
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier: +dgxtGK8NVxNuEnCl5dHAHc+rew4SMrotRuNJtlyypI=
Subject key identifier: 3A:75:67:95:26:C6:B0:A3:4A:85:23:22:F0:DD:C9:99:07:9B:C0:0C
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number: 94
Signing time: Sat 03 Oct 2026 08:10:16 +0000
Manifest this update: Sat 03 Oct 2026 08:10:15 +0000
Manifest next update: Sat 10 Oct 2026 08:10:15 +0000
Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: he9y0gzblbjnc6zPrgbiwe6K1++dD2W+CWro++Kwl8s=)
2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Validity
Not Before: Oct 3 08:10:15 2026 GMT
Not After : Oct 10 08:10:15 2026 GMT
Subject: CN=6ac0b868-1092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:04:58:87:57:7b:44:c8:fd:a6:2e:20:54:
6e:a2:38:09:be:39:f6:52:4c:6c:d1:00:7b:e5:25:
00:1d:08:f2:56:18:b2:86:40:99:58:88:16:72:64:
8b:c0:bf:4f:ce:60:c5:25:6e:c3:5b:52:c5:09:b0:
a4:57:87:7b:a9:17:3b:8f:eb:a6:b7:8b:ab:c6:5d:
2e:bd:e4:af:ed:f9:1a:f0:71:d7:86:ac:6d:a1:6f:
71:63:7a:8d:00:8c:a8:77:23:7c:9c:11:9f:7f:02:
82:f9:e4:cb:f6:b7:2b:41:e0:f7:c3:b3:2e:04:71:
4c:30:a3:34:4e:88:62:25:1a:a6:e3:45:ee:cc:a7:
d9:77:fb:f1:5f:72:56:e1:49:ef:cb:ee:15:ea:1d:
71:93:ae:43:00:15:63:7a:81:4a:53:ba:98:f2:d2:
72:27:40:3e:a0:1b:6c:b9:4c:9e:9a:50:76:8a:54:
a5:d9:c6:99:ba:05:8c:db:70:c7:7b:4c:9c:97:d7:
e3:10:1b:1c:4b:fb:13:98:e0:87:1a:b1:a1:f3:ee:
10:0a:0e:07:a6:cf:f4:ce:64:36:95:06:4d:cf:3d:
77:cb:f3:6e:74:13:b1:80:e8:10:47:87:90:e2:df:
ea:d5:80:e4:b3:06:fc:0e:71:9c:46:f8:68:68:84:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:67:95:26:C6:B0:A3:4A:85:23:22:F0:DD:C9:99:07:9B:C0:0C
X509v3 Authority Key Identifier:
keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:f8:8f:ac:37:10:20:b5:c9:23:1d:25:1e:31:72:fc:be:
8b:fc:88:18:45:6c:25:32:e7:c3:bc:20:33:6f:95:45:f4:21:
86:fa:1a:16:fd:45:1d:86:30:16:0d:43:d2:fc:ed:66:cb:0c:
cc:d7:47:fa:49:b2:a8:76:fe:ec:f9:21:de:df:b2:16:de:bf:
4f:9c:5f:dc:ed:88:5a:f0:74:39:ba:53:3e:63:4a:b3:54:20:
37:39:f2:af:52:68:3b:42:77:1b:84:75:a2:29:6b:28:8b:1d:
14:49:d3:ca:fa:a4:9a:cf:f8:8f:c5:05:7b:db:cb:39:b9:12:
38:e7:4b:2c:fd:68:ce:90:73:e6:2d:ae:3c:4f:48:46:b1:cb:
82:4a:7c:d9:68:51:8d:a2:74:83:54:5e:57:46:4c:e2:ea:79:
93:50:ff:97:22:c5:89:2e:c3:68:66:5e:21:99:6e:be:90:91:
80:29:13:47:0e:69:78:45:4b:04:07:44:2d:53:95:23:fb:27:
09:71:29:48:7c:da:7c:e5:3d:59:1d:c9:b2:6e:81:cd:7c:59:
52:9d:a2:da:bd:29:c2:6a:9f:e7:0b:f7:75:8f:c2:02:5c:cf:
c0:a5:36:79:fc:13:5c:3e:cb:34:47:77:99:cb:ea:a2:ad:95:
4c:4d:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:14 2026 by rpki-client