
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json)
Hash identifier: 6aJb16mIn4tG91aT+QAaP+LpQ7E47xqdO2QhCNJBCbA=
Subject key identifier: D4:39:D9:8E:62:AF:9E:DB:53:93:BA:C7:0E:D4:72:AC:86:CA:03:B4
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
Manifest number: 96
Signing time: Wed 19 Aug 2026 08:05:17 +0000
Manifest this update: Wed 19 Aug 2026 08:05:17 +0000
Manifest next update: Wed 26 Aug 2026 08:05:17 +0000
Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: gce5STP1HWjQ6SLpVehNU4An2GTMX77z0wsubwUkoZE=)
2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: SKL3oSLnK/OGS9FsL+y9x7HH2AFOMsHaA5PqrntVpi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Validity
Not Before: Aug 19 08:05:17 2026 GMT
Not After : Aug 26 08:05:17 2026 GMT
Subject: CN=6a8563bd-cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:26:1c:40:69:5f:d2:e5:34:5d:3e:91:67:
d0:2e:1f:33:01:cc:a9:d7:72:80:b1:8a:de:79:51:
98:32:48:8f:26:a0:0e:2c:3c:2e:51:b6:db:09:cc:
e8:15:68:3f:07:56:7f:77:ae:5b:3f:ef:2d:b0:56:
34:10:d4:cd:a0:e8:9e:5b:aa:4b:03:06:e9:38:3b:
95:f2:21:f7:36:e9:64:9f:24:aa:e6:72:83:8f:bd:
b7:b9:ab:42:a6:d6:9d:72:e4:80:e8:ac:45:c2:ab:
52:e5:72:5a:e3:13:20:6d:06:c3:d9:1f:79:4e:67:
cd:19:37:ee:2b:3f:e7:3d:65:03:29:a3:4e:33:83:
e1:30:0e:34:00:d6:64:bf:4a:d7:d5:af:bd:3e:44:
21:65:f0:78:38:05:5b:ba:2c:76:c4:fc:3d:c0:79:
ab:4f:ca:be:77:a3:9a:71:a4:bc:ac:d1:20:71:30:
da:86:84:c8:89:9c:c9:f9:78:5b:7e:3e:85:ed:c1:
98:9a:e6:25:2d:cc:a3:5e:88:2b:4f:20:1f:43:aa:
6c:71:30:a6:b9:f6:5c:20:78:64:69:8f:f4:3c:db:
10:e1:9a:aa:be:e0:ef:00:a5:76:41:3d:d1:40:02:
85:55:a1:56:2c:a4:4e:7f:51:8c:5b:e9:41:96:8f:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:D9:8E:62:AF:9E:DB:53:93:BA:C7:0E:D4:72:AC:86:CA:03:B4
X509v3 Authority Key Identifier:
keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:d0:20:9d:ef:32:31:49:71:23:8e:c1:80:cc:18:e0:e5:
a3:3e:bb:d9:bf:42:26:98:39:fe:a6:2a:82:62:a8:ad:49:1e:
e1:81:9b:29:31:b9:e7:88:ea:10:0d:d6:1a:fa:fb:5d:b5:b6:
bd:42:2e:60:44:87:a3:a5:72:b2:71:c6:56:02:cf:60:df:bf:
00:78:5f:78:93:89:da:51:3f:2f:52:dc:61:3e:83:9c:63:26:
f4:0e:27:3f:84:ff:42:65:9e:33:1c:0f:82:c0:48:97:e2:7e:
e0:ca:33:9f:bc:f5:e9:f3:26:12:e7:57:22:1b:6e:27:95:fb:
eb:71:76:d8:6b:c1:18:50:f9:ed:0f:2e:e4:e9:9b:7b:6b:e0:
e6:ff:3c:0a:e9:0a:a3:cf:7a:88:d3:bd:45:1f:d8:3d:04:52:
67:33:b9:3b:18:6e:0b:a8:65:12:74:11:13:77:1b:01:b2:56:
11:80:af:48:99:e1:2f:50:b4:f3:8d:13:51:f4:e3:3c:a1:fa:
71:3b:9e:02:f2:c8:ce:af:e4:e6:98:fd:c2:eb:d4:b0:55:ca:
26:63:47:63:d1:f7:72:2e:b9:19:c2:d0:da:68:5f:ff:16:7c:
5b:21:d0:df:5e:f6:88:55:1c:eb:48:f7:11:e4:a0:51:5f:8f:
63:49:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:00 2026 by rpki-client