
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier: Gldda9T2zVOTAlhEy0GjuITPvh8wug4Gkbwc8jyfprY=
Subject key identifier: 45:5B:3D:0D:88:0E:64:F3:6F:5A:71:EE:11:DC:87:FA:B1:73:24:90
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial: 08EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number: 08D8
Signing time: Tue 22 Sep 2026 20:16:13 +0000
Manifest this update: Tue 22 Sep 2026 20:16:13 +0000
Manifest next update: Tue 29 Sep 2026 20:16:13 +0000
Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: EcX9xa8WLowVEJOi8r5ukCLsNdM4u6r/Wztm9Ymdotw=)
2: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=)
3: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Validity
Not Before: Sep 22 20:16:13 2026 GMT
Not After : Sep 29 20:16:13 2026 GMT
Subject: CN=6ab2e20d-83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:bb:4c:48:45:00:91:f7:80:21:60:0b:6e:
3a:89:e7:f1:68:cd:fc:55:cc:66:3c:a5:a5:17:71:
4c:d5:ef:99:0d:13:97:a8:fd:d8:5a:04:ca:33:64:
1f:26:98:43:d8:48:83:df:70:27:a0:a5:1a:ef:08:
f6:c9:20:f8:d2:af:6e:50:66:4e:50:98:c6:ef:dd:
04:e7:46:7c:3a:76:1e:0f:4f:31:1b:08:42:96:4d:
c6:a9:81:9d:93:e7:cd:f7:79:11:37:d8:1e:95:f6:
4e:1c:67:c5:fc:a4:a6:99:29:0e:ed:d5:bf:7e:e5:
b5:32:66:60:fd:ad:86:34:de:9d:66:e6:f8:01:dd:
f6:17:ba:c4:01:c5:fb:8f:93:9f:af:e9:96:e5:73:
1c:b1:24:86:cf:73:1b:ea:2b:41:07:8a:63:7c:05:
55:79:66:91:6a:f5:7c:ad:27:76:36:1e:16:75:aa:
08:11:74:9c:94:b4:59:5a:38:fe:3c:f1:92:95:a6:
83:07:9d:8b:25:ca:81:1b:af:37:7a:f4:49:de:16:
00:32:b7:ea:46:0b:df:79:11:85:08:1b:00:b4:97:
4f:e9:38:80:26:96:92:6b:59:6a:6b:d6:92:18:5e:
f8:75:4a:54:96:c4:e5:41:62:37:32:12:23:f0:2c:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:3D:0D:88:0E:64:F3:6F:5A:71:EE:11:DC:87:FA:B1:73:24:90
X509v3 Authority Key Identifier:
keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ad:c8:32:99:83:70:e2:9b:63:16:55:2b:66:d2:54:6a:e2:
1b:0e:ec:de:66:66:03:0e:a0:8b:5e:05:8c:25:03:d6:17:20:
e6:5c:da:f5:06:43:47:56:48:ef:34:4c:ee:c4:34:4a:1e:f1:
b0:6b:5d:47:72:76:ec:3c:58:49:83:7b:62:cb:7d:fa:47:b2:
24:f4:74:75:60:b2:a2:4b:cc:7a:ef:81:75:51:2f:a2:4a:c3:
4e:74:c4:ca:19:3b:12:8f:5e:cb:a9:cc:c0:20:8d:7f:a5:d7:
ea:08:e3:96:7c:92:11:34:21:37:fc:4b:0e:77:94:09:be:9f:
fd:f1:1e:fb:3e:39:bd:f0:b1:d9:91:cd:26:aa:b8:c3:14:f8:
d1:23:71:ed:80:c3:77:99:fc:1a:0f:59:99:24:fd:5b:c5:0e:
3c:e5:52:74:ad:d7:79:1f:e1:37:2c:22:53:18:3e:d7:28:87:
5c:f0:b8:b4:81:ad:84:79:5f:99:97:20:86:7d:1f:5e:00:97:
d0:bc:b7:39:be:cd:0e:64:e3:7e:85:1f:79:28:e8:7e:4a:19:
62:1f:3c:fb:2e:fd:88:22:b1:a0:ec:3b:4f:f3:42:5b:9d:9b:
1e:16:5c:9f:43:17:60:32:76:54:a0:b7:ad:31:88:40:c0:0b:
89:ad:a5:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw
QzFDOEYyOTEwHhcNMjYwOTIyMjAxNjEzWhcNMjYwOTI5MjAxNjEzWjAYMRYwFAYD
VQQDEw02YWIyZTIwZC04M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCK7TEhFAJH3gCFgC246iefxaM38VcxmPKWlF3FM1e+ZDROXqP3YWgTKM2Qf
JphD2EiD33AnoKUa7wj2ySD40q9uUGZOUJjG790E50Z8OnYeD08xGwhClk3GqYGd
k+fN93kRN9gelfZOHGfF/KSmmSkO7dW/fuW1MmZg/a2GNN6dZub4Ad32F7rEAcX7
j5Ofr+mW5XMcsSSGz3Mb6itBB4pjfAVVeWaRavV8rSd2Nh4WdaoIEXSclLRZWjj+
PPGSlaaDB52LJcqBG683evRJ3hYAMrfqRgvfeRGFCBsAtJdP6TiAJpaSa1lqa9aS
GF74dUpUlsTlQWI3MhIj8CyVTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVbPQ2I
DmTzb1px7hHch/qxcySQMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy
ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG
VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJK3IMpmDcOKbYxZVK2bSVGriGw7s3mZmAw6gi14FjCUD1hcg5lza9QZDR1ZI
7zRM7sQ0Sh7xsGtdR3J27DxYSYN7Yst9+keyJPR0dWCyokvMeu+BdVEvokrDTnTE
yhk7Eo9ey6nMwCCNf6XX6gjjlnySETQhN/xLDneUCb6f/fEe+z45vfCx2ZHNJqq4
wxT40SNx7YDDd5n8Gg9ZmST9W8UOPOVSdK3XeR/hNywiUxg+1yiHXPC4tIGthHlf
mZcghn0fXgCX0Ly3Ob7NDmTjfoUfeSjofkoZYh88+y79iCKxoOw7T/NCW52bHhZc
n0MXYDJ2VKC3rTGIQMALia2lag==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:37:31 2026 by rpki-client