
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: o0ng1Lbjkl03LsOXIZsEKsNJ6GYz8WG6uX645p+92Tk=
Subject key identifier: 56:B5:59:83:D5:57:2C:FD:87:DC:82:3F:6C:BC:83:0F:48:3C:52:9E
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 080E
Signing time: Sat 06 Jun 2026 21:07:05 +0000
Manifest this update: Sat 06 Jun 2026 21:07:05 +0000
Manifest next update: Sat 13 Jun 2026 21:07:05 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: 2QNb8rOwYq19bh5dwdkYrSMWwDwg3cRZUN1iX9WSy2Q=)
2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
4: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Jun 6 21:07:05 2026 GMT
Not After : Jun 13 21:07:05 2026 GMT
Subject: CN=6a248bf9-3219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:7e:2a:5b:a3:9b:89:2f:a3:a9:60:1e:06:
16:51:59:81:e8:8f:ed:55:8e:49:3a:55:72:09:cc:
56:05:bc:65:7f:f9:07:cf:87:3a:8a:0a:a9:86:a5:
5b:48:16:c9:0f:a6:5b:7b:78:c3:d1:a5:3f:65:9b:
66:77:f0:1d:3a:6f:6c:b0:6f:d8:76:07:49:da:ef:
24:1a:19:e5:af:46:df:c4:89:79:a5:36:91:95:95:
0a:db:39:48:ed:d2:bf:4b:b7:c3:d5:4d:50:05:ad:
c6:c2:87:81:fa:1e:b2:3e:12:0b:9c:9d:42:0a:fd:
7c:4f:9a:cd:60:b2:87:fa:47:e2:94:53:fc:a9:af:
ee:83:ba:92:88:7c:c0:54:1b:89:e1:9e:cc:1a:a5:
c3:1f:fb:eb:59:97:8f:c8:c8:68:55:05:e0:5d:ac:
3b:7b:87:c5:e1:10:99:1c:4c:d2:93:c1:66:d6:c7:
50:c5:7f:1e:4b:ab:98:bd:8b:12:e9:0d:08:c5:d9:
ea:40:77:02:55:12:3b:df:eb:b3:b5:91:1c:c8:68:
ae:18:99:ba:a1:38:6c:aa:7c:89:26:ae:9f:71:35:
f2:83:02:16:26:47:e8:8a:fb:d0:80:fd:a5:8f:49:
b0:8e:4c:42:0b:a5:c2:7c:83:2c:00:58:94:f7:f4:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:59:83:D5:57:2C:FD:87:DC:82:3F:6C:BC:83:0F:48:3C:52:9E
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:4f:ac:28:65:42:69:d6:f2:ba:e4:5c:cf:1a:85:32:40:
c7:d3:52:e1:6b:fe:15:b7:c7:e1:27:23:0d:9d:04:8d:86:5b:
a7:d0:c4:14:46:5c:fd:df:f3:7a:dc:e0:99:56:9e:cf:14:bd:
5e:05:ab:4f:f2:21:c4:7c:79:80:c6:cd:c6:96:fc:97:62:9f:
34:30:e9:81:3e:20:e6:53:13:ae:5e:81:61:e9:db:f0:ef:20:
23:39:26:d9:75:30:29:98:43:a8:45:f3:78:79:ab:fd:4e:02:
0e:13:23:7d:ab:72:d8:5b:d5:d3:50:43:76:ee:54:d0:c4:11:
c8:63:14:80:ed:cc:5a:7b:aa:fa:87:bf:d4:df:63:8d:d2:03:
1b:52:95:fb:01:b2:50:a0:05:04:36:3e:2c:d8:b1:90:2a:b6:
95:90:24:2a:74:9e:8a:90:2c:29:0f:d4:68:59:8a:49:b0:82:
aa:bb:7b:8c:ae:6b:29:72:1d:65:c1:4f:d1:87:1e:f2:c5:04:
59:b0:f6:ef:de:af:04:b8:55:bf:c0:f6:4e:6e:e7:a7:d4:38:
41:0a:34:3c:ee:39:45:3e:1b:43:86:b4:6c:9a:b9:a5:30:26:
5b:35:bc:29:63:fd:19:20:12:2c:aa:91:22:d2:35:9f:0f:d4:
fa:b9:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 00:39:55 2026 by rpki-client