
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: 3Ie6NoXvmjsEyGWcmrHcLRt+B8ixOrK2y7dycIxVyBc=
Subject key identifier: 9E:04:65:E2:1D:70:C3:85:45:11:B3:99:A3:99:9D:5F:7A:9D:5F:AB
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 0A47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 0A34
Signing time: Wed 12 Aug 2026 19:30:08 +0000
Manifest this update: Wed 12 Aug 2026 19:30:07 +0000
Manifest next update: Wed 19 Aug 2026 19:30:07 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: fcOOkCQwuNP7osmM1OVevkjOCbziRwBoiMO25ULbUF8=)
2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=)
3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 19:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: Aug 12 19:30:07 2026 GMT
Not After : Aug 19 19:30:07 2026 GMT
Subject: CN=6a7cc9bf-be21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:1a:dc:3b:ee:cc:ef:bc:13:97:a7:7e:95:
eb:74:94:3c:fb:41:55:ae:a6:56:dc:11:0d:27:b1:
21:16:64:19:35:44:55:c1:6d:6c:6a:1c:e7:d3:09:
09:bf:98:45:d5:52:98:79:aa:d3:78:e9:56:ea:7d:
c7:1c:48:09:b5:69:5b:c5:22:58:e2:c2:af:34:a7:
81:69:1b:7d:36:ad:0e:c4:95:ab:8f:ef:ff:e7:3b:
ef:8c:97:cb:30:69:d2:5b:4c:1b:88:f2:7d:21:67:
d0:15:59:6a:b2:ea:51:9b:d5:60:f4:bc:77:30:69:
53:dc:45:7e:7e:d7:74:ef:de:1e:72:a9:b4:8a:68:
5e:59:3e:e1:74:f5:ff:73:9b:cf:4b:e3:e7:f3:9c:
17:a7:09:98:67:30:1b:54:41:85:ac:3a:ff:1b:e9:
1a:a5:b8:1a:2d:45:64:bb:40:0d:fe:17:46:70:af:
7a:a4:40:67:c3:ab:20:20:d8:c1:8b:21:0b:5e:5c:
40:be:bb:fe:dc:13:20:ec:69:57:f3:c6:6e:cb:41:
f0:b8:fe:b5:6f:71:ab:32:c1:8a:47:67:37:f1:ee:
d3:1c:28:bc:3f:a8:b6:f9:91:3e:db:7d:44:ca:4b:
78:b1:bf:52:5e:c8:5b:7e:1a:7a:e1:ac:4f:f4:89:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:65:E2:1D:70:C3:85:45:11:B3:99:A3:99:9D:5F:7A:9D:5F:AB
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:5c:7c:50:b5:9e:67:11:8c:da:61:74:43:97:ab:1e:75:
a7:8d:73:32:71:55:1b:d5:12:b4:42:c7:e9:5d:90:63:f2:26:
31:6e:96:c9:5d:6f:a4:48:65:d7:52:c9:ac:a9:e6:0c:c5:ce:
4a:b6:81:dd:a5:b5:e5:5c:23:1b:89:0d:71:c9:ef:c0:56:9a:
e7:21:56:5b:da:f8:3f:04:2d:8c:73:3e:4a:4e:3c:f4:5b:d9:
50:0a:f2:21:72:b1:f7:5f:b3:ed:15:89:34:f4:91:e5:c9:2c:
9c:ea:da:e3:9d:2c:40:01:51:87:f9:19:95:3b:27:47:5a:ef:
10:aa:c6:37:27:a5:db:0f:ac:8f:c4:97:30:32:14:3a:dc:52:
fa:56:03:0e:2c:27:bf:31:4f:04:95:42:87:5c:4a:33:cd:24:
b8:2c:af:4f:77:a3:be:06:df:2a:a2:15:9e:3c:00:9b:e1:96:
d0:c4:91:9b:12:6c:26:b5:c6:dc:f1:a6:fc:26:99:5a:3e:54:
ee:94:cc:f3:ba:46:23:d9:74:6c:5c:ef:e4:84:92:a4:3b:90:
be:db:c0:24:55:d6:98:fe:f8:b1:1f:ed:fa:b6:3e:22:b0:40:
e0:97:e3:b5:b6:f7:35:22:92:98:56:0e:3c:74:17:df:f6:b6:
7e:6b:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:55:53 2026 by rpki-client