
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier: pGS6+8QlRfSh4I04BKBjWEAXRQ1ehWUyoBKpeYtH0gk=
Subject key identifier: EA:77:33:65:35:74:B9:71:A7:BC:4A:CC:C1:FB:40:8D:44:7F:DE:87
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number: 04B0
Signing time: Wed 19 Aug 2026 00:17:52 +0000
Manifest this update: Wed 19 Aug 2026 00:17:52 +0000
Manifest next update: Wed 26 Aug 2026 00:17:52 +0000
Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: vl/Wscb/UjnQkXqwDglZjYSuzxjgIRm1WftgosDR5tQ=)
2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Validity
Not Before: Aug 19 00:17:52 2026 GMT
Not After : Aug 26 00:17:52 2026 GMT
Subject: CN=6a84f630-47aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:93:fd:8f:45:22:1a:64:7e:93:0d:45:99:
76:a9:92:c4:49:93:2c:46:70:e6:c7:96:5a:d5:6b:
8e:c5:ba:df:55:00:f0:cb:5e:56:4d:c2:93:9b:cc:
a9:6e:74:90:e0:e3:d8:dc:72:9b:e1:f9:9e:20:de:
f7:21:16:13:bc:f3:9d:4d:6b:43:bc:23:74:c0:80:
43:73:d8:99:54:78:c8:d8:ad:50:26:1a:2f:80:0e:
be:62:a7:3d:92:49:1c:da:8b:91:c8:52:c2:a2:d2:
57:76:76:10:01:4d:09:5c:e2:fd:44:57:2b:00:3f:
2b:b6:a1:a5:3f:46:ea:cb:1f:6f:85:df:f7:aa:a4:
34:99:aa:ec:1e:2e:0c:ff:c9:d8:7f:8c:14:df:c5:
c6:57:e6:d7:7a:96:3a:96:a3:cc:7c:37:d0:c5:9e:
2a:5c:76:83:ac:64:c0:3b:91:fd:96:af:a1:ce:e7:
ff:7e:b7:0a:54:b4:a4:d1:d7:29:47:bd:99:e4:5a:
1c:32:bc:43:d6:70:f7:58:dc:d0:74:66:aa:93:bc:
2f:58:9d:66:14:23:0b:21:c7:13:a0:3a:19:76:b5:
65:1d:90:66:14:8d:b7:8d:3c:b4:e4:c7:2a:21:50:
86:c1:39:13:e0:07:10:12:ce:d9:6b:f3:c4:8b:15:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:33:65:35:74:B9:71:A7:BC:4A:CC:C1:FB:40:8D:44:7F:DE:87
X509v3 Authority Key Identifier:
keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:bf:b5:ae:74:91:5d:bc:10:dc:3e:65:10:36:c6:1c:2e:
58:9c:0e:09:0f:cf:d4:41:db:b1:63:aa:69:4f:40:59:49:1d:
8e:08:17:ce:de:e1:f5:7d:3a:dd:3b:10:fd:ff:9a:37:7d:cd:
df:ba:47:27:f7:f6:d2:7d:f5:72:36:2f:5a:1a:e7:41:27:aa:
1f:ee:fe:13:76:dc:ce:b5:af:47:d8:b5:fd:57:1c:46:d2:a4:
f2:f1:8b:6c:2c:73:03:28:e3:99:2a:c8:54:f4:66:64:27:ea:
33:87:d1:97:ed:91:45:e9:2d:31:c2:9c:9f:d1:5c:0b:d6:77:
b7:b8:08:3a:21:52:0a:2d:ab:55:2e:43:41:cc:0b:da:cb:85:
32:fa:61:75:95:7d:0f:f8:6f:04:20:df:e8:51:6a:ed:65:a6:
10:43:13:7c:bd:e2:89:3f:7c:bd:0f:eb:01:f2:38:d4:00:25:
fa:0c:7f:04:44:ef:a3:3f:52:5c:50:55:4b:ce:e9:78:da:1b:
1a:84:6e:d7:57:c4:5d:57:0a:57:bf:56:55:6d:71:bf:79:6a:
61:5f:df:ac:e9:09:2a:46:d4:f2:53:eb:50:05:c7:53:34:d7:
49:82:5b:aa:f1:84:f3:51:27:7e:26:59:86:8b:bf:8b:42:9d:
03:e4:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:54 2026 by rpki-client