
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier: /ebhFTtDznT/4I7zvUzrMJYfeT/9aSMYwswod/iOe2c=
Subject key identifier: 9E:34:5A:9D:BE:91:FE:3D:F9:3E:A1:2A:B9:19:43:1D:D1:C0:69:25
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial: 0B41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number: 0B26
Signing time: Sat 12 Sep 2026 19:14:02 +0000
Manifest this update: Sat 12 Sep 2026 19:14:01 +0000
Manifest next update: Sat 19 Sep 2026 19:14:01 +0000
Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: gK1mLuSWdE0zDWIE6O8gw2wVP4FsXF9x16LT7UgL13o=)
2: 2BDF72FA8C1211F184A8D0114511F970.roa (hash: tTwJEbv0EWMSnW/LNwHMoGpK+yZ0oG8h7PMKW387DV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 19:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Validity
Not Before: Sep 12 19:14:01 2026 GMT
Not After : Sep 19 19:14:01 2026 GMT
Subject: CN=6aa5a47a-1dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:c0:43:4a:92:7f:55:7a:da:6b:32:d1:c5:
45:51:f2:b9:4c:fd:0d:cf:99:32:7e:55:c1:b0:d6:
bc:22:21:23:c6:1d:a6:f0:6a:4a:6e:2a:c6:f1:ca:
c9:b8:fd:cf:1d:a6:ba:d9:e1:89:90:98:fd:b7:ba:
67:90:bb:8e:06:88:f5:5f:ef:86:26:11:9d:d6:49:
9f:5f:09:87:42:09:1b:9d:e0:2d:0e:20:81:14:b8:
08:99:1f:5c:62:eb:0b:a1:29:10:fc:c2:cd:63:37:
61:9f:82:0d:a2:5c:d8:64:c0:02:13:eb:d4:55:76:
05:a4:57:82:bd:73:eb:17:38:78:94:1c:3e:c1:0e:
13:88:b1:db:b8:12:e8:f7:68:d9:1b:4a:46:d1:b6:
12:af:5a:d5:28:0e:f2:7c:30:8b:78:46:5f:b4:63:
11:b6:e1:fc:26:78:da:11:5c:1d:64:d7:a9:38:30:
41:53:c9:b8:4a:2a:ce:f8:2b:bf:56:93:cb:ce:3f:
63:06:cc:a8:3b:58:75:9e:03:4a:f7:76:64:fc:dd:
3e:8e:e1:d6:16:c6:02:41:c6:7d:00:b2:f1:a4:1a:
7b:fb:6e:2b:48:7a:02:11:0e:ff:bf:4a:ae:89:78:
61:eb:4a:d8:16:4d:82:f3:6f:2c:73:62:4b:0d:51:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:5A:9D:BE:91:FE:3D:F9:3E:A1:2A:B9:19:43:1D:D1:C0:69:25
X509v3 Authority Key Identifier:
keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:07:a9:4f:68:a3:61:cf:6b:a4:6d:3f:76:11:ca:fb:66:
f4:07:71:99:b5:58:04:7d:14:f7:7d:f6:35:b3:4a:4c:2e:63:
fe:3e:46:82:30:ba:31:eb:53:a6:97:63:40:05:1a:d8:ff:e1:
18:b6:f4:09:b2:9c:b4:e4:eb:16:dc:27:0d:b3:5b:9c:1e:bb:
e8:5a:d6:7d:8e:72:bf:8e:77:be:ab:e1:fb:41:8c:1e:18:4b:
b7:d9:45:51:6b:15:76:7b:4b:b9:97:8d:4c:3d:d2:f2:f9:bd:
04:66:83:09:89:fc:16:46:58:72:bc:07:11:8e:b4:01:a2:0f:
a1:16:67:88:48:03:ac:40:e0:70:93:5f:6e:c0:8b:25:ec:ad:
8d:1a:5b:fc:e8:e3:0a:0b:25:22:9d:71:d1:cd:18:48:4e:9b:
87:d1:a6:c5:98:5f:ab:fa:3c:c2:a4:50:ea:14:4c:dc:ee:af:
e3:ae:a1:3c:95:f3:48:75:4b:8f:60:cf:af:d1:39:74:9c:20:
d8:7e:a6:64:e8:d8:0c:e3:6f:fa:8d:08:a0:d3:c1:a6:4f:ba:
35:98:77:66:72:4f:17:df:86:69:55:fa:30:2a:38:38:72:47:
7d:e7:25:07:16:6e:6e:d4:02:36:80:ad:4b:63:2a:2d:1f:03:
06:99:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:36:09 2026 by rpki-client