
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier: Slk/q5+3V9wZmyyPQZcdfWHm/Hp/v7g2mnNfvTVokLA=
Subject key identifier: F2:02:22:44:89:AB:F1:94:6F:8C:A8:6A:B2:0B:B4:74:55:83:06:41
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number: 07C5
Signing time: Sat 04 Apr 2026 21:14:12 +0000
Manifest this update: Sat 04 Apr 2026 21:14:11 +0000
Manifest next update: Sat 11 Apr 2026 21:14:11 +0000
Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: 1S3XK0n5XH5OcrECMYSDHwI3xUJl0EAQdPJjVN3wRFk=)
2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=)
3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Validity
Not Before: Apr 4 21:14:11 2026 GMT
Not After : Apr 11 21:14:11 2026 GMT
Subject: CN=69d17f24-8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:d4:24:20:01:27:f0:97:e8:5d:53:0a:29:
9d:56:d0:c3:44:c2:a9:cc:ec:5f:ee:92:e8:3c:5f:
73:74:fd:35:82:38:62:9f:38:9a:e0:c6:c6:35:9c:
77:20:9f:72:dc:3c:fc:d8:88:43:c1:0a:32:0a:6d:
7e:8e:a0:8a:79:dd:16:ee:9f:ef:bf:70:5d:3f:cc:
2a:d8:68:4a:91:04:4c:12:6c:7d:1e:c9:95:2b:9a:
06:d8:b6:7e:92:fc:de:f8:53:f5:85:e3:47:89:ec:
77:8d:4e:1e:31:9f:4c:a5:f6:88:4a:d8:58:c9:36:
5b:51:ec:88:1f:2b:7d:d6:14:39:34:e6:88:8f:40:
e2:14:e5:92:84:1b:4b:ae:b3:cc:9a:22:72:87:32:
49:f5:ac:49:d7:96:cc:c2:6f:e9:1b:63:92:5f:66:
11:c9:34:82:cc:4e:84:12:04:2c:c8:78:b6:d2:d2:
e4:68:bf:35:e6:03:04:5c:bf:9d:fa:dd:80:90:e5:
26:18:19:6c:32:30:85:62:62:57:25:68:37:a2:9a:
45:ae:02:39:00:37:2b:b5:8e:c2:45:d3:25:d8:84:
0f:72:cf:2b:57:49:7d:3f:3a:27:1c:ba:43:0e:00:
3f:43:ef:7c:8e:18:da:b0:aa:c3:ce:1c:6e:20:d8:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:22:44:89:AB:F1:94:6F:8C:A8:6A:B2:0B:B4:74:55:83:06:41
X509v3 Authority Key Identifier:
keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:23:ce:62:e9:86:1c:8a:ee:31:69:cf:24:21:ec:f0:db:
51:d8:01:e4:4e:95:0e:a9:d2:5b:aa:4c:c0:c5:00:c2:40:cb:
a6:eb:e9:39:3b:f7:9f:86:e9:54:b2:fa:59:df:3a:5c:1c:0f:
7c:51:0d:64:6a:f3:47:22:86:1d:e5:64:6d:a1:e9:37:b3:de:
6c:08:8f:6c:56:18:39:e2:2e:4c:12:16:2e:d1:dc:de:0a:93:
cb:52:c7:37:29:6b:9d:fa:a9:8e:32:b1:2e:26:50:21:13:8f:
a6:49:28:07:1c:da:e7:58:b7:1b:ef:f6:0d:33:59:8a:29:06:
b4:3d:0f:36:8c:21:41:03:e7:c7:7a:b4:7f:df:08:18:78:f6:
e9:75:a8:c4:3b:ff:dc:fe:2f:3b:81:39:28:72:2c:14:fe:38:
ce:6f:af:8e:c8:41:36:a3:3c:2c:3e:29:f9:51:27:6b:4c:cf:
34:d9:08:48:c0:8b:d4:34:2e:c0:eb:1a:fd:2e:e0:4d:79:97:
bf:40:5d:ec:8b:e2:b1:9c:73:51:4a:36:3f:4a:75:72:0a:2c:
00:28:02:9a:05:3a:61:b1:3c:a4:2b:b9:6e:53:9e:76:3a:68:
b8:2f:e5:91:2d:9f:16:b4:35:0e:4a:ab:f1:10:90:78:3b:ed:
f6:41:74:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy
Qjk1NkNGRDcwHhcNMjYwNDA0MjExNDExWhcNMjYwNDExMjExNDExWjAYMRYwFAYD
VQQDEw02OWQxN2YyNC04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwU7UJCABJ/CX6F1TCimdVtDDRMKpzOxf7pLoPF9zdP01gjhinzia4MbGNZx3
IJ9y3Dz82IhDwQoyCm1+jqCKed0W7p/vv3BdP8wq2GhKkQRMEmx9HsmVK5oG2LZ+
kvze+FP1heNHiex3jU4eMZ9MpfaISthYyTZbUeyIHyt91hQ5NOaIj0DiFOWShBtL
rrPMmiJyhzJJ9axJ15bMwm/pG2OSX2YRyTSCzE6EEgQsyHi20tLkaL815gMEXL+d
+t2AkOUmGBlsMjCFYmJXJWg3oppFrgI5ADcrtY7CRdMl2IQPcs8rV0l9PzonHLpD
DgA/Q+98jhjasKrDzhxuINjpOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPICIkSJ
q/GUb4yoarILtHRVgwZBMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE
MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK
ajNuVnlUQTM2XzhybFd6OWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELsjzmLphhyK7jFpzyQh7PDbUdgB5E6VDqnSW6pMwMUAwkDLpuvpOTv3n4bp
VLL6Wd86XBwPfFENZGrzRyKGHeVkbaHpN7PebAiPbFYYOeIuTBIWLtHc3gqTy1LH
NylrnfqpjjKxLiZQIROPpkkoBxza51i3G+/2DTNZiikGtD0PNowhQQPnx3q0f98I
GHj26XWoxDv/3P4vO4E5KHIsFP44zm+vjshBNqM8LD4p+VEna0zPNNkISMCL1DQu
wOsa/S7gTXmXv0Bd7IvisZxzUUo2P0p1cgosACgCmgU6YbE8pCu5blOedjpouC/l
kS2fFrQ1Dkqr8RCQeDvt9kF0hQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:09 2026 by rpki-client