
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier: FSakgyUSGSKRDmlE+hsOyWiNmdJq7j58EAB9678tQpw=
Subject key identifier: 0F:63:49:C1:E8:69:EE:58:8E:BA:EE:51:A1:D6:8D:EC:50:48:31:96
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0DB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number: 0D7F
Signing time: Thu 02 Jul 2026 18:08:17 +0000
Manifest this update: Thu 02 Jul 2026 18:08:16 +0000
Manifest next update: Thu 09 Jul 2026 18:08:16 +0000
Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: G/3NXL0iOrvSsoBvh/JBpymrpnORxES7mxPFTJVwc/8=)
2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: Bv4I5rq7MBx0s2USNkw1xSvDRiJ8d4Rtj7uOmiuLiRo=)
3: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=)
4: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: EzHhVhOcZNg4rGX3+arvWhv7Y1/rtxS40spbE5dRN4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 18:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Jul 2 18:08:16 2026 GMT
Not After : Jul 9 18:08:16 2026 GMT
Subject: CN=6a46a911-61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:1f:ed:be:21:84:67:b8:82:58:30:4e:6f:
e0:df:50:2d:20:9c:81:02:da:f0:8f:34:84:a0:11:
a8:14:a1:22:fe:56:bd:64:2c:20:e9:62:a7:24:3c:
da:45:95:61:ee:2a:8e:c0:aa:88:3e:c3:21:89:7c:
bd:bf:a8:e4:2a:8e:99:f2:c6:45:e4:09:27:8e:f4:
a4:15:ff:ad:1d:7b:16:d7:2e:55:6e:2b:d5:dd:3f:
4f:de:dd:aa:1b:d2:00:43:59:60:07:a0:06:ea:0b:
2e:16:66:90:e7:a1:e2:de:4b:da:3d:27:b5:3b:84:
87:f5:e0:12:11:b0:88:87:22:b0:ac:a4:e0:dc:7b:
1c:10:50:fb:6c:89:86:47:51:c0:dc:34:e3:54:29:
fa:be:9d:c6:9d:51:cb:ec:c0:2f:03:14:9e:33:19:
d3:25:fe:32:b2:aa:32:50:1a:2d:5f:9d:c1:9f:96:
f0:d2:9c:f6:ec:2a:bb:c1:5f:02:0e:1d:2a:41:90:
c4:18:27:98:32:99:19:d4:4a:77:f7:9f:a6:a2:cd:
bd:70:ca:69:c3:e9:b7:0f:b8:93:ab:0a:f7:64:26:
35:ec:a9:73:0c:4f:68:1b:9c:4d:04:4c:46:a5:00:
b3:2f:7c:6f:21:7a:61:f8:66:3f:23:98:bc:72:44:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:49:C1:E8:69:EE:58:8E:BA:EE:51:A1:D6:8D:EC:50:48:31:96
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:5a:00:3a:2a:3b:e9:28:1e:de:43:5c:52:81:07:7d:b6:
86:b4:be:1b:bc:1f:e1:f6:e3:f1:ea:64:4e:56:ec:96:3e:1b:
83:57:fa:de:46:89:59:b6:8b:60:58:99:23:59:c2:fb:5e:e2:
cc:89:0c:2f:d3:36:16:17:b7:19:d5:73:94:19:c2:46:fb:e4:
f5:af:ec:2f:49:55:b5:49:33:b9:3f:40:72:de:bb:44:c3:c3:
12:77:4b:c0:19:9d:ff:76:06:46:1b:d6:5d:89:2a:1c:7f:9a:
11:a1:21:fd:e4:82:27:19:46:d5:99:c2:21:e0:f3:5b:0d:4f:
3b:18:f1:ed:d6:4a:ee:6e:3b:a6:59:30:5a:4c:4e:3a:2e:86:
75:c6:f1:41:7e:01:4c:95:37:8a:26:29:ef:02:7f:f2:e1:2b:
1c:1b:c6:a3:24:32:ba:ce:17:64:34:0c:15:ec:c5:f3:d6:49:
1f:7d:61:09:ef:1f:40:36:50:e8:90:3c:6a:f5:99:08:4f:2e:
83:be:a3:dd:e6:8e:e9:fb:aa:98:3c:a0:2e:4c:f3:4a:ca:5e:
c6:2e:b3:7d:35:4f:26:79:7e:e8:fa:01:f3:e4:72:14:a1:96:
b2:80:17:1d:84:84:b0:94:01:58:61:a5:eb:60:3d:bb:dc:ce:
d8:24:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:30:54 2026 by rpki-client