
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json)
Hash identifier: FKRdcQ4GS3AUNPh/LYweIIdiQL3nNZpHJn3+FbYE+u0=
Subject key identifier: 9F:2A:8A:FC:E3:FA:60:81:89:3D:05:74:1E:6F:C9:7C:CD:D2:BE:2E
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial: 0392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
Manifest number: 038D
Signing time: Fri 27 Mar 2026 00:33:21 +0000
Manifest this update: Fri 27 Mar 2026 00:33:20 +0000
Manifest next update: Fri 03 Apr 2026 00:33:20 +0000
Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: I+V/kvAE8HZvsFSfttrB+2mqxaDxGnexFBxSzYSwFqk=)
2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: G2P7RPVZzQ6H46xf92du5p3KHSSEhU1N0cupaCReWGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Validity
Not Before: Mar 27 00:33:20 2026 GMT
Not After : Apr 3 00:33:20 2026 GMT
Subject: CN=69c5d050-4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:a7:30:d5:7b:32:9b:ee:88:f3:8d:36:61:
79:4c:e9:61:99:09:1d:59:49:8b:14:c6:3a:08:ed:
42:38:21:89:6f:73:f9:aa:15:6c:89:c7:4b:e6:fc:
00:90:8e:1b:88:2f:d0:ad:e6:52:93:45:62:bd:f4:
48:f8:78:dc:f0:7c:57:84:d5:9f:93:15:ba:a4:47:
02:31:c7:45:03:f9:ec:56:d7:57:d6:e1:b6:40:ee:
cd:6b:83:37:f2:06:83:95:f0:73:d4:32:85:f5:75:
46:5a:44:f6:64:9c:af:15:e0:21:c9:b1:50:fc:d3:
1b:c5:bb:0c:fa:55:f2:9f:a7:58:7a:0a:23:0d:6b:
e1:fa:4e:33:c7:a8:67:b0:83:af:96:dc:39:8b:37:
3f:72:96:a0:0f:9e:99:cf:13:78:b8:16:bd:a2:f7:
a4:df:25:0b:1b:9e:13:43:56:f5:da:e7:83:cd:46:
b7:8d:34:f6:a2:1d:09:82:3b:a1:46:56:49:24:c1:
a9:05:6c:7b:e3:d1:5d:e0:b0:6c:26:e4:5e:19:7b:
d8:00:23:6c:49:62:0f:0d:4e:09:0b:b5:25:b9:bd:
99:f9:b9:1a:d2:cf:e6:59:8f:e7:58:34:f5:7a:78:
61:29:89:e6:f0:b7:76:12:7a:e0:82:7e:7e:13:f0:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:8A:FC:E3:FA:60:81:89:3D:05:74:1E:6F:C9:7C:CD:D2:BE:2E
X509v3 Authority Key Identifier:
keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:12:d1:c2:7d:28:d9:57:ce:98:99:99:ad:43:dd:d4:0c:87:
0a:5a:e5:40:d0:45:9a:a8:1d:d3:cb:e3:b2:ca:b7:f8:c3:14:
35:61:87:13:e9:72:3d:7d:85:fa:5e:ee:39:4e:5a:b6:b5:6b:
13:9b:fc:c3:80:c2:5a:89:36:69:cb:1f:86:35:12:7a:dd:76:
45:c7:4d:26:20:2c:2a:4f:22:43:be:e1:94:48:d0:0f:ab:d0:
db:0e:49:32:04:a1:f6:de:4f:12:53:0f:13:cf:ef:e2:1c:ae:
22:a0:db:08:bc:7e:f3:15:92:67:23:ce:6a:d9:6a:d9:72:e4:
04:18:1f:1a:47:9e:22:83:63:e6:eb:4c:9d:56:6d:7d:61:ab:
4b:95:a8:43:8e:e9:de:ee:88:1d:36:81:dd:65:c5:cd:ae:12:
68:11:ed:4b:3b:7f:26:8c:a8:a5:b9:33:de:54:c3:d3:aa:5e:
3d:2e:63:29:d6:c6:83:a6:9d:46:12:6d:7a:80:c5:e2:60:80:
5d:8f:e1:fa:4a:cf:1e:0d:fd:df:3e:1c:0b:60:d1:94:3a:29:
c7:10:f7:e2:7e:0a:09:30:51:a2:83:9f:f7:ad:29:06:85:c0:
59:f3:bb:b1:11:86:30:b2:e0:95:e2:9a:19:9a:6a:60:f4:d5:
72:6f:06:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNkQxMTAvBgNVBAUTKDAwNDFFRkFCRkYzNDNDQzJFODNGQ0U5NkNFRDg5MDU5
RThGNEUyQzEwHhcNMjYwMzI3MDAzMzIwWhcNMjYwNDAzMDAzMzIwWjAYMRYwFAYD
VQQDEw02OWM1ZDA1MC00MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArSCnMNV7MpvuiPONNmF5TOlhmQkdWUmLFMY6CO1COCGJb3P5qhVsicdL5vwA
kI4biC/QreZSk0VivfRI+Hjc8HxXhNWfkxW6pEcCMcdFA/nsVtdX1uG2QO7Na4M3
8gaDlfBz1DKF9XVGWkT2ZJyvFeAhybFQ/NMbxbsM+lXyn6dYegojDWvh+k4zx6hn
sIOvltw5izc/cpagD56ZzxN4uBa9ovek3yULG54TQ1b12ueDzUa3jTT2oh0Jgjuh
RlZJJMGpBWx749Fd4LBsJuReGXvYACNsSWIPDU4JC7Ulub2Z+bka0s/mWY/nWDT1
enhhKYnm8Ld2Enrggn5+E/B0LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8qivzj
+mCBiT0FdB5vyXzN0r4uMB8GA1UdIwQYMBaAFABB76v/NDzC6D/Ols7YkFno9OLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM2RC8yMkU2OTJBQURD
QjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBNTG9QODZXenRpUVdlajA0
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FFSHZxXzgwUE1Mb1A4Nld6dGlRV2VqMDRzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjM2RC8yMkU2OTJBQURDQjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBN
TG9QODZXenRpUVdlajA0c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiBLRwn0o2VfOmJmZrUPd1AyHClrlQNBFmqgd08vjssq3+MMUNWGHE+lyPX2F
+l7uOU5atrVrE5v8w4DCWok2acsfhjUSet12RcdNJiAsKk8iQ77hlEjQD6vQ2w5J
MgSh9t5PElMPE8/v4hyuIqDbCLx+8xWSZyPOatlq2XLkBBgfGkeeIoNj5utMnVZt
fWGrS5WoQ47p3u6IHTaB3WXFza4SaBHtSzt/Joyopbkz3lTD06pePS5jKdbGg6ad
RhJteoDF4mCAXY/h+krPHg393z4cC2DRlDopxxD34n4KCTBRooOf960pBoXAWfO7
sRGGMLLgleKaGZpqYPTVcm8GbQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:26 2026 by rpki-client