
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier: cEq7Dy7INm5VemHAVilzbiQ/HJoGF8L7NwGAVpPm6so=
Subject key identifier: D6:D4:96:A4:ED:E0:1C:7D:04:A2:74:F9:A6:8F:D1:9F:74:90:68:0F
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number: 0245
Signing time: Sat 03 Oct 2026 03:03:55 +0000
Manifest this update: Sat 03 Oct 2026 03:03:54 +0000
Manifest next update: Sat 10 Oct 2026 03:03:54 +0000
Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: ae7wuhVWZLftqGW4lK6pO/x+Stfovnh1Ptvs56yFAcA=)
2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: mj1933/3n6toouA33PYerjmiVEAl8MHe43vblZwNmME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Oct 3 03:03:54 2026 GMT
Not After : Oct 10 03:03:54 2026 GMT
Subject: CN=6ac0709a-bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:a1:10:ef:24:2d:38:23:09:e7:35:77:ca:
27:9c:18:45:a5:4b:92:96:87:e1:6a:a3:a9:8c:23:
a9:64:47:5e:06:a7:e9:54:9f:7a:5d:59:2a:05:4d:
8a:f3:e3:e4:f7:b1:d2:13:fa:28:4e:01:3e:8a:7e:
e9:9b:88:7c:e1:6c:9d:90:a0:9f:b5:8f:f7:f7:80:
98:38:51:b0:8d:3b:75:45:d9:e7:9f:a2:d5:75:08:
24:8d:2d:f6:1d:a5:9d:15:58:25:14:d0:04:37:09:
75:28:0b:f7:3d:51:e6:3c:5b:47:c7:99:57:b4:fb:
f8:36:1f:9f:6c:d6:ba:6b:41:f9:ef:11:97:89:f8:
a1:76:59:4d:f2:f1:1c:b5:52:a6:3e:75:c1:bf:bc:
1b:eb:cb:b9:14:7f:b4:99:e8:a4:b0:0c:ab:5e:5b:
e8:d6:89:b1:51:23:19:70:4c:4d:6b:d6:e7:95:e5:
fe:4d:70:dc:44:f7:a6:fe:6c:f0:c4:0e:2a:d3:18:
0e:00:c2:5c:61:ec:63:c0:dd:fb:e3:62:8b:5c:c7:
a6:fc:28:b7:c8:35:46:98:13:a7:b1:73:30:b3:05:
e8:74:8a:d5:cf:38:7e:55:ed:44:c8:97:18:89:a6:
7c:97:59:1a:9d:69:b8:c9:a8:f1:1a:38:d6:2b:a8:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:96:A4:ED:E0:1C:7D:04:A2:74:F9:A6:8F:D1:9F:74:90:68:0F
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:96:0c:ee:17:77:fc:e9:4e:c0:fb:2c:37:3f:b2:cb:8f:
01:4b:3d:f1:69:6c:e5:c9:4d:99:cb:35:13:d0:cf:f8:d8:54:
2d:b6:35:c4:9b:f4:f6:cd:36:a8:90:b6:7e:93:e8:18:40:9b:
ca:e3:a0:84:80:d9:6f:ad:d5:aa:a1:85:8f:7b:a9:f6:45:40:
35:84:be:5a:40:4d:a0:09:60:68:30:36:c1:03:e1:0a:cb:46:
7b:97:0f:07:e1:7c:5d:62:22:60:5e:57:d0:59:8e:ae:a0:49:
f6:a5:d1:ab:d1:77:ff:cb:db:b1:a8:34:40:72:b4:80:00:93:
bc:4b:9e:c0:c9:c4:13:50:57:68:51:d5:af:78:48:6f:d9:24:
1d:55:24:b5:60:b2:53:9a:65:56:24:a0:35:99:1a:5b:84:c1:
b5:a7:e3:10:17:0c:3e:95:25:f9:02:3a:ec:d2:d0:b8:c3:e1:
6b:5a:30:d5:5d:6f:e3:17:e4:17:d1:4a:ce:c8:ab:e7:8f:08:
c6:69:9c:6d:a7:cb:ba:f9:83:59:77:82:46:37:30:07:76:43:
6b:d8:32:bb:24:3e:4c:06:3d:7f:eb:93:7d:d3:e8:db:42:eb:
2d:66:a3:f2:f9:62:a8:1d:29:bc:15:7e:37:71:b2:b2:3d:b1:
ec:14:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:16:41 2026 by rpki-client