
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File: aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier: f4A6Sh70YzSNkGsjdMOndYbG+VYMrxeXW3eMnlaAOqE=
Subject key identifier: 5B:7F:80:62:C2:22:72:5F:D4:2D:13:9D:BE:85:F9:3F:A1:8A:90:3D
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number: 019A
Signing time: Fri 11 Sep 2026 04:22:53 +0000
Manifest this update: Fri 11 Sep 2026 04:22:53 +0000
Manifest next update: Fri 18 Sep 2026 04:22:53 +0000
Files and hashes: 1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: eJv/CcmbQ6R1/eXPB4NNW6sN7G8EpLux2/KxMrly4iI=)
2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: 1vEZv+7+qYLHn55ib9kkDfWTdYO4S/WHs8pgEEuMR50=)
3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: fBHBvvGuITbl2EPW/eI7OV1xjnMqLdmN+KlBI/l5dCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Validity
Not Before: Sep 11 04:22:53 2026 GMT
Not After : Sep 18 04:22:53 2026 GMT
Subject: CN=6aa3821d-03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:fc:21:ec:b0:77:e6:2d:92:93:c0:99:90:
5c:12:35:70:ea:7b:81:29:8f:9a:40:c3:d0:5b:83:
6a:90:3f:33:0a:46:05:cb:72:05:2f:3b:56:a0:e8:
d8:7c:77:4e:c2:74:7f:3c:34:0a:58:d3:9c:ef:37:
0d:e0:4d:e7:ec:3b:bf:ac:d1:3a:42:ec:50:fe:2d:
91:da:73:dd:b9:85:03:81:cd:9c:91:a5:16:f9:2e:
5b:d6:c0:b7:c9:96:a1:e9:eb:73:91:4e:1c:f6:db:
95:2b:8f:52:04:5f:a4:fa:72:ed:3c:26:69:5b:64:
fd:a0:92:b2:bd:d3:02:d8:70:0f:ff:48:c8:16:5c:
40:0d:ae:74:cd:eb:b3:35:2a:72:1a:0c:df:db:f2:
7e:01:c9:14:2d:79:05:d3:2b:88:79:d4:9b:dc:55:
47:04:ca:91:8c:08:01:9c:eb:17:a8:6c:9c:2e:7d:
64:c7:24:53:56:3c:0f:30:a4:4a:97:ec:75:a9:7a:
f0:d3:4a:ad:e6:7e:56:f1:f8:e9:0c:b0:b1:f0:92:
63:82:c5:e8:65:52:94:bf:18:7b:1a:a5:e3:97:38:
8f:e9:ae:04:a1:2a:79:ef:12:2d:23:01:4e:cd:f9:
2e:80:9e:66:69:2c:5c:4c:ee:22:27:58:30:89:33:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:80:62:C2:22:72:5F:D4:2D:13:9D:BE:85:F9:3F:A1:8A:90:3D
X509v3 Authority Key Identifier:
keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:24:81:fc:bd:ff:7f:de:8b:b4:35:f0:40:f7:5b:56:9e:c4:
c8:de:6e:58:63:36:6e:21:90:6b:ba:91:c5:1f:73:f0:64:3f:
6a:e6:1b:d0:76:22:ca:3e:a1:ca:e1:6e:cc:bf:69:40:b7:5e:
84:48:7f:67:30:2d:b7:f7:74:d5:2c:a8:f0:51:85:cb:f6:f8:
fd:f1:fa:ff:89:cb:cb:f4:87:0d:0a:93:f6:39:9b:bd:c0:da:
a0:7f:08:39:df:ba:a3:58:70:30:c3:09:ca:3a:0c:d8:5f:52:
5b:a7:5b:49:51:df:35:36:39:25:1a:e6:45:ac:cf:20:be:9d:
7c:bf:7d:bd:2f:db:f7:81:3c:83:59:b3:f3:0b:2c:23:4a:f9:
9f:c3:d9:76:ef:94:9a:f9:46:1e:16:8f:1a:2c:17:e3:a9:66:
4f:d9:a9:4a:5d:01:22:b4:59:26:27:51:d1:8a:3c:11:e9:49:
f1:86:79:46:5d:7f:7b:3b:61:1d:52:b4:aa:b7:c0:d6:6d:58:
16:2d:31:90:1a:89:ab:ce:46:72:7d:e5:3c:f1:e6:b6:11:43:
82:ec:c3:c7:91:ef:40:95:bb:bf:6c:93:f0:3a:3b:61:99:11:
93:40:bc:ea:cc:0c:76:1c:e6:ca:c2:eb:6d:b7:46:58:bc:34:
41:61:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:39 2026 by rpki-client