:a9:
9b:b8:64:0e:eb:61:9e:e0:38:ac:0b:ad:ba:dc:93:d2:d0:f7:
02:07:f7:90:a3:92:75:23:0f:d1:08:d2:aa:af:08:3e:b7:e3:
00:10:c6:ba:e2:48:96:c2:8f:d7:41:32:2d:29:23:79:53:3d:
2d:df:9c:23:26:bf:b3:51:3d:59:e8:3a:60:5a:92:80:10:74:
1a:f8:ca:7b:6e:bb:a4:2d:e4:77:17:a4:06:dc:4e:35:67:4e:
0a:76:14:56:35:fe:1a:75:aa:96:b1:b4:8a:48:dc:b0:af:5c:
52:d6:ff:9e:ab:d9:96:ad:52:8e:e8:73:bb:ad:e4:6a:2b:b8:
f8:bb:3f:10:c9:78:0a:39:15:80:58:81:1b:5d:0b:a0:6c:a8:
0a:38:c0:6f:c8:82:6e:41:0f:74:cc:79:12:f1:3f:40:46:e8:
b1:59:ad:34:12:5e:7c:64:2c:0b:e6:80:8c:37:25:d0:90:bb:
4c:bb:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:39 2026 by rpki-client