
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier: pvmO12QQmuL74KyqPoT14qnW0tnIdYwYJVou4nMYcL0=
Subject key identifier: BE:62:97:99:54:1B:9D:6E:1E:00:B7:B3:1E:AC:7C:ED:B8:BC:21:D8
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number: F2
Signing time: Sat 25 Jul 2026 08:03:46 +0000
Manifest this update: Sat 25 Jul 2026 08:03:46 +0000
Manifest next update: Sat 01 Aug 2026 08:03:46 +0000
Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: G1PT2md3g3DmXVMZYjqIL38yp2p0XYV77AkLFSo0fzc=)
2: 136834E05FA411F189336C2D6447A888.roa (hash: jaSZMPt/7qEgI70+BaRDVpbnOmgZ4JyLB8v5C8xqApk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 08:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Validity
Not Before: Jul 25 08:03:46 2026 GMT
Not After : Aug 1 08:03:46 2026 GMT
Subject: CN=6a646de2-4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:ff:38:6b:23:ca:75:c5:46:17:00:17:91:
f7:ec:00:85:f8:71:c3:0b:36:6f:96:5d:61:9f:5d:
2e:00:a0:d1:5f:af:8d:e2:45:1e:df:fa:31:7d:79:
4e:3c:c1:93:82:14:1b:ec:d8:ad:3e:d6:ba:bb:19:
a9:f7:f2:b5:ec:9b:32:b4:2e:e8:3b:c9:d4:1e:c1:
c6:b0:90:d0:58:a9:66:76:2c:b9:59:e3:b1:7f:75:
6e:5a:c9:29:a9:56:10:b4:0f:4e:75:14:6f:17:e2:
01:61:90:4d:0d:23:1a:1d:cf:0b:8b:0e:7e:de:a4:
c9:24:ca:24:ac:a5:08:6b:07:c8:3b:ff:36:f8:72:
b6:db:3b:09:57:16:ab:1a:c6:ae:48:12:2f:fd:a7:
0a:38:56:70:81:ea:85:1f:54:da:bd:07:95:8b:10:
1c:25:26:c7:9b:6b:fb:e4:8f:0a:b3:92:e7:77:63:
41:fb:37:e5:ee:72:eb:36:cf:75:15:d9:09:0c:28:
99:07:f7:f0:ae:27:f3:ce:e8:67:af:43:ea:39:69:
40:9d:fb:15:2f:65:a2:f6:db:60:04:74:cf:a5:ab:
d9:ff:b1:6a:e6:38:a4:67:19:e1:12:4d:86:a4:43:
be:e2:9a:d5:30:be:35:ce:f3:19:15:d4:cc:99:4b:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:97:99:54:1B:9D:6E:1E:00:B7:B3:1E:AC:7C:ED:B8:BC:21:D8
X509v3 Authority Key Identifier:
keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:91:d4:58:69:a0:0d:de:07:aa:9c:dc:23:f9:75:72:5d:
fc:9a:47:be:f8:9e:00:ae:d6:1f:5b:0a:d9:ca:ec:0e:33:76:
d3:d3:fb:64:02:1b:3e:7b:a2:66:ff:fb:e8:51:81:31:88:e3:
7a:8e:2f:f1:f1:02:2b:d5:56:c4:7a:f0:8a:54:96:4a:32:f7:
40:72:ef:ac:1f:8d:8f:3b:ca:55:9b:ea:3e:ca:09:02:e6:aa:
c2:68:ec:52:b0:b9:39:cf:13:21:9b:4e:57:a1:fb:29:63:db:
79:8a:68:b4:07:2a:3b:e5:6f:3f:4b:87:de:e2:35:d5:04:fd:
2a:0c:12:f1:d5:a6:ac:61:12:50:cd:15:09:98:34:77:f7:7d:
12:e2:e8:ca:3e:90:cc:ef:8e:b7:b0:01:93:b7:45:95:85:2c:
88:86:fc:08:e3:70:2b:29:27:4b:61:eb:ff:7b:e1:ec:67:60:
9e:f7:65:ec:4d:79:ac:ae:c2:d9:e7:2b:b5:a7:ab:b1:f2:db:
4a:cc:09:83:59:f7:43:b1:63:35:e3:fa:74:73:59:27:bb:8f:
d7:a1:32:7d:4f:d7:4b:8a:06:d1:1c:50:a2:05:82:51:14:d3:
bb:b0:55:6e:f9:66:43:0d:eb:05:bb:ce:ee:0a:46:da:15:23:
2e:a7:ba:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDRDMxMTAvBgNVBAUTKDY5RkU5NzNCN0VFQkVCMEZGODlCMjlCOUNCNUJFQkFC
RDBFMzFENkIwHhcNMjYwNzI1MDgwMzQ2WhcNMjYwODAxMDgwMzQ2WjAYMRYwFAYD
VQQDEw02YTY0NmRlMi00MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQb/OGsjynXFRhcAF5H37ACF+HHDCzZvll1hn10uAKDRX6+N4kUe3/oxfXlO
PMGTghQb7NitPta6uxmp9/K17JsytC7oO8nUHsHGsJDQWKlmdiy5WeOxf3VuWskp
qVYQtA9OdRRvF+IBYZBNDSMaHc8Liw5+3qTJJMokrKUIawfIO/82+HK22zsJVxar
GsauSBIv/acKOFZwgeqFH1TavQeVixAcJSbHm2v75I8Ks5Lnd2NB+zfl7nLrNs91
FdkJDCiZB/fwrifzzuhnr0PqOWlAnfsVL2Wi9ttgBHTPpavZ/7Fq5jikZxnhEk2G
pEO+4prVML41zvMZFdTMmUsVxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5il5lU
G51uHgC3sx6sfO24vCHYMB8GA1UdIwQYMBaAFGn+lzt+6+sP+Jspuctb66vQ4x1r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENEMy9GMEE2NUMzRTFC
NjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3XzRteW01eTF2cnE5RGpI
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NENEMy9GMEE2NUMzRTFCNjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3
XzRteW01eTF2cnE5RGpIV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgB6R1FhpoA3eB6qc3CP5dXJd/JpHvvieAK7WH1sK2crsDjN209P7ZAIbPnui
Zv/76FGBMYjjeo4v8fECK9VWxHrwilSWSjL3QHLvrB+NjzvKVZvqPsoJAuaqwmjs
UrC5Oc8TIZtOV6H7KWPbeYpotAcqO+VvP0uH3uI11QT9KgwS8dWmrGESUM0VCZg0
d/d9EuLoyj6QzO+Ot7ABk7dFlYUsiIb8CONwKyknS2Hr/3vh7Gdgnvdl7E15rK7C
2ecrtaersfLbSswJg1n3Q7FjNeP6dHNZJ7uP16EyfU/XS4oG0RxQogWCURTTu7BV
bvlmQw3rBbvO7gpG2hUjLqe6pw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:05 2026 by rpki-client