
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: P9eTjVf0su4QJgLJ2SzKZVvggJZnUXO5Py+9aoivRFk=
Subject key identifier: D8:7B:8E:FF:83:9C:C7:2E:36:92:82:46:11:CE:32:AC:1D:5A:B6:83
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 0755
Signing time: Fri 02 Oct 2026 22:07:01 +0000
Manifest this update: Fri 02 Oct 2026 22:07:00 +0000
Manifest next update: Fri 09 Oct 2026 22:07:00 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: hP4r5iR0/qESUQySLJHeP3GNfZfj5hsopPvnyN6T3q8=)
2: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: SmluGT3rSA2/F6vzSy9ujUd/VTUfXc20Bw3w5gO2FCs=)
3: 8D20F290411811ECA0929516C4F9AE02.roa (hash: lTuyJowUFMLOryc9O4taTNUF2BOa8A0yjVaiNstsNbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Validity
Not Before: Oct 2 22:07:00 2026 GMT
Not After : Oct 9 22:07:00 2026 GMT
Subject: CN=6ac02b05-0b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:55:3e:ce:05:49:fa:eb:ed:8b:1e:d7:ae:
3f:91:7f:db:ca:8d:4d:66:84:85:5c:21:7d:0e:25:
76:bd:a8:ec:30:ee:9b:56:49:7f:77:f4:d4:c9:ca:
43:fa:a1:05:b2:38:4b:d6:c3:82:bd:fd:0d:0c:c3:
12:4a:1f:bb:c3:9d:ca:f4:e2:e3:e1:ae:cb:c1:67:
f5:3c:a8:7f:23:42:0c:10:3c:f6:eb:83:c1:8a:56:
db:fc:24:d5:45:86:13:a2:c0:82:52:bd:13:06:fe:
80:3e:11:14:77:3c:8f:03:79:88:99:f0:7e:cd:43:
20:47:25:9c:49:84:f2:db:5d:5e:ee:a6:b6:35:dd:
71:76:47:95:50:bb:d8:1c:fe:2e:c3:b9:4b:18:aa:
d2:fb:d3:6b:fa:cb:54:12:5e:cf:9a:2c:6c:5d:45:
c3:33:e4:e2:8b:dd:e2:22:86:e7:c8:41:7a:b5:de:
3b:ed:d1:da:60:2f:f6:4b:dc:dc:7e:08:ee:47:80:
df:ac:ac:31:19:38:1b:ad:62:59:d7:f1:9b:f3:00:
ff:b4:50:83:19:53:33:7a:15:b2:19:70:cc:fe:93:
61:db:37:ba:3e:ec:78:95:8d:08:0c:ce:8c:8d:6c:
27:5b:1f:ca:8a:91:b7:87:2e:2f:d7:aa:ac:f1:59:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:8E:FF:83:9C:C7:2E:36:92:82:46:11:CE:32:AC:1D:5A:B6:83
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:07:2b:be:63:f1:50:c9:b1:ec:d1:57:be:e3:f0:3a:af:55:
47:3e:71:a9:bc:62:13:c0:8e:a3:ed:70:ed:a6:5f:f2:8d:0d:
bb:59:68:35:f7:3e:c9:66:c7:4b:45:eb:20:59:1a:b3:ff:f7:
a1:1f:c9:28:d9:0f:65:48:bb:18:1d:58:a2:25:b1:10:7d:4d:
a8:fb:d4:44:6d:77:a0:88:e7:03:0d:c9:3d:e2:7a:a5:0e:11:
c9:aa:d2:fc:33:19:27:79:2f:a5:bd:c6:2b:05:da:12:a0:a4:
51:4d:22:e7:64:e2:9a:f7:89:59:eb:59:bd:06:f7:70:b8:a2:
a9:ba:06:30:43:2a:81:c1:89:de:d8:f2:de:4b:85:ca:a7:a4:
71:d1:d5:36:84:00:55:c5:ac:95:91:7a:c7:cc:69:dc:f4:a3:
91:9f:8d:f9:ca:d3:0c:87:98:41:c8:44:b8:67:d4:de:f4:ec:
b1:ca:2d:f8:9e:ac:63:fc:67:ac:01:c5:2b:e3:b1:d0:75:60:
27:9c:a6:44:3f:57:ee:e1:2e:01:08:5a:4c:7d:4b:e8:26:b3:
19:7c:c3:ed:14:15:d9:4e:d4:3f:1c:9c:60:6a:50:3f:e1:53:
c2:d3:23:d6:81:61:d6:98:e5:4d:ff:5c:a3:58:78:05:46:41:
db:b1:95:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3
NjdDQjkyRUIwHhcNMjYxMDAyMjIwNzAwWhcNMjYxMDA5MjIwNzAwWjAYMRYwFAYD
VQQDEw02YWMwMmIwNS0wYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog1VPs4FSfrr7Yse164/kX/byo1NZoSFXCF9DiV2vajsMO6bVkl/d/TUycpD
+qEFsjhL1sOCvf0NDMMSSh+7w53K9OLj4a7LwWf1PKh/I0IMEDz264PBilbb/CTV
RYYTosCCUr0TBv6APhEUdzyPA3mImfB+zUMgRyWcSYTy211e7qa2Nd1xdkeVULvY
HP4uw7lLGKrS+9Nr+stUEl7PmixsXUXDM+Tii93iIobnyEF6td477dHaYC/2S9zc
fgjuR4DfrKwxGTgbrWJZ1/Gb8wD/tFCDGVMzehWyGXDM/pNh2ze6Pux4lY0IDM6M
jWwnWx/KipG3hy4v16qs8VkbrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNh7jv+D
nMcuNpKCRhHOMqwdWraDMB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3
QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUFFMi84QUI4QzE4QTg3QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6
QzZvekhPcXNjbUYyZkxrdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABwcrvmPxUMmx7NFXvuPwOq9VRz5xqbxiE8COo+1w7aZf8o0Nu1loNfc+yWbH
S0XrIFkas//3oR/JKNkPZUi7GB1YoiWxEH1NqPvURG13oIjnAw3JPeJ6pQ4RyarS
/DMZJ3kvpb3GKwXaEqCkUU0i52TimveJWetZvQb3cLiiqboGMEMqgcGJ3tjy3kuF
yqekcdHVNoQAVcWslZF6x8xp3PSjkZ+N+crTDIeYQchEuGfU3vTsscot+J6sY/xn
rAHFK+Ox0HVgJ5ymRD9X7uEuAQhaTH1L6CazGXzD7RQV2U7UPxycYGpQP+FTwtMj
1oFh1pjlTf9co1h4BUZB27GVYw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:12:24 2026 by rpki-client