
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier: efer9wJV0pWYxMVj5QlEWcxIi+GsSBBHjzuQFHDxohE=
Subject key identifier: 04:25:99:73:E8:F6:A0:B6:90:34:1A:82:76:1A:36:26:BC:25:6B:43
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number: 0110
Signing time: Sun 31 May 2026 23:09:36 +0000
Manifest this update: Sun 31 May 2026 23:09:36 +0000
Manifest next update: Sun 07 Jun 2026 23:09:36 +0000
Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: kStaNg7fwUZxRvQwMmuJKDW3mGrwNOIYR6BLB5DrtPs=)
2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: c+4urNgJNXNWBhwpLiUNezIdmF5mlVJxmjpsI9/AkQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Validity
Not Before: May 31 23:09:36 2026 GMT
Not After : Jun 7 23:09:36 2026 GMT
Subject: CN=6a1cbfb0-e742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:1c:ab:56:1a:9e:31:6a:52:c8:66:e4:4f:
ef:74:14:74:65:fc:a3:16:2d:74:39:fa:d9:eb:bb:
6c:c7:ae:ca:41:1e:db:07:d5:76:83:44:89:59:79:
17:37:57:dd:da:e9:62:94:a1:a0:b5:fa:ea:ff:72:
c3:82:67:63:2f:ee:31:61:63:0f:69:79:b0:f2:b4:
72:f4:c6:9e:42:4d:38:12:56:33:2d:d2:c9:0a:cd:
5f:bb:78:20:17:4e:99:ef:18:8d:71:9b:96:ff:a0:
4d:32:55:c3:80:39:16:bd:80:ef:07:67:dd:ef:21:
a3:8b:d8:ac:1e:1e:67:bf:4e:b7:d6:ab:54:62:78:
9e:7d:2a:11:31:0c:a7:b8:ec:44:ff:50:d0:92:35:
fe:a9:c7:cc:0c:10:1d:30:d9:99:b5:ce:83:41:db:
9b:7a:29:d7:92:12:43:da:43:82:b6:b9:b5:35:9b:
0e:f2:83:c1:e7:78:71:12:15:ea:5e:a7:5f:e4:b3:
34:f2:3c:05:cd:c6:2c:19:07:65:df:92:07:86:8a:
60:41:4a:d0:57:e6:86:f4:42:7c:17:66:78:e5:ac:
2a:d6:a5:56:1c:7d:95:de:5d:a2:f7:4a:64:ce:b5:
f4:d7:f7:37:96:03:3f:52:dc:37:f7:49:f7:3b:04:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:99:73:E8:F6:A0:B6:90:34:1A:82:76:1A:36:26:BC:25:6B:43
X509v3 Authority Key Identifier:
keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:39:84:d7:26:28:b9:df:7b:6e:54:d3:ad:6b:ac:8d:74:b3:
51:12:62:0a:28:1c:5e:7c:74:7c:ec:5d:4f:41:2e:82:d5:6e:
b7:5d:ec:34:e4:4c:67:7f:ea:a2:5f:fb:96:fb:ad:19:73:3d:
08:05:81:3a:c6:21:0d:9a:cb:8a:60:83:14:e0:aa:9c:2c:1a:
7f:ae:cb:fe:9d:10:46:4e:32:b7:3d:cb:a7:a4:fe:94:5e:e9:
09:60:4d:6d:a4:b3:60:93:5f:e9:ff:cf:fd:c0:c6:6d:6d:d4:
e5:08:73:56:4c:a6:f0:b5:24:9e:ab:e5:d7:52:80:70:be:c6:
58:eb:58:53:2f:53:1d:b7:24:1b:f2:87:78:6b:a4:4d:e8:84:
42:ff:05:85:20:96:aa:74:0b:31:0b:50:c2:70:b8:76:95:06:
9e:3b:8c:99:99:95:22:36:47:08:bc:96:18:f0:dc:13:2d:fe:
18:69:a7:81:a4:72:c3:f5:b1:c5:ef:3a:b9:1c:9e:33:ca:bf:
be:00:b4:89:aa:c8:40:8e:9e:fa:2b:41:5d:5c:93:c6:a3:f7:
b7:e9:f9:04:1e:e8:7e:43:43:a0:54:3c:4f:4b:e5:f5:45:14:
c7:28:a0:b1:dc:77:c3:ce:d0:0f:f7:d7:33:c6:ee:c9:0e:bf:
f5:0e:86:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx
ODhBQTE1NkYwHhcNMjYwNTMxMjMwOTM2WhcNMjYwNjA3MjMwOTM2WjAYMRYwFAYD
VQQDEw02YTFjYmZiMC1lNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySUcq1YanjFqUshm5E/vdBR0ZfyjFi10OfrZ67tsx67KQR7bB9V2g0SJWXkX
N1fd2ulilKGgtfrq/3LDgmdjL+4xYWMPaXmw8rRy9MaeQk04ElYzLdLJCs1fu3gg
F06Z7xiNcZuW/6BNMlXDgDkWvYDvB2fd7yGji9isHh5nv0631qtUYniefSoRMQyn
uOxE/1DQkjX+qcfMDBAdMNmZtc6DQdubeinXkhJD2kOCtrm1NZsO8oPB53hxEhXq
Xqdf5LM08jwFzcYsGQdl35IHhopgQUrQV+aG9EJ8F2Z45awq1qVWHH2V3l2i90pk
zrX01/c3lgM/Utw390n3OwQPqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQlmXPo
9qC2kDQagnYaNia8JWtDMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG
MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhn
TVc0T0pYYnlKc0lZaXFGVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABDmE1yYoud97blTTrWusjXSzURJiCigcXnx0fOxdT0EugtVut13sNORMZ3/q
ol/7lvutGXM9CAWBOsYhDZrLimCDFOCqnCwaf67L/p0QRk4ytz3Lp6T+lF7pCWBN
baSzYJNf6f/P/cDGbW3U5QhzVkym8LUknqvl11KAcL7GWOtYUy9THbckG/KHeGuk
TeiEQv8FhSCWqnQLMQtQwnC4dpUGnjuMmZmVIjZHCLyWGPDcEy3+GGmngaRyw/Wx
xe86uRyeM8q/vgC0iarIQI6e+itBXVyTxqP3t+n5BB7ofkNDoFQ8T0vl9UUUxyig
sdx3w87QD/fXM8buyQ6/9Q6Gxw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:51 2026 by rpki-client