
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier: Qs0077Ai9q2XkdwPEujTFrqO5EpWaAd5AnPTc2Tw8TM=
Subject key identifier: 54:2F:D6:88:71:DD:30:10:EC:1A:B2:30:DC:7D:49:1A:F3:C4:B1:9B
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial: 0994
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number: 0973
Signing time: Wed 28 Oct 2026 20:21:00 +0000
Manifest this update: Wed 28 Oct 2026 20:20:59 +0000
Manifest next update: Wed 04 Nov 2026 20:20:59 +0000
Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: WYcUC4FsNUTCcsODVTt/TvXDL7szY0YtHsN1t/36biI=)
2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: fOkHDjQM9pRqISkvpZQ8S365Az+2AzqVDFtPpjKkpxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 20:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Validity
Not Before: Oct 28 20:20:59 2026 GMT
Not After : Nov 4 20:20:59 2026 GMT
Subject: CN=6ae2592c-db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:ae:3f:4b:4a:88:3e:72:d0:b5:32:ce:07:
7b:d8:42:30:8e:d0:3e:81:fd:8c:77:1d:a5:91:39:
46:5d:fd:5f:3e:87:21:68:a0:7d:79:96:e4:76:bb:
d5:56:c5:50:fa:db:bf:5f:7a:5a:41:f5:3a:14:2b:
ff:6c:54:d1:cb:a5:bc:eb:cb:fb:45:3e:c8:60:b4:
c0:8a:89:e2:ec:0e:54:a7:b6:82:d5:10:27:a6:fb:
9c:02:40:45:61:38:a5:cf:e7:27:03:74:fb:1e:21:
cf:89:47:b7:98:dd:29:25:44:11:54:b6:d5:fd:9f:
5a:f0:f0:f8:15:7d:b3:cb:9a:7f:5b:85:31:80:64:
f3:41:42:e1:ee:86:47:f6:6c:57:93:40:02:86:4c:
10:ec:b7:7f:7f:c7:19:1c:92:9b:77:4c:0b:1a:25:
0e:52:8e:6e:7f:86:d6:7b:26:26:68:b4:d8:be:b2:
0d:59:e2:f5:b7:7c:45:b2:cb:0e:f4:db:9d:b0:5d:
11:ac:6e:42:be:f7:a4:45:ef:01:bd:56:c7:7c:9c:
4d:bd:f4:95:5b:a0:aa:49:15:37:37:ef:32:a4:d4:
b4:c2:d4:f9:e3:18:bc:a8:44:75:b6:2a:06:e4:61:
ef:e1:05:3c:3b:60:7e:b5:5f:aa:16:11:57:ec:ae:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2F:D6:88:71:DD:30:10:EC:1A:B2:30:DC:7D:49:1A:F3:C4:B1:9B
X509v3 Authority Key Identifier:
keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:67:bc:53:e7:ed:76:92:a9:00:ff:04:52:32:5c:84:bd:
e0:f6:c1:ba:a8:cb:d5:8b:61:c8:5c:f0:51:f3:f5:aa:16:74:
63:de:0c:17:a5:c7:0d:4d:3e:ed:a0:2d:23:2f:0f:47:64:d6:
a7:b8:dc:aa:e1:d3:b0:1b:c5:6c:6f:a4:ac:08:6b:c3:2d:bf:
e9:04:0b:44:98:4b:29:55:40:a1:d1:75:df:2b:6b:4a:92:66:
33:3d:9a:fc:7a:d2:1c:09:59:56:69:26:ed:60:9a:c2:f1:ba:
33:df:90:39:b8:28:48:f4:7e:f8:2f:fe:b1:5e:68:f6:9b:54:
52:07:4f:13:d1:cf:ee:c0:4d:cd:84:13:bc:86:ab:4d:19:c7:
8a:29:fc:7e:2a:a9:ba:71:63:1b:fb:f2:65:71:e3:cb:eb:48:
2b:47:42:82:f2:56:25:d4:aa:88:26:dc:56:8a:e6:82:8d:32:
14:af:53:26:82:3d:5d:ae:3f:27:b6:bf:e0:e6:2a:18:74:cc:
ae:ba:62:9f:b5:f5:7b:38:52:8d:3c:72:9d:38:94:e6:ff:69:
9b:c4:ed:c1:fe:b8:b7:5a:64:a2:20:cc:87:23:27:bb:84:a0:
bc:d8:31:17:17:c5:14:7a:a3:e4:2d:20:8a:ab:18:7e:8d:e7:
ee:58:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:05:08 2026 by rpki-client