
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File: AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier: aNAdzWGBchnLKKP9TJy42fOmhdM4ZwzXgx5aG4cO23o=
Subject key identifier: D4:51:BC:A9:4D:C4:7B:E4:84:F6:6E:32:81:E2:56:0D:92:FC:7F:2D
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer: /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number: 018B
Signing time: Thu 21 May 2026 04:36:24 +0000
Manifest this update: Thu 21 May 2026 04:36:23 +0000
Manifest next update: Thu 28 May 2026 04:36:23 +0000
Files and hashes: 1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: je/apoo74HkqdC2GmInYDe4SUuXlsdZ9K2b7MKVsKYA=)
2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: gRN+gspECqlTI6rrjpufXp2pLa9m/o4m0OMYkN6xBgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Validity
Not Before: May 21 04:36:23 2026 GMT
Not After : May 28 04:36:23 2026 GMT
Subject: CN=6a0e8bc7-1c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:95:bb:46:88:31:e7:26:fc:66:c5:bf:4b:
bb:df:50:b4:21:36:43:08:24:eb:12:b0:33:c3:f6:
8b:69:8a:fe:3b:dd:fd:94:60:88:cd:51:7e:d4:d9:
85:c1:04:de:ba:d4:7d:48:1c:3c:e3:36:d5:2a:49:
ab:68:28:f8:7c:cb:00:1d:0e:fe:fc:b6:11:e8:53:
eb:ce:79:f4:a9:f9:d9:60:7f:f8:76:a1:5b:ee:1e:
04:bb:50:ea:f1:63:d9:fa:44:2c:73:87:0b:e8:6f:
3c:0e:22:80:f4:ad:b8:26:a4:56:bf:58:7b:02:43:
38:7b:4d:b3:df:5a:00:30:37:1e:07:56:11:1f:46:
15:4f:7e:34:c5:8a:2c:d4:56:1b:90:14:8e:2f:98:
5e:f3:bb:57:15:f9:32:a5:f8:d2:fa:47:1f:57:4b:
90:f3:e0:eb:e1:c5:55:1b:2d:94:93:b9:32:05:84:
c6:c3:f3:48:3b:86:50:fa:2d:58:6f:23:c4:ef:0d:
aa:b6:ff:22:3d:d7:6a:96:56:9f:39:a5:3e:9d:e9:
a5:95:2b:33:0b:31:7b:c0:51:4f:1b:fb:d4:83:c5:
ac:93:ca:70:7a:3b:5d:91:f2:d7:14:ff:53:f2:9f:
ad:e6:2b:e1:07:e0:ee:35:92:4f:2f:1c:d1:ef:de:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:51:BC:A9:4D:C4:7B:E4:84:F6:6E:32:81:E2:56:0D:92:FC:7F:2D
X509v3 Authority Key Identifier:
keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:45:45:b8:32:8d:62:4a:52:18:42:f1:41:6f:dc:0d:58:
f2:11:9e:60:7f:93:9e:9a:2c:aa:f2:e1:3a:fa:e9:e1:35:c2:
5c:31:0b:67:9e:2c:da:a4:02:ea:fc:f9:46:44:d4:8c:72:4f:
36:e6:0e:0e:e9:ce:06:f2:f3:01:ca:1c:ce:27:05:12:27:e0:
d8:ef:57:36:ca:f1:66:5e:35:6a:0d:e1:23:a1:b5:d5:99:16:
72:43:9a:01:22:7f:d4:80:d8:60:fa:08:5f:0d:cc:54:25:8f:
79:1e:53:ed:fd:0b:c9:7c:40:7a:49:8d:4a:18:98:12:ed:62:
45:d6:89:fe:71:1a:cc:a4:10:74:e1:4a:52:f2:d1:7b:19:4d:
82:93:f2:d1:a8:d0:1d:3c:61:fa:ce:b2:d6:a9:ec:77:cd:20:
4b:9b:49:b7:c9:46:1e:91:9d:0e:5d:47:84:ff:75:9d:3b:26:
fd:22:40:48:7c:ec:1d:c6:e8:64:2a:bc:bf:37:73:bc:8e:ac:
3a:cb:7c:36:5f:01:e2:e3:68:f1:74:a1:f8:a2:f6:50:85:50:
a3:28:fb:42:55:ec:d3:25:cc:ce:05:ac:cf:79:27:1a:90:af:
1d:88:05:52:7b:92:a0:42:8d:91:09:bc:09:ef:29:b6:3a:8d:
8c:fd:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:46 2026 by rpki-client