
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier: HVFrU2GALCR6AWGx1ZuOorxLBNQ16ERe7smiNGtiGMM=
Subject key identifier: 35:48:12:C1:09:F8:BD:BC:26:C7:A1:20:7C:CC:60:D6:F4:9D:64:44
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial: 0510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number: 0507
Signing time: Mon 22 Jun 2026 23:44:33 +0000
Manifest this update: Mon 22 Jun 2026 23:44:32 +0000
Manifest next update: Mon 29 Jun 2026 23:44:32 +0000
Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: q27A/1ZlDBNorHgcfNJ+DapeDC/umn60yIm7a0p3SNc=)
2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 6u8EDQPeHd1f5myvUPvFnltCBejoVUEG20zIQZJhOPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Validity
Not Before: Jun 22 23:44:32 2026 GMT
Not After : Jun 29 23:44:32 2026 GMT
Subject: CN=6a39c8e1-d073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:c7:86:8f:c0:77:da:5b:b1:f5:64:d6:0c:
61:df:45:af:3c:81:f9:1a:9c:7b:a1:c2:e6:00:97:
b0:59:b3:f5:d8:f8:68:32:34:7d:23:0b:5c:0a:d4:
f7:c4:c6:47:2a:b5:89:60:82:ac:7f:d7:bb:7c:1d:
5e:f9:ec:59:eb:ee:4b:c8:18:41:fd:03:17:22:d5:
c1:22:7a:c5:65:c5:35:ab:d9:2b:7b:68:ed:c8:29:
aa:cb:c6:f4:fc:b7:b8:f1:5e:e6:e6:ff:a9:ab:ff:
1a:3b:87:36:17:06:b9:a1:8c:03:46:7a:98:32:60:
7b:db:04:a6:e0:ad:34:a7:c5:41:a5:d9:0f:bc:29:
c1:15:4e:5b:e4:24:42:a8:12:c7:a8:ce:18:f9:ed:
4b:70:8b:ff:10:1e:df:e5:cb:92:9b:20:c5:72:7b:
3b:86:f2:9b:b9:4d:5b:cb:91:9d:cf:67:e9:19:78:
89:70:af:b1:a9:49:ab:b9:b8:17:ed:b9:9f:d4:b7:
dd:0c:a7:66:6c:cb:d5:29:af:a3:0b:ea:81:f5:35:
43:5d:58:82:7b:87:7d:45:3d:4e:83:67:2b:0c:24:
d7:cb:69:f9:9d:ea:9e:b3:d0:dd:55:85:fe:a1:12:
83:3c:3c:f6:db:9e:47:9d:39:35:8f:eb:7e:cf:bd:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:12:C1:09:F8:BD:BC:26:C7:A1:20:7C:CC:60:D6:F4:9D:64:44
X509v3 Authority Key Identifier:
keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:d7:d3:fa:7c:42:48:bb:4e:c0:1d:7a:8d:76:3c:25:93:
14:1e:9c:7f:cc:f6:64:06:57:7c:15:3b:dc:5a:0f:02:50:de:
c5:45:ca:22:55:94:31:3a:aa:11:29:cb:74:8a:62:1e:56:a0:
1b:d7:c6:67:eb:9f:c4:77:f1:f0:de:89:4e:0f:fa:ce:ad:75:
06:27:80:93:8a:f3:23:d2:10:b5:28:4b:27:75:82:fb:c5:c5:
ef:f0:9f:74:3c:0d:23:fc:6a:12:08:17:31:b3:6a:70:7b:e3:
a1:58:1b:a7:4c:ba:66:b9:d0:a9:1c:91:12:a8:52:59:e8:bf:
ec:bf:ac:87:1b:48:c4:36:43:41:ea:04:94:0b:04:42:74:53:
ed:f5:a4:a5:e8:c5:f0:21:5e:71:96:8b:e1:97:3f:ba:e3:3d:
c1:b9:79:4f:78:10:e5:43:62:7b:ad:11:8f:d7:a8:68:30:3e:
f2:4b:88:80:57:40:ff:f9:ec:2b:f6:61:87:7f:df:ee:9b:09:
09:1e:a4:0e:49:82:b3:66:2d:5d:4e:15:d2:fe:b1:62:d3:e1:
7f:8a:70:40:0d:14:98:ea:cb:ef:d8:3d:9e:56:00:77:96:7a:
5b:df:49:28:3d:48:d3:af:84:b8:31:83:3c:f3:73:9a:58:18:
86:bc:36:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz
NEZGREYzNUMwHhcNMjYwNjIyMjM0NDMyWhcNMjYwNjI5MjM0NDMyWjAYMRYwFAYD
VQQDEw02YTM5YzhlMS1kMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+PHho/Ad9pbsfVk1gxh30WvPIH5Gpx7ocLmAJewWbP12PhoMjR9IwtcCtT3
xMZHKrWJYIKsf9e7fB1e+exZ6+5LyBhB/QMXItXBInrFZcU1q9kre2jtyCmqy8b0
/Le48V7m5v+pq/8aO4c2Fwa5oYwDRnqYMmB72wSm4K00p8VBpdkPvCnBFU5b5CRC
qBLHqM4Y+e1LcIv/EB7f5cuSmyDFcns7hvKbuU1by5Gdz2fpGXiJcK+xqUmrubgX
7bmf1LfdDKdmbMvVKa+jC+qB9TVDXViCe4d9RT1Og2crDCTXy2n5neqes9DdVYX+
oRKDPDz2255HnTk1j+t+z72yZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVIEsEJ
+L28JsehIHzMYNb0nWREMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD
REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2
TkxBM1BkSDNmdEkwXzk4MXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo8vX0/p8Qki7TsAdeo12PCWTFB6cf8z2ZAZXfBU73FoPAlDexUXKIlWUMTqq
ESnLdIpiHlagG9fGZ+ufxHfx8N6JTg/6zq11BieAk4rzI9IQtShLJ3WC+8XF7/Cf
dDwNI/xqEggXMbNqcHvjoVgbp0y6ZrnQqRyREqhSWei/7L+shxtIxDZDQeoElAsE
QnRT7fWkpejF8CFecZaL4Zc/uuM9wbl5T3gQ5UNie60Rj9eoaDA+8kuIgFdA//ns
K/Zhh3/f7psJCR6kDkmCs2YtXU4V0v6xYtPhf4pwQA0UmOrL79g9nlYAd5Z6W99J
KD1I06+EuDGDPPNzmlgYhrw2Sg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:49 2026 by rpki-client