
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier: l1ZbmKHvQ8FBHPv/nGXc99fl7sRsdH9e+HVR0nnuGts=
Subject key identifier: 62:B3:FC:B5:93:BA:60:24:D6:F2:4E:A0:B4:14:20:B5:A1:FA:50:13
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number: 01F7
Signing time: Sun 21 Jun 2026 03:28:35 +0000
Manifest this update: Sun 21 Jun 2026 03:28:35 +0000
Manifest next update: Sun 28 Jun 2026 03:28:35 +0000
Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: wtdRoBzrASC13jFrjsl1/Qcs8cEdpFlvXZkG60wuyv4=)
2: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: hHCyyzGsEC8V5KG9Wg3TJOVPDzSEhYHLIpTWQTIziHs=)
3: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: NrIYNnpiRgoM0pEu2ChgWZkIBgkpnd90Qm1TMb1PFZI=)
4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: I40Mjxu1ZcWd2eWAmdNiVDMFDrp/6Wro4hhomYDrrYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 03:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jun 21 03:28:35 2026 GMT
Not After : Jun 28 03:28:35 2026 GMT
Subject: CN=6a375a63-b2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:4f:f9:df:d3:a8:e0:2a:7a:6e:07:1b:3f:
5c:92:25:58:9d:83:01:16:b8:c3:8e:35:d0:66:b0:
f2:73:64:76:c1:14:df:36:4a:4c:1b:41:c6:8a:8c:
c0:f7:e1:d7:d9:a9:75:ab:e1:90:52:e6:12:c0:db:
d0:4d:b9:8c:e4:5d:8e:67:55:01:09:d7:0d:24:37:
6e:b0:9a:d7:44:3b:61:9a:31:49:a8:db:ab:6a:89:
74:c5:d9:89:e9:cb:d6:3c:19:fa:81:35:fb:82:01:
c5:43:58:40:5d:13:15:d8:c9:46:30:96:f9:29:eb:
96:29:c1:7f:c1:ec:ea:10:de:74:9a:3b:de:eb:f5:
cd:9f:56:b7:4b:6e:6a:7b:00:7d:89:75:e2:af:6e:
71:11:3f:99:7e:48:ad:60:3b:52:36:70:73:d4:44:
5a:c3:c1:2e:d6:f9:c5:fa:c8:9e:a5:a9:d3:e8:91:
e0:60:a9:e3:b4:f9:a8:4b:97:7c:14:b0:9d:8f:f9:
13:df:44:71:17:c7:97:c6:04:a1:73:d8:42:17:69:
78:23:e8:a9:eb:82:03:c4:8c:cc:5e:c4:9d:34:e8:
3f:57:d9:ac:b0:b7:39:f9:27:70:fa:d0:c8:a9:f9:
3a:60:8f:f1:74:04:05:bf:ec:fa:25:b3:d3:9f:54:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B3:FC:B5:93:BA:60:24:D6:F2:4E:A0:B4:14:20:B5:A1:FA:50:13
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:11:ce:82:0e:de:5e:23:18:47:5f:36:e8:a3:58:fd:48:
a2:a2:3d:1b:97:ea:e5:81:03:51:93:f5:53:5d:c3:de:9d:0f:
78:6d:79:5e:0e:29:a3:3f:34:c1:72:3f:d0:51:dd:89:80:07:
54:78:e8:46:d8:ab:08:9d:1b:91:56:ba:5b:f3:b5:3c:ff:11:
a2:e5:fc:fc:88:cc:ee:fe:cc:7f:ed:25:3e:fc:f0:20:db:c5:
e7:f8:8e:bb:2b:8c:ea:60:e9:27:a6:bc:9a:c1:09:9e:b2:96:
06:ec:3b:f9:d3:f0:e5:fe:24:35:c6:88:a8:f9:4c:92:b7:62:
f7:4f:ee:ce:43:d2:a7:8b:29:d3:3b:09:c5:0f:ca:bf:23:47:
00:a2:83:90:b1:27:97:3e:6d:e0:95:06:a3:55:d2:97:5b:99:
f4:fd:3f:42:c7:c2:96:31:f2:cc:63:6d:4c:af:cb:d3:1f:78:
66:7a:06:f6:30:e4:c9:96:4b:c7:fa:cb:3d:b1:7d:2e:e2:e9:
79:51:b5:b7:b4:5c:75:ec:e9:63:2c:5f:24:4d:f1:63:ef:96:
ec:9e:8f:f6:2c:1a:7a:e7:1c:8b:d8:6e:fd:c2:44:f7:02:9f:
7a:55:db:46:2d:1f:f8:34:e6:5f:65:0b:5b:47:86:aa:39:d5:
ae:b3:90:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5
MDJGMERFOEIwHhcNMjYwNjIxMDMyODM1WhcNMjYwNjI4MDMyODM1WjAYMRYwFAYD
VQQDEw02YTM3NWE2My1iMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CJP+d/TqOAqem4HGz9ckiVYnYMBFrjDjjXQZrDyc2R2wRTfNkpMG0HGiozA
9+HX2al1q+GQUuYSwNvQTbmM5F2OZ1UBCdcNJDdusJrXRDthmjFJqNuraol0xdmJ
6cvWPBn6gTX7ggHFQ1hAXRMV2MlGMJb5KeuWKcF/wezqEN50mjve6/XNn1a3S25q
ewB9iXXir25xET+ZfkitYDtSNnBz1ERaw8Eu1vnF+siepanT6JHgYKnjtPmoS5d8
FLCdj/kT30RxF8eXxgShc9hCF2l4I+ip64IDxIzMXsSdNOg/V9mssLc5+Sdw+tDI
qfk6YI/xdAQFv+z6JbPTn1RHPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKz/LWT
umAk1vJOoLQUILWh+lATMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4
NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52
UnpKSkJha1lyeVNRTHczb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZssRzoIO3l4jGEdfNuijWP1IoqI9G5fq5YEDUZP1U13D3p0PeG15Xg4poz80
wXI/0FHdiYAHVHjoRtirCJ0bkVa6W/O1PP8RouX8/IjM7v7Mf+0lPvzwINvF5/iO
uyuM6mDpJ6a8msEJnrKWBuw7+dPw5f4kNcaIqPlMkrdi90/uzkPSp4sp0zsJxQ/K
vyNHAKKDkLEnlz5t4JUGo1XSl1uZ9P0/QsfCljHyzGNtTK/L0x94ZnoG9jDkyZZL
x/rLPbF9LuLpeVG1t7RcdezpYyxfJE3xY++W7J6P9iwaeucci9hu/cJE9wKfelXb
Ri0f+DTmX2ULW0eGqjnVrrOQOw==
-----END CERTIFICATE-----
Generated at Mon Jun 22 18:56:43 2026 by rpki-client