
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: R9/10TYCkH0DPEXhmT8qJ2a8XJyPx0f20Yzm03lyxXo=
Subject key identifier: DE:A1:B9:ED:9A:30:91:B4:4C:AE:81:62:02:31:41:B2:D1:28:35:18
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 02F0
Signing time: Thu 21 May 2026 01:23:55 +0000
Manifest this update: Thu 21 May 2026 01:23:54 +0000
Manifest next update: Thu 28 May 2026 01:23:54 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: PUKOdNNEHiRUW9QU1d8Q7RgHpqrYVIomlZC00DCZjFw=)
2: BA6A2DFC4C6C11F1AD8500D5C2833773.roa (hash: PbS8zTGQiyKi6Ge1rRmLcuGxZz/osOYaiSuloagJRFA=)
3: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: May 21 01:23:54 2026 GMT
Not After : May 28 01:23:54 2026 GMT
Subject: CN=6a0e5eab-5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:9c:23:98:81:0b:23:69:90:65:48:8e:bf:
9c:95:a1:b1:8c:b3:68:c0:7e:f8:86:2d:72:c9:2a:
f3:95:0d:89:d8:df:d9:4e:09:d8:7c:4c:99:f6:f3:
90:db:38:bf:5d:0a:3a:c4:b9:68:d2:2c:aa:d8:76:
e8:0b:d6:36:08:69:ef:31:a6:db:72:3a:2e:76:c6:
61:de:e5:22:af:be:63:5d:12:da:9f:c6:be:5f:0f:
e4:0b:6d:74:47:9b:f3:ec:b4:d5:d0:e9:30:3d:9b:
02:20:3a:73:d3:de:8d:e7:d9:23:2d:b4:86:22:67:
f8:cf:78:69:05:0d:af:47:05:b8:14:60:eb:89:e8:
10:b7:69:51:91:8f:d2:88:46:9c:d5:68:ab:53:72:
7c:b5:e4:86:99:60:39:46:30:5c:f4:7a:0e:44:20:
74:ce:05:46:3d:8c:dd:b9:d7:3a:e9:cf:3f:f6:90:
1d:71:e3:45:cf:a9:a3:f4:28:92:df:1a:b3:4f:5d:
a8:cc:e9:c9:d1:26:c0:6e:b5:bf:80:29:6a:30:08:
2f:95:fb:0c:57:15:7d:b2:03:dc:7e:ad:b9:a4:28:
56:4c:5b:d0:15:88:5c:ea:aa:59:9a:ed:aa:07:9d:
64:cf:f8:e9:64:91:9d:3b:0d:e5:c0:ae:69:60:89:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:B9:ED:9A:30:91:B4:4C:AE:81:62:02:31:41:B2:D1:28:35:18
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:df:fb:f9:ca:ac:3f:29:eb:dc:af:9f:c2:82:d1:1b:d5:
9a:55:c4:d2:1e:b0:92:cd:8b:54:df:8b:ef:dd:b5:8b:84:00:
13:67:1c:2f:d3:39:f4:32:99:8c:09:4c:22:f0:b2:16:d3:7e:
cc:2a:c2:9c:2b:99:7e:a0:1b:ca:5d:ee:1f:67:37:29:a5:57:
7d:77:81:7b:1b:98:43:84:61:c0:1a:58:13:12:95:de:44:ab:
b7:f9:89:05:e1:9f:56:25:bf:1f:07:98:28:88:6d:94:b8:7c:
c4:8e:90:57:c0:6a:d9:fd:20:d0:89:e9:d6:50:41:57:22:31:
2f:ac:82:2b:16:d4:e3:9f:66:6f:54:1b:0b:b2:1a:1c:e3:50:
c2:2d:c5:fb:19:18:40:03:7e:81:f5:0c:74:09:9c:d4:67:27:
eb:3f:c8:de:5f:c1:95:61:49:fc:d4:44:7b:4e:28:3f:e8:28:
a9:32:93:3c:b5:0b:7b:82:8c:5c:93:0e:1b:fd:e5:45:b3:e3:
e1:a9:d8:cf:87:ee:8d:19:96:1d:85:c5:1d:de:68:7d:4d:ef:
65:d3:34:37:81:8a:90:25:56:27:e5:5f:7a:d9:81:bf:70:43:
39:06:e0:c1:ee:ca:20:e1:8b:14:ee:59:f6:9c:8a:7f:c6:3d:
82:31:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:15:06 2026 by rpki-client