
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier: PMnFB8D+z461pRY82DaEJtTMsjaH9t2ppYyjyo08zMo=
Subject key identifier: A7:6D:68:B8:FF:AC:E9:9E:C1:A6:0A:8D:B8:80:DF:0D:72:7C:9F:C4
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number: A8
Signing time: Wed 11 Mar 2026 06:02:17 +0000
Manifest this update: Wed 11 Mar 2026 06:02:16 +0000
Manifest next update: Wed 18 Mar 2026 06:02:16 +0000
Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: 1QmRqvC/9MIESm+sp7/Xe4HOkFJPx4Ah3Tftfv17UuY=)
2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: QZXloWUQ7ddz+/KBWMrxv7U+rSs8GnWshPY4O7WqH3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 06:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Validity
Not Before: Mar 11 06:02:16 2026 GMT
Not After : Mar 18 06:02:16 2026 GMT
Subject: CN=69b10569-f747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:d1:27:f1:50:f2:3a:de:68:68:ee:5b:0b:
80:23:63:a5:d4:3d:40:4c:15:ed:53:e8:48:73:07:
f8:c6:b9:97:9d:65:a9:b0:ff:1a:03:1f:7d:f5:0c:
a7:cf:46:56:e4:0c:eb:31:59:b4:4c:e7:23:f5:11:
de:e1:b2:74:8e:2d:05:49:95:eb:92:3f:16:59:e9:
c6:96:f9:77:26:2c:9b:e4:c1:7c:79:60:05:05:20:
7a:3b:60:a6:57:c8:62:3b:3d:a7:cf:a6:27:ff:45:
af:41:3b:18:62:f4:59:2a:f3:6f:c8:e5:38:25:c6:
cf:52:5f:8c:8f:2f:8f:96:9e:a9:a9:92:ab:25:2c:
02:eb:c0:2f:c0:fc:56:16:b4:e8:88:05:fb:38:e5:
7c:e8:7a:48:39:2a:6f:0b:54:3d:96:48:6a:81:2f:
df:75:b4:09:61:d4:da:08:1f:a9:56:41:f9:37:b2:
01:41:1c:8b:ac:f4:3a:a5:f3:5c:d3:28:05:5a:21:
a0:0b:bf:60:93:08:bd:75:9c:e1:6c:90:5b:ca:29:
e2:76:df:d5:7b:37:c3:e5:7e:ca:a6:f1:f9:63:55:
46:c8:a8:fb:b9:50:62:16:f0:56:b1:2a:68:ce:56:
e4:9f:fa:ea:f7:e9:4f:e4:71:68:17:b3:e8:c4:2a:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:68:B8:FF:AC:E9:9E:C1:A6:0A:8D:B8:80:DF:0D:72:7C:9F:C4
X509v3 Authority Key Identifier:
keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:df:1c:8f:30:95:e9:6e:c7:57:bd:45:c2:fe:36:ed:dd:
8e:77:20:a3:61:72:54:28:09:1c:87:da:be:8c:b9:20:92:c5:
b4:cc:49:20:71:f9:53:cd:72:ad:0f:a3:e9:5a:ea:d9:2c:70:
0d:e5:f4:de:ad:75:f6:9d:ed:58:00:f1:3d:a2:26:29:79:e9:
f0:16:23:ef:35:31:a1:60:c6:e4:29:74:0d:39:42:fa:36:7d:
a9:b9:09:76:e4:ee:47:54:5a:76:48:b0:61:98:0a:26:e7:21:
06:f7:5c:bf:de:1e:85:45:6a:60:f0:d9:e5:43:70:23:86:91:
6c:11:8b:9a:67:2a:95:2f:01:6f:8b:64:58:d6:a1:ff:6f:a6:
21:79:8f:4a:58:b2:38:7a:1f:28:92:b4:59:27:c0:31:28:6c:
d6:69:eb:fb:7b:9a:88:6d:f1:61:b6:37:9b:2c:08:5e:08:1a:
a0:bc:6d:27:e1:6c:e1:ef:48:b6:e2:b4:5b:6f:52:8a:bf:ab:
59:db:c5:94:42:4d:6e:32:68:fc:a1:70:1b:82:e0:91:02:d5:
03:2f:6c:a8:ae:fd:e9:c4:48:57:ce:b1:c0:a4:a2:c2:d5:29:
c8:94:ba:46:a6:f2:86:fa:f5:d5:01:36:0a:2f:c0:59:85:fd:
1a:40:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:22 2026 by rpki-client