
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: sNez9CzTkyc9CNfFUvKJQxkQgNk/3vz/TdEHfHzhjtc=
Subject key identifier: A1:F2:2D:E7:DD:B8:AA:B6:D6:D4:5D:F7:DA:42:81:EA:25:47:3F:CF
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 0326
Signing time: Tue 01 Sep 2026 01:00:20 +0000
Manifest this update: Tue 01 Sep 2026 01:00:20 +0000
Manifest next update: Tue 08 Sep 2026 01:00:20 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: 9mroHJOfpDFqBRtxlCyY8fl7hrW7N7iBqqASpqqXN/U=)
2: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
3: CEDCF6A872C711F1A643620871A30FBC.roa (hash: RzjOQsdFk62g1nKTgDK6+2ZzFlaZnldB5AfyGuAfjNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Sep 1 01:00:20 2026 GMT
Not After : Sep 8 01:00:20 2026 GMT
Subject: CN=6a9623a4-0873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:31:12:42:57:a2:c2:3b:ad:a0:3d:7e:f2:41:
2e:78:45:5c:b7:e5:9e:10:6d:e4:2a:79:76:f9:c0:
dc:e2:e5:4f:5f:16:5c:04:2a:6d:bb:3c:c0:05:79:
89:ca:73:18:ce:38:15:86:e2:83:d3:21:72:f7:61:
6c:07:ad:2a:ec:9b:d7:e4:a3:2f:24:7f:49:17:51:
02:48:b0:9c:6a:ed:f2:d6:f6:58:b8:ef:32:96:ad:
19:76:6e:e2:d2:75:84:d4:c3:19:ff:cd:db:e3:fe:
44:62:33:b6:6e:86:30:b6:d4:c7:4f:a5:2e:cf:1a:
38:17:f3:93:1f:33:10:28:43:0e:61:a1:c4:99:67:
7a:c6:54:b3:f8:61:75:2b:d2:0a:ef:48:78:64:17:
99:45:e1:85:eb:27:72:39:f3:fe:02:3f:68:9f:d3:
eb:27:8c:56:83:20:73:16:95:4d:af:09:a3:78:5c:
98:bd:76:d2:93:47:e0:cf:cf:a7:f0:40:ae:13:75:
60:57:5a:f0:f4:eb:19:3a:e5:66:11:c3:30:29:d9:
09:28:22:d0:ea:4f:93:ba:b0:c3:7f:df:88:95:84:
01:c5:68:a0:67:e6:a4:28:3f:8d:02:64:7c:6e:6b:
38:5b:74:43:99:dd:e1:02:ca:66:df:7b:48:b3:17:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:2D:E7:DD:B8:AA:B6:D6:D4:5D:F7:DA:42:81:EA:25:47:3F:CF
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a8:2b:78:28:c8:97:02:1a:28:d8:39:6c:6f:ab:1a:2c:7b:
bd:49:c1:5e:1f:75:9c:9b:6d:fe:6c:b7:fb:15:8e:bb:81:e6:
71:25:f6:d9:ab:c6:89:98:0e:97:68:40:fe:2e:15:f1:c9:31:
68:eb:43:34:c3:9a:f6:c2:0b:55:e8:5f:a1:a3:bd:f7:42:8a:
4a:84:75:fc:86:68:0f:19:c0:32:fc:ed:06:35:1f:a0:31:16:
fb:7f:bf:9a:c5:03:60:e5:37:ab:e3:a0:e2:3d:8f:b7:ef:7e:
f2:fc:6b:29:3f:20:f7:f2:b6:57:d5:5d:2a:1c:1b:4e:0f:8a:
fd:18:ab:f6:44:30:aa:b0:67:9d:f0:25:93:9b:59:7d:9e:19:
83:15:ea:06:eb:8f:6c:59:75:84:4b:d1:65:4d:cc:a5:12:a6:
3c:8e:5a:4c:4b:58:f3:c9:58:75:0d:87:8e:3e:56:06:16:01:
60:92:41:ce:cf:7c:34:ec:a6:63:eb:02:53:26:41:9a:84:9b:
4f:8d:42:42:ff:83:3f:b5:5a:93:a5:f7:96:7c:08:ff:46:ff:
da:d4:5a:62:a0:2c:19:43:6b:31:9e:d5:79:7a:af:96:15:02:
74:5a:17:99:a5:0e:30:0b:45:77:a1:78:71:b6:84:e5:e6:75:
41:24:6a:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB
M0MwREU0N0QwHhcNMjYwOTAxMDEwMDIwWhcNMjYwOTA4MDEwMDIwWjAYMRYwFAYD
VQQDEw02YTk2MjNhNC0wODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+TESQleiwjutoD1+8kEueEVct+WeEG3kKnl2+cDc4uVPXxZcBCptuzzABXmJ
ynMYzjgVhuKD0yFy92FsB60q7JvX5KMvJH9JF1ECSLCcau3y1vZYuO8ylq0Zdm7i
0nWE1MMZ/83b4/5EYjO2boYwttTHT6Uuzxo4F/OTHzMQKEMOYaHEmWd6xlSz+GF1
K9IK70h4ZBeZReGF6ydyOfP+Aj9on9PrJ4xWgyBzFpVNrwmjeFyYvXbSk0fgz8+n
8ECuE3VgV1rw9OsZOuVmEcMwKdkJKCLQ6k+TurDDf9+IlYQBxWigZ+akKD+NAmR8
bms4W3RDmd3hAspm33tIsxfGRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHyLefd
uKq21tRd99pCgeolRz/PMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5
MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy
MHV5d1JYZ1gzR3Vqd041SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc6greCjIlwIaKNg5bG+rGix7vUnBXh91nJtt/my3+xWOu4HmcSX22avGiZgO
l2hA/i4V8ckxaOtDNMOa9sILVehfoaO990KKSoR1/IZoDxnAMvztBjUfoDEW+3+/
msUDYOU3q+Og4j2Pt+9+8vxrKT8g9/K2V9VdKhwbTg+K/Rir9kQwqrBnnfAlk5tZ
fZ4ZgxXqBuuPbFl1hEvRZU3MpRKmPI5aTEtY88lYdQ2Hjj5WBhYBYJJBzs98NOym
Y+sCUyZBmoSbT41CQv+DP7Vak6X3lnwI/0b/2tRaYqAsGUNrMZ7VeXqvlhUCdFoX
maUOMAtFd6F4cbaE5eZ1QSRqcQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:33 2026 by rpki-client