
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier: h5JdhINciA6AHHp9rNNyzc2J/s6M7bazYQifDi8G7OU=
Subject key identifier: DC:ED:90:F6:A6:61:2D:0D:0D:B8:3B:4A:D5:BC:87:95:E5:57:EC:A8
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 0393
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number: 037A
Signing time: Mon 11 May 2026 00:57:21 +0000
Manifest this update: Mon 11 May 2026 00:57:20 +0000
Manifest next update: Mon 18 May 2026 00:57:20 +0000
Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: DKVPNbpGWhQkKvAXIy0QECa8UQANoesxD5hweZlwOHI=)
2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: fkyJKn8Oh+03JayycchiXNnOyFPcVFyNkr5e5TiQlCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: May 11 00:57:20 2026 GMT
Not After : May 18 00:57:20 2026 GMT
Subject: CN=6a012971-98a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:c7:b7:ab:75:60:9c:73:00:e7:af:00:e7:
6f:55:08:36:11:a1:62:eb:8a:6a:76:3c:56:cf:5b:
ab:45:a2:02:76:51:f9:6d:f4:e9:43:8b:41:8a:a3:
9a:99:a6:16:1d:d3:8f:f2:ed:5a:8e:60:47:0a:2a:
0b:a3:03:d0:85:c5:45:bc:76:73:34:fd:3f:00:a2:
6a:f2:4e:71:72:ff:d0:6a:10:ae:97:06:1e:a3:ab:
70:28:55:bb:fd:0a:c4:b1:20:e9:af:66:bb:bc:35:
6d:8f:32:4d:61:07:5a:bb:5a:04:5c:69:fc:9e:07:
21:45:ec:a3:9c:8d:7d:a2:a9:26:17:40:56:70:47:
86:be:2a:25:d3:b2:44:fc:2c:c3:fa:8f:9d:33:90:
74:69:d0:b9:9f:87:2c:9c:24:4a:3f:12:fd:72:40:
3e:c4:de:b3:a3:dd:6c:98:08:58:b2:2d:c6:91:87:
ab:67:37:d4:24:96:85:62:8e:46:ec:1f:65:9c:26:
68:71:07:0d:59:b0:84:93:74:63:f3:32:2b:30:e1:
3d:c0:47:a3:30:31:19:43:71:06:79:fc:ba:16:9b:
d0:51:0b:80:3d:11:6e:b2:77:f9:ff:d3:c1:f6:9b:
b1:06:f1:ce:23:01:34:f0:df:5c:15:eb:09:57:c1:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:90:F6:A6:61:2D:0D:0D:B8:3B:4A:D5:BC:87:95:E5:57:EC:A8
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:a9:91:0b:dc:5c:5a:78:00:21:a5:01:50:0a:a7:d0:44:
68:1a:7b:7b:24:36:d6:3c:4f:9f:07:d0:90:ec:1c:1f:b6:49:
0d:2c:12:b1:ee:97:dc:9f:fd:46:fc:c4:cc:08:79:5d:5e:23:
6e:44:34:22:10:a1:ee:fa:15:7a:0a:90:4e:55:47:07:25:fe:
66:e4:57:f3:86:71:06:0c:8c:ed:31:6f:cb:cb:5c:ce:46:8f:
1e:e3:98:b9:ea:f0:eb:05:dd:fd:ee:09:87:2d:42:31:2e:8b:
18:df:57:f8:10:63:dc:18:1c:87:fa:a9:65:09:00:54:e2:1f:
d8:db:01:a5:d4:5b:fd:e7:10:19:2b:2d:43:cc:eb:f2:60:12:
67:a3:fe:57:ed:36:bf:99:a2:95:6e:79:7c:24:d2:52:d2:da:
8e:bb:41:cc:53:30:98:66:2d:60:b6:9b:d5:18:1a:37:3d:07:
e0:6a:45:17:b6:7b:f7:38:e4:df:f4:e9:66:0d:dc:1c:d8:f8:
6d:6d:55:a7:3a:81:e0:6e:2c:6d:e5:ee:4d:81:0f:e6:59:e3:
86:98:07:f0:e5:f5:5c:b2:fd:0d:93:bc:2b:3f:2c:7c:6f:c6:
3e:f0:55:cd:09:55:93:0b:b3:9f:40:1a:eb:7e:3a:d6:46:90:
11:b4:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:34:36 2026 by rpki-client