
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier: hHSNsez7ovADEs/JDPUWXrzJk40rApNoKycmJiuObAg=
Subject key identifier: 74:A4:46:35:18:AB:F4:83:D0:76:5C:19:02:EE:83:7B:C1:47:D3:22
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial: 0893
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number: 0888
Signing time: Mon 31 Aug 2026 20:42:48 +0000
Manifest this update: Mon 31 Aug 2026 20:42:48 +0000
Manifest next update: Mon 07 Sep 2026 20:42:48 +0000
Files and hashes: 1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: 37qRUI4ByEjo8ecUN+yqQEeajc176HUjF4Mwn5ziUlI=)
2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: OMJTHEhRKbysqVwaCH/CrR6Pj2ikKlgHxMDDmRLDUbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 20:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Validity
Not Before: Aug 31 20:42:48 2026 GMT
Not After : Sep 7 20:42:48 2026 GMT
Subject: CN=6a95e748-88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:2c:de:13:53:3e:5b:99:b8:52:ed:9a:c6:
6b:a8:fe:4d:be:41:1c:6a:a8:89:fc:ae:2c:b0:e4:
af:da:a4:a4:05:fe:49:09:d0:7b:2a:15:cb:aa:96:
7c:70:1c:3f:c1:07:92:41:5f:62:07:bf:99:68:a9:
d2:be:f3:9a:ac:d6:df:f2:7c:b6:9f:61:05:d3:df:
60:47:18:81:7d:80:64:7e:82:98:1e:39:a4:d1:41:
58:52:40:d7:5b:55:9a:16:66:53:16:eb:39:19:0f:
13:a4:84:95:3f:fa:d8:4d:49:56:27:51:6e:21:b1:
f0:88:4c:4f:d1:51:8e:ef:e9:9a:de:00:02:1f:7d:
3d:7c:28:e2:f2:9f:aa:08:b3:95:bb:2b:8c:b3:e2:
9c:0c:af:b1:bc:97:e6:b7:d5:81:b6:e3:26:62:a2:
f1:fe:b2:40:9b:fb:28:69:16:9c:9c:1e:73:02:f2:
58:83:ad:b5:97:93:cf:53:49:5d:2f:90:52:db:85:
f7:fd:8c:56:9a:60:52:5d:eb:5f:16:16:0b:fc:38:
e3:97:d7:fb:79:42:76:5f:14:53:ae:80:36:d8:5a:
ef:41:69:39:fe:02:32:16:26:a4:ac:0f:cf:a3:e0:
3a:ba:d0:e0:6e:4d:fa:f6:99:b8:7a:e1:d0:69:b2:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:46:35:18:AB:F4:83:D0:76:5C:19:02:EE:83:7B:C1:47:D3:22
X509v3 Authority Key Identifier:
keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:e8:4d:7a:3b:d3:26:68:3c:17:5e:83:f9:0d:73:37:90:
01:c1:36:26:ca:ff:5c:db:ac:0e:4a:2e:76:d9:95:b4:34:5a:
2c:fa:13:14:0a:79:54:85:5e:95:92:1d:15:09:96:b9:b8:ea:
09:be:73:f5:56:5a:05:b4:da:97:e0:d7:97:52:ac:c1:61:07:
19:7c:b7:19:d2:1a:cd:52:8b:08:95:4d:65:f7:42:e5:50:0d:
e5:0b:1e:80:70:58:12:35:41:25:93:14:7b:81:cb:d1:1e:58:
b4:97:cd:ac:91:80:73:f9:33:b0:5c:1d:df:70:b2:20:f5:6e:
4e:31:db:46:c8:28:5c:91:cc:69:0a:86:03:7d:fb:33:a1:e5:
49:ee:82:5f:d3:da:3d:93:ae:15:86:5f:10:0e:c7:7c:38:66:
d6:96:b8:6f:ab:e3:e8:34:6e:17:7a:f3:60:43:b3:66:64:2e:
57:09:25:a1:47:ff:ba:22:bf:2f:aa:28:b6:40:e2:7c:3b:32:
dd:19:40:3a:85:69:05:a6:83:c0:f2:94:ad:c8:ca:10:56:c6:
ea:6e:e0:f9:72:e0:9f:5a:08:30:5c:ea:7e:61:e3:a8:b3:60:
40:86:be:fd:51:89:a8:9d:79:4e:c4:73:62:23:48:90:cb:61:
d7:4f:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:58:57 2026 by rpki-client