
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: yqkntYyPT0V9+nj8bjI/9ZGM0ugx566kHOyX4kkx5Bg=
Subject key identifier: F8:92:36:D5:E8:4F:DD:B7:65:75:1C:5B:61:EE:14:5A:73:3E:65:68
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0260
Signing time: Fri 11 Sep 2026 02:13:41 +0000
Manifest this update: Fri 11 Sep 2026 02:13:40 +0000
Manifest next update: Fri 18 Sep 2026 02:13:40 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: ni0iUOS53WmHRlSPc0JEiYVd8oLCFz84KNrEjbfalDI=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Sep 11 02:13:40 2026 GMT
Not After : Sep 18 02:13:40 2026 GMT
Subject: CN=6aa363d4-0ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:6d:58:bc:1e:14:79:66:fb:6a:84:9f:2d:
28:92:60:d9:0b:2f:a9:66:03:a3:ad:85:ca:b8:7b:
49:a3:1f:39:f8:a1:f1:6a:8b:ca:99:7d:b6:e3:3e:
db:fc:7d:19:e7:98:3c:cc:ea:a6:d7:40:c9:e1:3c:
3a:6d:2e:0a:c2:c9:9b:5f:15:4c:88:19:12:dd:b0:
1e:39:ed:8c:48:3e:38:7c:f5:94:a7:0e:3d:09:7a:
40:8d:43:77:39:ca:2d:a6:8a:36:05:2e:c9:6e:4d:
f9:d0:0d:17:90:a1:58:c1:d1:65:17:f5:84:90:b5:
43:ce:13:07:38:9b:8e:3a:b1:f3:b3:a2:58:ae:e9:
cd:f9:6a:e2:f7:04:3d:65:49:0d:24:38:3e:1d:08:
b3:91:bc:d6:13:51:ab:5e:a7:96:47:25:83:ab:20:
2a:ce:5b:7f:96:68:30:9b:da:74:de:05:2b:12:c4:
7c:00:dc:6d:b3:52:ad:30:23:84:bc:20:ec:bb:f0:
43:08:a1:8a:d6:75:14:53:e0:37:7b:d1:71:4e:b3:
dd:57:c6:26:83:ec:db:81:0c:a6:86:c7:fd:e0:2b:
b9:54:79:b8:e0:c0:75:b5:14:5e:dc:07:a0:fa:28:
85:dd:12:91:a0:1d:e3:09:9b:7f:9f:18:0a:57:e3:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:36:D5:E8:4F:DD:B7:65:75:1C:5B:61:EE:14:5A:73:3E:65:68
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:4d:7b:14:97:0e:0f:51:76:3e:3d:97:38:b5:37:71:06:
c8:63:15:12:14:a0:75:33:72:e4:a3:41:b9:e9:79:dd:c5:63:
52:c6:17:0a:2e:97:ef:34:9e:44:87:6c:4c:24:33:23:28:f8:
45:48:50:97:43:cb:b3:ce:9e:35:ad:a7:13:9a:ba:53:f9:1b:
ed:ab:2f:13:4b:d7:7b:47:9a:9f:cc:e7:2a:1d:28:4e:ab:c4:
47:82:21:bb:fe:d8:10:39:68:7b:20:4e:02:e3:ed:f8:1e:59:
10:85:eb:2a:d8:79:d0:06:aa:1b:a1:c5:bf:87:f1:a5:b8:e5:
57:3e:25:56:7d:bc:a4:a7:88:04:d1:08:f7:19:65:aa:e7:ab:
c2:dd:dc:10:d1:64:5a:6f:f8:a8:66:40:70:30:8d:8c:29:e0:
59:68:07:15:53:4e:b5:4d:9d:79:04:bd:b9:ca:2e:ce:9c:8e:
1b:3c:b6:b6:59:11:3f:95:17:53:22:98:91:ae:7d:62:8c:f9:
28:f0:31:46:ed:e4:d5:49:e4:87:0c:d6:c5:a0:e6:ae:a5:87:
d9:8e:b1:65:43:c2:8a:5e:96:96:d8:e1:81:77:3d:0c:b6:65:
2b:75:ce:c6:5b:43:2d:66:c6:62:64:84:2a:08:b0:14:35:d0:
e8:2b:01:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG
ODBFNTJGREYwHhcNMjYwOTExMDIxMzQwWhcNMjYwOTE4MDIxMzQwWjAYMRYwFAYD
VQQDEw02YWEzNjNkNC0wZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjbhtWLweFHlm+2qEny0okmDZCy+pZgOjrYXKuHtJox85+KHxaovKmX224z7b
/H0Z55g8zOqm10DJ4Tw6bS4KwsmbXxVMiBkS3bAeOe2MSD44fPWUpw49CXpAjUN3
Ocotpoo2BS7Jbk350A0XkKFYwdFlF/WEkLVDzhMHOJuOOrHzs6JYrunN+Wri9wQ9
ZUkNJDg+HQizkbzWE1GrXqeWRyWDqyAqzlt/lmgwm9p03gUrEsR8ANxts1KtMCOE
vCDsu/BDCKGK1nUUU+A3e9FxTrPdV8Ymg+zbgQymhsf94Cu5VHm44MB1tRRe3Aeg
+iiF3RKRoB3jCZt/nxgKV+MVeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiSNtXo
T923ZXUcW2HuFFpzPmVoMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB
QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o
TDNVak5uTG9yR2Y0RGxMOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVHZNexSXDg9Rdj49lzi1N3EGyGMVEhSgdTNy5KNBuel53cVjUsYXCi6X7zSe
RIdsTCQzIyj4RUhQl0PLs86eNa2nE5q6U/kb7asvE0vXe0ean8znKh0oTqvER4Ih
u/7YEDloeyBOAuPt+B5ZEIXrKth50AaqG6HFv4fxpbjlVz4lVn28pKeIBNEI9xll
querwt3cENFkWm/4qGZAcDCNjCngWWgHFVNOtU2deQS9ucouzpyOGzy2tlkRP5UX
UyKYka59Yoz5KPAxRu3k1UnkhwzWxaDmrqWH2Y6xZUPCil6WltjhgXc9DLZlK3XO
xltDLWbGYmSEKgiwFDXQ6CsBUw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:29 2026 by rpki-client