
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: Cr7osyQLKkOz6x2CmqJTM6+lEcQev1Ywc4NgYd/vh5Q=
Subject key identifier: B8:E3:86:F0:93:50:13:3B:A9:15:3A:EC:B7:2E:50:FB:39:5E:E7:DD
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 07E1
Signing time: Sat 26 Sep 2026 21:25:13 +0000
Manifest this update: Sat 26 Sep 2026 21:25:13 +0000
Manifest next update: Sat 03 Oct 2026 21:25:13 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: AQxB2qEdPfNHl97jhhqE78uMJpYH6LuuSph8HDPIZDM=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 9CgW3feWo669bB+n336/YLIKgQZBrzljXQlC++9jPh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Sep 26 21:25:13 2026 GMT
Not After : Oct 3 21:25:13 2026 GMT
Subject: CN=6ab83839-b908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:d0:e4:a3:c1:42:07:2e:96:c7:89:19:da:
13:dd:26:d2:39:71:09:67:e3:78:b9:48:93:b2:68:
43:5e:d7:5f:ef:58:97:8d:2b:a5:b6:83:30:c0:28:
54:53:d7:4a:ce:c6:1a:d6:7b:0d:df:f6:cc:0c:1f:
fb:75:dc:8e:a6:51:18:20:16:27:40:2c:ae:44:85:
52:25:ae:4b:3d:43:40:98:f1:16:8b:fb:5d:53:03:
a2:56:a0:25:8c:f2:ff:6c:d2:e9:eb:aa:31:c9:8b:
4b:30:31:7c:1f:ef:06:da:92:17:f2:03:b9:86:d2:
7b:30:2e:72:8b:bd:d6:eb:f5:8a:bf:b1:84:3b:48:
af:69:a9:5c:ba:75:ef:7a:ee:34:a0:d6:b4:a9:19:
cf:c8:a8:4b:78:40:86:5e:ec:14:51:ac:87:aa:33:
72:5e:7f:20:71:32:26:a4:66:a6:1c:af:61:b3:b6:
d9:5f:fc:00:16:d2:59:24:47:08:2f:cf:58:22:3a:
b7:c0:0b:03:e6:1a:3d:06:96:77:45:6b:b4:c9:c0:
28:9f:ad:02:41:73:2e:ec:03:26:b1:fb:1a:80:51:
f0:17:fe:29:8d:cf:2f:94:72:70:86:91:bb:1c:8f:
c9:8e:d9:8a:48:94:fd:4c:63:52:12:69:1c:97:bf:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:86:F0:93:50:13:3B:A9:15:3A:EC:B7:2E:50:FB:39:5E:E7:DD
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:d4:f2:f6:ee:a1:10:0c:a7:db:18:13:5c:ea:c8:c9:40:
31:cb:29:30:e1:e4:68:8d:3b:5e:e6:ff:f8:e5:c4:37:ce:fc:
86:63:3d:80:ce:95:8e:8c:95:55:b1:2e:9c:02:2d:87:e8:af:
06:3b:35:cd:98:ec:4c:c8:73:b9:57:51:58:a0:ad:80:6a:ae:
1b:ed:0a:08:53:97:3f:3c:1b:e2:ee:58:d4:46:96:d6:f4:26:
61:99:52:fb:4f:e8:d3:2f:a1:eb:e2:82:54:f4:e0:cc:cf:76:
21:f7:11:b4:70:b4:ed:ea:6c:a2:3f:96:34:4b:08:c3:b3:e2:
c0:43:84:15:8b:0d:06:13:1b:10:3e:38:66:f1:fd:c6:3d:9e:
8e:6c:3b:4e:fd:20:c7:54:38:e3:0a:b3:44:da:2e:18:02:a8:
98:36:7d:65:4a:be:8f:54:03:63:df:7a:f6:3e:92:3d:32:00:
1b:5e:81:07:b9:ab:fe:45:2a:17:a5:cc:0b:00:76:f1:45:b0:
2f:6a:74:6d:52:0c:a2:f4:3b:6c:1b:18:95:dd:04:77:d9:0b:
d5:00:77:e8:6c:09:9f:83:7a:99:26:cc:30:11:e4:f4:ae:46:
42:60:19:3d:1d:83:87:c3:10:eb:11:58:63:7f:bd:a6:11:85:
c2:51:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:28 2026 by rpki-client