
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier: 34VStK01W5BnHJqlLDclREDsS7zOdOtR4ZE1llVsqjg=
Subject key identifier: B5:73:85:DD:72:8D:0D:DE:80:97:E1:1D:5B:84:96:B7:85:31:29:1D
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number: 07FC
Signing time: Wed 22 Jul 2026 21:53:00 +0000
Manifest this update: Wed 22 Jul 2026 21:52:59 +0000
Manifest next update: Wed 29 Jul 2026 21:52:59 +0000
Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: hyEHGfqi9ObnI6dlLVMRbdfBJnWxFxlnK4fk92JKJj0=)
2: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=)
3: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Validity
Not Before: Jul 22 21:52:59 2026 GMT
Not After : Jul 29 21:52:59 2026 GMT
Subject: CN=6a613bbc-8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:4d:17:fd:01:ed:ec:ef:7b:cc:30:5e:ab:
61:08:78:b9:91:76:97:4a:0e:53:87:8a:dd:31:6f:
7f:3c:a8:84:13:d5:0f:66:c4:58:c1:72:ae:f5:21:
66:28:87:8e:32:88:02:d5:3d:e2:7b:ce:5e:d0:7e:
cf:55:78:27:6b:22:bb:00:47:78:6b:6f:aa:48:63:
84:be:52:30:ec:91:2a:8d:b9:ed:e2:18:4b:54:26:
89:ca:bf:74:64:9e:0d:7e:15:af:33:08:0d:c8:62:
c9:10:5a:f6:73:8a:e1:5f:50:3b:10:35:ef:b7:4d:
93:b0:26:46:c0:1c:a9:8b:0d:77:06:88:c8:24:9e:
2f:4a:29:fd:53:51:f7:e6:b3:9f:19:b4:e4:8e:9d:
90:5b:6b:7e:1a:c4:7f:cb:08:93:f8:0a:24:50:aa:
a9:c8:4c:d4:cf:a1:f5:25:1c:7c:2a:df:3e:9d:52:
9c:bc:23:f8:f6:4d:82:81:ea:60:63:b5:c0:df:38:
c2:d3:7c:f7:6f:53:fe:95:5b:50:aa:38:7d:fe:1e:
0a:ec:76:02:6d:87:1e:80:6c:40:13:66:8d:a0:dc:
d4:c0:6d:ea:91:73:0b:24:88:8d:32:9c:c7:a6:c0:
f8:32:e0:7d:1e:f7:65:01:71:47:8b:ed:10:02:08:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:85:DD:72:8D:0D:DE:80:97:E1:1D:5B:84:96:B7:85:31:29:1D
X509v3 Authority Key Identifier:
keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:10:5c:a2:07:cd:e6:38:2b:b2:05:21:0b:ca:17:d2:e3:6c:
fa:cb:ec:79:25:b4:9f:5f:20:77:f4:b7:7e:36:96:70:c6:a5:
c6:97:ee:ec:24:05:ed:24:75:73:f6:36:45:ee:23:b6:f3:6e:
c4:83:38:d3:df:ed:e6:6e:fc:95:f2:b0:c0:ca:c5:52:e9:11:
18:3c:d3:9e:5c:74:25:3c:be:e8:76:c9:a1:b5:74:6d:13:0d:
54:7b:25:57:c4:e8:e4:29:43:ca:b0:23:c7:79:4e:a3:87:c1:
2a:8b:52:25:a8:5d:6e:a0:d7:96:df:b0:0a:f6:f3:22:e3:6b:
80:9b:d7:f6:43:c2:b0:2f:31:0d:d2:f0:78:da:c6:86:43:81:
6e:ef:c2:95:32:ee:d4:2c:9e:37:90:c2:5d:b1:0f:bf:5b:32:
cb:db:52:10:04:4a:e1:c2:95:6b:a5:9b:99:2b:37:14:10:a8:
a2:6b:87:d4:70:8d:93:73:2b:7b:9b:d1:7a:89:8d:f3:62:71:
86:35:cd:88:0a:81:f1:2d:ec:cc:95:c7:0c:e9:e5:21:89:a9:
fb:92:37:d7:4e:79:81:60:0b:bc:e3:2e:1a:78:72:b2:35:6c:
c1:d6:4f:d2:87:9c:3a:21:54:2c:27:b8:78:9b:57:91:f1:70:
0b:e0:38:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy
Qjk1NkNGRDcwHhcNMjYwNzIyMjE1MjU5WhcNMjYwNzI5MjE1MjU5WjAYMRYwFAYD
VQQDEw02YTYxM2JiYy04Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuW5NF/0B7ezve8wwXqthCHi5kXaXSg5Th4rdMW9/PKiEE9UPZsRYwXKu9SFm
KIeOMogC1T3ie85e0H7PVXgnayK7AEd4a2+qSGOEvlIw7JEqjbnt4hhLVCaJyr90
ZJ4NfhWvMwgNyGLJEFr2c4rhX1A7EDXvt02TsCZGwBypiw13BojIJJ4vSin9U1H3
5rOfGbTkjp2QW2t+GsR/ywiT+AokUKqpyEzUz6H1JRx8Kt8+nVKcvCP49k2Cgepg
Y7XA3zjC03z3b1P+lVtQqjh9/h4K7HYCbYcegGxAE2aNoNzUwG3qkXMLJIiNMpzH
psD4MuB9HvdlAXFHi+0QAghekwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVzhd1y
jQ3egJfhHVuElreFMSkdMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE
MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK
ajNuVnlUQTM2XzhybFd6OWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChBcogfN5jgrsgUhC8oX0uNs+svseSW0n18gd/S3fjaWcMalxpfu7CQF7SR1
c/Y2Re4jtvNuxIM409/t5m78lfKwwMrFUukRGDzTnlx0JTy+6HbJobV0bRMNVHsl
V8To5ClDyrAjx3lOo4fBKotSJahdbqDXlt+wCvbzIuNrgJvX9kPCsC8xDdLweNrG
hkOBbu/ClTLu1CyeN5DCXbEPv1syy9tSEARK4cKVa6WbmSs3FBCoomuH1HCNk3Mr
e5vReomN82JxhjXNiAqB8S3szJXHDOnlIYmp+5I31055gWALvOMuGnhysjVswdZP
0oecOiFULCe4eJtXkfFwC+A4yQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:24 2026 by rpki-client