
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json)
Hash identifier: F+tKlMr8ZP3VM4Skmmlt1dw4hpC0YHHI+N0EECU699s=
Subject key identifier: 31:D7:22:9A:17:B8:CC:D3:A6:F3:A7:BF:F6:B3:E5:7A:09:BA:27:CF
Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
Manifest number: D6
Signing time: Sun 05 Apr 2026 06:11:41 +0000
Manifest this update: Sun 05 Apr 2026 06:11:41 +0000
Manifest next update: Sun 12 Apr 2026 06:11:41 +0000
Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: IH8FwIRq4IpafJG0brRxWAiOyYzhWjPFQCQMJ9vnu+s=)
2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: yZGNlzCw9fYEkUgbHQXyzQMU/Eeaou90bAR9FcUS1CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Validity
Not Before: Apr 5 06:11:41 2026 GMT
Not After : Apr 12 06:11:41 2026 GMT
Subject: CN=69d1fd1d-6f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:7c:94:48:b8:ac:77:b4:1e:de:bb:62:14:
c4:70:98:33:a1:a2:39:33:14:42:e7:f7:e7:f4:11:
c3:e8:27:60:34:59:a9:52:d7:04:0e:5b:e6:f1:97:
ac:a7:8c:ed:cf:27:93:35:5f:3f:de:59:cd:4c:db:
70:4f:fe:2b:69:b3:36:f7:c4:ce:01:40:d6:9f:d7:
bb:2f:b6:61:45:9f:41:8d:28:22:dd:ac:43:a6:05:
52:df:61:dd:ce:37:1f:15:de:8e:b5:18:20:f8:f5:
97:2a:81:91:74:04:dd:9e:e6:5f:27:8b:2f:29:2e:
9a:b8:9d:55:eb:83:45:11:cf:69:33:5e:fe:fe:35:
76:14:de:c2:fc:bf:05:5b:67:3c:32:38:69:f0:d0:
fa:87:5e:bc:ae:a5:1c:32:2b:be:e2:3c:dd:fa:db:
12:97:f1:80:3a:ef:f4:86:62:08:92:e4:ee:9b:98:
d7:cc:50:23:91:0b:1a:50:de:e6:f2:9f:9b:f3:1e:
89:89:ce:de:04:ae:4c:01:fd:90:1b:9a:97:b8:24:
c4:c5:d9:31:0a:4d:e4:22:97:bd:8e:1c:97:dc:80:
b3:46:9e:1c:7d:33:81:cd:6b:28:69:53:3f:89:ee:
aa:77:da:33:ab:ba:f4:8b:e3:e6:d6:1d:68:83:f5:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:22:9A:17:B8:CC:D3:A6:F3:A7:BF:F6:B3:E5:7A:09:BA:27:CF
X509v3 Authority Key Identifier:
keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:f8:0d:1e:60:14:00:13:b4:6c:47:5c:1a:c8:28:58:64:d3:
96:58:5b:15:7d:ad:4e:c1:83:bc:c6:f9:ea:89:6e:65:c4:5b:
09:d6:84:7a:d1:f3:82:21:a4:07:f4:8d:cf:77:d9:62:99:18:
a3:06:e1:55:66:ac:9d:5b:3a:68:de:06:ac:f1:3b:ff:a2:55:
de:d3:53:5b:00:ff:29:bc:7e:c7:4c:8c:05:dd:e4:af:57:29:
21:8f:50:0e:62:71:09:55:8b:ca:e4:93:be:35:58:1d:3a:6d:
59:ae:d7:5a:2d:74:69:44:9f:49:f2:32:01:5f:40:18:13:c3:
93:5e:c2:fa:f4:55:92:45:04:4e:80:c1:a5:d7:ff:f1:d4:eb:
6c:c2:55:c3:f1:de:96:9b:3a:77:4b:cf:95:76:32:f6:06:99:
61:cb:ef:8f:99:bc:db:7a:9e:3a:68:96:8b:1e:e2:1e:d9:80:
01:2e:a2:c5:48:0e:a1:55:8d:e4:fb:62:66:bc:2b:a2:ff:5a:
96:3e:6e:a5:91:e8:57:ed:64:64:dd:8f:84:b6:6c:af:42:23:
9a:36:d8:8c:69:aa:a5:71:6f:eb:6d:33:c8:8f:38:f4:58:aa:
9f:cd:8a:a0:2f:be:79:f9:67:4e:59:ac:08:18:e1:96:8c:18:
16:ea:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:38:07 2026 by rpki-client