
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier: QTU1a/IeOTiATQUNgdZ12ohL1ebCw/P30OM6hW2QWFY=
Subject key identifier: B2:7A:7D:FD:DB:08:15:38:FB:22:1E:74:98:82:74:D7:ED:CF:1D:74
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number: 01D8
Signing time: Thu 21 May 2026 03:39:05 +0000
Manifest this update: Thu 21 May 2026 03:39:04 +0000
Manifest next update: Thu 28 May 2026 03:39:04 +0000
Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: vnkFUk6XlQ45iWEmWTWpLkXM0BhLLbnIvqTojqGC7VM=)
2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: 0hXjfHbURh148I/8mqPMNcEAW0wUw9merHSuJ0Q2WMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Validity
Not Before: May 21 03:39:04 2026 GMT
Not After : May 28 03:39:04 2026 GMT
Subject: CN=6a0e7e59-932d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:5e:31:d7:72:54:22:e8:d0:61:f2:d6:65:
fa:de:46:44:01:cb:b0:d7:02:13:7c:65:88:1f:1c:
65:e0:c7:8a:f7:63:c3:ff:08:d3:4c:d6:e8:c7:bf:
e8:33:50:bf:2b:0e:b8:73:7f:31:21:df:62:dc:74:
ed:dd:88:69:be:e1:e2:87:cf:64:c3:ee:b3:f7:1c:
51:3e:15:54:d3:62:79:3f:57:4b:71:ab:a1:65:cb:
9f:00:24:b2:f3:04:6c:69:c2:91:8b:22:3b:f0:48:
17:db:85:f6:e4:cf:8b:93:29:f0:13:81:f8:44:fc:
bf:85:01:3d:10:fa:b7:7b:9e:ac:fd:e3:91:7a:78:
4a:4f:b8:db:55:03:cf:c8:8b:2e:f7:60:e0:c1:28:
3b:25:73:4c:17:c2:75:4c:af:22:7d:1d:d4:d1:ca:
ab:94:f8:8e:31:d8:6d:bc:5d:eb:cd:8c:2a:cd:d1:
f2:4a:7d:3a:93:93:3b:74:0a:21:42:15:6c:92:2a:
d0:59:4a:4d:43:6a:e0:94:98:c4:95:6e:a6:5e:ea:
25:9d:46:c2:65:bf:38:28:a6:41:c1:4a:4c:f5:11:
16:c3:c1:87:63:cd:89:3d:b6:da:7b:cc:3a:f2:f0:
29:e1:55:c3:62:5d:83:01:e1:b0:ee:27:f2:c2:59:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7A:7D:FD:DB:08:15:38:FB:22:1E:74:98:82:74:D7:ED:CF:1D:74
X509v3 Authority Key Identifier:
keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:66:57:77:5c:e5:0d:65:a6:d4:4f:03:bf:e3:a8:2b:f7:
b8:8b:5f:22:d3:d6:77:fe:87:b5:c7:1f:59:28:ba:13:cf:3b:
81:da:53:96:4b:0b:05:14:2a:50:c2:cc:76:b0:c0:d4:9b:72:
8e:bf:f8:fc:7a:bf:7a:b8:01:ca:ab:24:6c:34:e6:3d:40:63:
f6:5a:d3:37:7d:05:3d:05:96:79:62:b8:e9:44:b1:bc:5c:96:
63:a7:e9:44:4a:25:fa:6f:ef:e8:89:4e:1b:4c:4c:30:e4:51:
fb:8f:fb:25:c0:19:07:9a:fd:c1:58:58:6d:d0:b8:fa:4d:4f:
c7:25:93:80:62:5a:11:eb:8f:af:92:60:a0:9e:b5:af:27:76:
de:c0:39:c9:ea:03:72:38:ea:a1:4e:4d:98:11:c3:15:4b:0c:
71:1e:22:11:6c:de:ca:59:b7:1a:57:df:49:3a:ca:bb:99:0f:
bd:a2:90:cc:4e:29:54:06:69:cc:13:bd:ec:1d:d1:77:10:f3:
44:72:f5:35:be:f8:4e:bf:43:a6:1a:e9:52:c0:f5:46:d1:e0:
22:7c:ea:15:a4:85:b2:56:b1:85:fa:84:92:30:9c:7b:b8:fa:
66:cb:12:db:0e:20:fd:f2:6d:2b:90:9f:09:76:67:9c:aa:07:
32:af:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:11 2026 by rpki-client