
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: Ltd4HOngTpZ2WabmjlF4Xma5lkk+xIRfum4Uoy0gqcY=
Subject key identifier: 29:01:C0:C5:23:B9:8D:ED:F0:9B:10:BB:92:80:02:99:02:FC:30:3B
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 0750
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 073E
Signing time: Tue 18 Aug 2026 22:14:03 +0000
Manifest this update: Tue 18 Aug 2026 22:14:03 +0000
Manifest next update: Tue 25 Aug 2026 22:14:03 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: O/+BqYzfXUl7DD2zNLhK4sYtMw/3aIFv6EqfYsU7fTU=)
2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: lTuyJowUFMLOryc9O4taTNUF2BOa8A0yjVaiNstsNbo=)
3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: SmluGT3rSA2/F6vzSy9ujUd/VTUfXc20Bw3w5gO2FCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Validity
Not Before: Aug 18 22:14:03 2026 GMT
Not After : Aug 25 22:14:03 2026 GMT
Subject: CN=6a84d92b-4817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:fb:a5:a8:a8:e2:24:cf:f2:d9:c5:23:9e:
4c:5d:f0:af:fd:46:09:ea:fc:9c:2a:24:d2:3b:ee:
b9:3d:ff:c1:2f:a8:52:08:5d:2b:c3:64:d7:57:c3:
d1:f5:91:d2:f9:60:9d:b1:c1:bf:51:a9:3c:9b:cd:
46:41:f4:05:d9:0f:00:77:71:d1:0b:1b:b2:09:60:
a9:14:ca:6e:b8:67:0a:89:be:21:7d:34:5d:4f:06:
76:85:05:63:c0:4d:fb:63:1c:d1:a1:6e:c8:3a:3b:
29:be:1f:44:6d:6b:a0:00:0b:7c:3a:0b:82:7b:24:
34:5d:a8:40:7c:89:2f:9e:97:ab:f4:0f:03:ac:7e:
c2:7a:e8:2a:07:c8:5e:4a:5a:03:3a:0b:90:96:40:
6b:e2:66:b1:99:16:e3:36:6e:c7:4d:a1:47:7e:c3:
4b:3e:29:bd:18:31:4a:4d:90:b0:ca:66:ad:2d:8f:
f8:15:95:08:f3:97:ff:fc:be:22:80:ea:79:e3:8f:
13:df:49:6c:50:61:0e:b4:77:cb:45:46:97:08:a9:
b1:47:31:6e:a1:75:6c:fe:38:c8:19:ef:33:bc:da:
ab:77:3e:85:f1:6f:9a:31:d4:0a:54:1e:c3:07:67:
61:a9:82:97:9a:3d:9a:d3:9e:d3:2d:b7:49:92:20:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:C0:C5:23:B9:8D:ED:F0:9B:10:BB:92:80:02:99:02:FC:30:3B
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:34:ff:64:17:49:01:34:93:f4:47:df:36:43:d7:85:03:
84:51:8e:42:79:6e:61:25:45:46:bf:f1:16:a6:d7:df:d2:19:
88:25:f7:e3:fe:da:a1:8e:86:4b:7c:75:9b:c4:0a:81:a5:c2:
67:19:76:75:b5:2b:a2:40:88:cc:f6:14:45:a3:fc:22:7e:97:
a7:3a:09:0f:de:5a:65:08:21:28:ac:5a:d2:fb:96:2f:ec:ff:
ee:33:0d:ce:ca:41:65:a1:fe:bb:06:eb:1c:5a:ae:ff:38:a0:
45:4f:22:11:55:cd:69:6e:de:2c:0d:8b:4a:81:3f:a8:0d:6d:
95:74:f8:7b:8f:ab:09:c4:f0:b2:15:28:07:10:3f:fa:8e:75:
53:33:4c:60:ea:fd:60:c9:d7:d9:85:89:67:97:0d:c0:56:fe:
f8:59:9b:07:ac:a4:07:73:db:37:31:a8:a8:5d:25:b2:e7:e5:
2f:69:c4:08:71:f0:7b:c3:a5:40:2d:81:bb:fc:9a:ac:ff:ab:
9c:58:f0:64:bb:51:6c:34:cb:d5:8d:50:89:cc:31:75:f7:f6:
d5:05:26:ec:14:4b:72:14:39:29:81:ef:b7:87:15:53:ad:df:
d4:41:ce:61:b1:ae:0b:37:2f:f9:e3:3a:2a:3f:ff:97:f7:12:
db:e3:f1:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3
NjdDQjkyRUIwHhcNMjYwODE4MjIxNDAzWhcNMjYwODI1MjIxNDAzWjAYMRYwFAYD
VQQDEw02YTg0ZDkyYi00ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcP7paio4iTP8tnFI55MXfCv/UYJ6vycKiTSO+65Pf/BL6hSCF0rw2TXV8PR
9ZHS+WCdscG/Uak8m81GQfQF2Q8Ad3HRCxuyCWCpFMpuuGcKib4hfTRdTwZ2hQVj
wE37YxzRoW7IOjspvh9EbWugAAt8OguCeyQ0XahAfIkvnper9A8DrH7CeugqB8he
SloDOguQlkBr4maxmRbjNm7HTaFHfsNLPim9GDFKTZCwymatLY/4FZUI85f//L4i
gOp5448T30lsUGEOtHfLRUaXCKmxRzFuoXVs/jjIGe8zvNqrdz6F8W+aMdQKVB7D
B2dhqYKXmj2a057TLbdJkiCF5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkBwMUj
uY3t8JsQu5KAApkC/DA7MB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3
QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUFFMi84QUI4QzE4QTg3QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6
QzZvekhPcXNjbUYyZkxrdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvY0/2QXSQE0k/RH3zZD14UDhFGOQnluYSVFRr/xFqbX39IZiCX34/7aoY6G
S3x1m8QKgaXCZxl2dbUrokCIzPYURaP8In6XpzoJD95aZQghKKxa0vuWL+z/7jMN
zspBZaH+uwbrHFqu/zigRU8iEVXNaW7eLA2LSoE/qA1tlXT4e4+rCcTwshUoBxA/
+o51UzNMYOr9YMnX2YWJZ5cNwFb++FmbB6ykB3PbNzGoqF0lsuflL2nECHHwe8Ol
QC2Bu/yarP+rnFjwZLtRbDTL1Y1Qicwxdff21QUm7BRLchQ5KYHvt4cVU63f1EHO
YbGuCzcv+eM6Kj//l/cS2+PxMQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:47 2026 by rpki-client