
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier: ihAzNeB9Aw4l9sxvlqTlGPau3K4uHirPfgzhwvsqmwg=
Subject key identifier: 27:35:8E:81:A7:05:23:0B:75:A2:B6:A3:84:68:98:A8:35:FB:B7:7A
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial: 0533
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number: 0528
Signing time: Tue 18 Aug 2026 23:56:26 +0000
Manifest this update: Tue 18 Aug 2026 23:56:25 +0000
Manifest next update: Tue 25 Aug 2026 23:56:25 +0000
Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: TlC6qoQ7CzHzgdK0k79sDXA4m8HwHUl5M+HshwK4njY=)
2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: Jv14UetFlvsgBn+0MbboNTCDUlFN6om75ZyjAE81fvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1331 (0x533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Validity
Not Before: Aug 18 23:56:25 2026 GMT
Not After : Aug 25 23:56:25 2026 GMT
Subject: CN=6a84f12a-0865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:ba:f4:5d:dc:76:77:2c:1a:67:9f:c6:20:
02:e7:79:bb:35:16:4f:18:5f:b9:a6:08:15:03:fa:
8f:2c:85:a8:5d:e5:a4:f5:ed:23:ff:44:5f:b4:4e:
ae:0f:f6:c7:62:ac:be:99:fb:85:53:41:f9:69:bc:
03:ec:3c:dd:57:41:7e:7e:71:81:f0:80:35:48:eb:
48:9b:b9:4f:52:e1:97:bd:ff:80:fb:b4:68:1c:0e:
5b:04:45:7c:e7:d7:3b:c7:7d:2d:ec:a5:f5:9b:61:
28:1d:cd:6e:ee:07:18:fe:2e:a7:c7:c1:24:7e:47:
b2:f3:c1:a1:03:7f:2e:5b:49:78:d4:99:d0:dd:71:
e6:0b:a1:5f:8f:41:c4:5a:9b:6e:5d:2c:60:dc:ff:
70:66:40:38:4a:ab:0d:08:e6:db:a9:fb:1a:44:f6:
b1:f0:94:7e:51:32:9e:91:8f:8a:8b:10:20:7e:59:
8a:2f:c3:83:58:34:ad:79:7d:b5:85:48:f7:c4:d9:
0e:7f:b7:15:d6:70:cc:6b:06:f9:24:c9:f8:c4:79:
f3:69:92:e2:e1:24:59:69:47:82:ff:de:ed:97:2d:
7e:fe:36:91:0c:04:21:79:c5:f4:5e:37:03:eb:fa:
65:5c:cc:e2:4f:30:e8:8b:cf:9a:85:fa:5d:e6:22:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:8E:81:A7:05:23:0B:75:A2:B6:A3:84:68:98:A8:35:FB:B7:7A
X509v3 Authority Key Identifier:
keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:33:91:14:17:c4:ee:7f:34:6f:0c:91:6c:28:c1:a3:fa:
9b:29:ea:36:c9:22:de:74:80:63:51:02:f5:ce:a5:1e:97:de:
2f:89:fe:80:ba:d2:9d:59:8d:77:45:1d:4b:8d:f5:12:e3:b4:
09:85:cc:af:71:6a:25:88:76:66:66:47:dd:10:2c:7a:de:6a:
29:d2:43:c6:c8:85:38:e8:2c:7d:7f:61:4b:1f:20:86:c8:13:
c0:de:1e:ec:9b:aa:61:87:e7:65:dc:32:dc:f8:2a:f6:e0:c1:
a0:23:5c:43:6e:12:0a:e5:7c:1d:56:9c:8f:d1:da:cf:49:3e:
a0:51:41:fc:4e:5e:bd:b3:6b:e7:49:6a:48:a9:18:aa:b5:4f:
fb:9d:2c:1b:3a:1f:66:63:37:dc:83:57:6d:c6:a3:59:88:7b:
e7:b0:b1:7c:15:57:d4:76:32:04:8a:47:41:d0:d9:0b:62:be:
30:64:7e:c5:79:53:54:99:c2:78:14:2f:f2:4b:28:b0:97:ce:
12:ed:2f:38:cc:18:c2:91:64:82:81:f4:ce:0c:b2:fa:19:28:
6a:7d:1d:c6:c3:4a:df:55:67:5d:d2:5d:1b:b5:e1:27:ef:89:
1a:26:a5:78:25:6f:9b:29:5a:04:a3:b3:cd:d4:e4:d7:7b:bb:
aa:28:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:01 2026 by rpki-client