
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json)
Hash identifier: 5b3ARU50hpdeCHFq0o5aYBFBS7s9TAYhQy73UeLa5VU=
Subject key identifier: F2:86:1C:F7:F8:F6:E3:08:F6:A6:C8:09:50:50:C0:72:DD:85:0B:1B
Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
Manifest number: 01EE
Signing time: Sun 11 Oct 2026 04:01:58 +0000
Manifest this update: Sun 11 Oct 2026 04:01:58 +0000
Manifest next update: Sun 18 Oct 2026 04:01:58 +0000
Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: 2OudxLXUiMT8pxrdY/jjSEFyoAKXhZMRZ990L7KeUOk=)
2: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: KAsjZTGjxlT8d6AMDd8zXBUGI6TylpSkB+FkLto9kGs=)
3: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Validity
Not Before: Oct 11 04:01:58 2026 GMT
Not After : Oct 18 04:01:58 2026 GMT
Subject: CN=6acb0a36-ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:1a:f9:a9:4e:d7:52:5b:2a:56:98:79:a8:
8d:50:db:e6:72:33:c5:6c:24:bd:a6:9d:25:ad:4d:
1b:65:fe:2c:b3:ad:99:a7:11:26:16:45:17:06:e4:
c2:a0:dc:56:0d:2a:30:47:08:b5:24:48:69:f9:1a:
b7:66:24:e8:09:ea:06:c6:a3:56:70:df:ef:83:bd:
9a:62:2f:f8:12:15:e7:71:99:cb:f8:4c:e7:1e:bd:
38:73:ef:24:39:ff:16:59:87:34:07:00:87:94:f8:
e5:08:0f:d2:f8:4b:e2:0d:4a:56:7c:cb:d9:9a:d2:
1b:4e:81:69:1a:d6:78:19:cf:e2:36:aa:cf:37:9a:
7f:c5:fc:74:c9:d0:3d:cc:6c:6c:d1:a5:eb:6c:40:
e7:cb:c1:eb:8d:35:4e:b5:fe:97:8f:b8:7f:2e:28:
6e:fc:cb:3d:3c:b7:c8:92:80:fb:bf:75:c7:39:ec:
ca:70:4e:bc:4f:ce:6b:8e:35:dc:35:b6:56:af:15:
c8:1b:01:db:75:86:25:22:c3:40:89:d1:f2:2b:61:
ec:d5:1a:51:dd:b3:a8:2b:c9:ee:84:a3:92:2f:d8:
42:61:9c:e7:de:ff:4f:51:8a:86:b6:77:2c:a4:80:
5f:1b:56:8c:60:86:7c:68:48:5d:b1:15:db:cb:98:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:1C:F7:F8:F6:E3:08:F6:A6:C8:09:50:50:C0:72:DD:85:0B:1B
X509v3 Authority Key Identifier:
keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:95:cb:16:3a:23:b7:ac:14:67:d0:55:83:04:30:d5:a6:
47:28:2e:5b:81:26:a9:84:d5:02:48:69:9c:44:38:ac:29:14:
e9:cc:1c:49:07:55:a5:dc:59:57:9c:e7:44:ec:9e:aa:27:19:
ef:91:67:4a:75:99:ec:53:45:86:df:6c:f3:84:64:18:13:b9:
6d:1e:92:03:a3:f5:29:41:96:4d:8a:96:b1:c3:37:e8:71:15:
06:ca:a6:53:6d:4c:c6:bf:f1:41:be:a4:e1:2c:f2:36:13:4a:
84:4a:17:5b:97:f4:1a:40:65:59:9f:7e:19:8d:dc:8d:da:af:
bf:d5:c5:09:31:5c:8c:44:03:eb:0c:76:1e:f4:51:20:29:33:
c9:b5:23:b5:6c:d9:09:74:d1:4d:2f:d4:f2:13:61:67:f9:b3:
69:05:a7:27:51:30:99:99:d9:38:61:21:c6:63:cc:85:22:96:
86:19:f8:11:19:af:49:bc:e4:32:1d:3d:bb:f5:73:ad:f2:bf:
0b:2e:68:95:74:44:8b:14:65:c6:70:2a:0e:ab:5c:f4:f9:f9:
60:f7:a4:2a:90:20:d8:17:7e:6e:ba:50:45:2d:d1:2f:d0:8f:
3e:83:58:1e:c8:f2:43:42:4a:34:cf:ed:36:37:db:f8:cb:fe:
30:97:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:20:55 2026 by rpki-client