
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier: v2IzLe2xj7bA/612Ub9xGDq2MBjaVP/wsKbNcSQc4Hg=
Subject key identifier: 50:8D:D2:94:5B:9B:2D:15:F7:DC:70:DC:FB:4E:2F:F5:29:12:60:4F
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 13C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number: 13AF
Signing time: Tue 12 May 2026 16:58:59 +0000
Manifest this update: Tue 12 May 2026 16:58:58 +0000
Manifest next update: Tue 19 May 2026 16:58:58 +0000
Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: DUl9YFQjXUAYN3QYhegBAmPpR6qvS9y9qPd92jGVBfo=)
2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=)
3: F5B633B2283411F1B1D7DF7FCA833773.roa (hash: phJRFQUQr06dG7WdiHLLqzvwwFNfxlyvNnaDszHIaEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5059 (0x13c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: May 12 16:58:58 2026 GMT
Not After : May 19 16:58:58 2026 GMT
Subject: CN=6a035c53-3320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:4e:75:b2:07:19:5b:fb:42:0e:b4:04:21:
75:21:0f:bc:9d:f1:9f:7c:a4:6c:e8:45:ef:fd:ec:
e9:f3:c7:f3:68:6c:25:6b:93:17:a8:63:61:6c:16:
d1:94:20:51:bd:17:a9:80:53:3b:f3:19:5d:0f:25:
d9:3d:b9:80:a6:84:ab:26:4f:b4:e8:af:32:0f:fb:
ed:0c:41:a7:70:ad:f4:01:3a:18:41:8b:5d:20:66:
2a:15:dd:68:be:46:dd:ef:25:2f:4a:b7:95:db:83:
e9:a7:d2:a7:a3:fe:3a:fc:b6:08:5f:a2:b3:35:a8:
b3:ab:5a:bf:d6:8d:78:6c:0a:3c:d5:93:dc:1c:a1:
1a:e8:5c:6d:38:c0:cc:dd:4e:56:97:c1:d1:a4:8f:
ab:78:2f:dc:57:30:9d:51:2a:a7:63:8b:68:46:b8:
8e:4d:ff:e8:75:c0:67:11:3f:cb:a0:e9:60:9d:59:
a8:3d:f5:63:63:cb:ce:76:d2:dd:d5:44:82:89:e0:
47:9e:4b:2e:01:c9:48:f4:b9:c4:54:f2:61:71:4f:
ec:27:ba:f9:97:0f:b6:d0:d0:72:f1:68:65:20:41:
9d:e3:28:8f:da:ba:e6:20:52:bf:e4:f3:3f:3e:c1:
18:59:1e:fb:87:97:db:d9:d8:01:87:33:4c:a4:ee:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:D2:94:5B:9B:2D:15:F7:DC:70:DC:FB:4E:2F:F5:29:12:60:4F
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:6f:ae:06:af:e4:6b:23:88:52:2d:7e:60:67:5f:45:64:
68:e2:a0:b1:5c:1f:3b:19:aa:41:f4:0c:91:1e:12:22:bb:10:
84:bd:6d:27:15:b1:60:09:74:1c:4d:cd:da:81:52:62:db:8b:
f0:4e:7e:f3:a8:e0:6a:23:33:7d:af:44:87:e9:a1:56:f3:5e:
b4:bd:87:ff:48:21:06:bb:57:55:cf:fc:00:21:69:ab:a9:cb:
f7:fa:4d:71:f6:e0:1f:8f:bf:6a:a5:6f:60:19:1a:36:ba:17:
05:20:52:2d:cd:74:db:4c:9a:b2:37:77:e7:57:78:ae:e7:2b:
c1:71:45:2f:e5:a6:4a:07:37:b3:23:fe:4f:a0:9e:ab:b4:b6:
bf:63:43:b8:80:6f:fa:2f:00:ae:75:c9:ef:8c:dc:54:47:24:
8c:39:c6:93:6c:b1:03:f6:c8:e0:85:ab:0b:c0:17:4a:3d:0d:
2c:11:ed:17:ba:31:da:31:9c:4c:30:ae:bd:7f:bd:67:c5:a5:
be:5e:14:c2:0a:f5:70:6f:e6:f4:64:ca:4e:5a:a4:e6:7e:a3:
7e:f2:dd:26:e6:e4:c3:dd:08:f3:2d:b3:4d:42:cb:c9:fc:8c:
8a:a4:73:6e:1f:19:dc:15:a7:d8:a8:72:83:3e:b3:45:72:f2:
a4:d3:1f:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz
RDY5NTZFMzIwHhcNMjYwNTEyMTY1ODU4WhcNMjYwNTE5MTY1ODU4WjAYMRYwFAYD
VQQDEw02YTAzNWM1My0zMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokBOdbIHGVv7Qg60BCF1IQ+8nfGffKRs6EXv/ezp88fzaGwla5MXqGNhbBbR
lCBRvRepgFM78xldDyXZPbmApoSrJk+06K8yD/vtDEGncK30AToYQYtdIGYqFd1o
vkbd7yUvSreV24Ppp9Kno/46/LYIX6KzNaizq1q/1o14bAo81ZPcHKEa6FxtOMDM
3U5Wl8HRpI+reC/cVzCdUSqnY4toRriOTf/odcBnET/LoOlgnVmoPfVjY8vOdtLd
1USCieBHnksuAclI9LnEVPJhcU/sJ7r5lw+20NBy8WhlIEGd4yiP2rrmIFK/5PM/
PsEYWR77h5fb2dgBhzNMpO6HqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCN0pRb
my0V99xw3PtOL/UpEmBPMB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2
OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5
YV9vSktEQWhfcEU5YVZiakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQltvrgav5GsjiFItfmBnX0VkaOKgsVwfOxmqQfQMkR4SIrsQhL1tJxWxYAl0
HE3N2oFSYtuL8E5+86jgaiMzfa9Eh+mhVvNetL2H/0ghBrtXVc/8ACFpq6nL9/pN
cfbgH4+/aqVvYBkaNroXBSBSLc1020yasjd351d4rucrwXFFL+WmSgc3syP+T6Ce
q7S2v2NDuIBv+i8ArnXJ74zcVEckjDnGk2yxA/bI4IWrC8AXSj0NLBHtF7ox2jGc
TDCuvX+9Z8Wlvl4Uwgr1cG/m9GTKTlqk5n6jfvLdJubkw90I8y2zTULLyfyMiqRz
bh8Z3BWn2Khygz6zRXLypNMfVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:49:38 2026 by rpki-client