
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier: If9sMuNhtcCmAoWk3KPOx62rk+DwTyANVkh3o6B9jvo=
Subject key identifier: 24:E4:3E:4D:B0:73:86:D5:A6:C0:A3:33:CC:C5:05:9A:B1:A2:96:BA
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0D97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number: 0D66
Signing time: Thu 14 May 2026 18:02:17 +0000
Manifest this update: Thu 14 May 2026 18:02:17 +0000
Manifest next update: Thu 21 May 2026 18:02:17 +0000
Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: njngMhBRtiemFGwYmECXrVKdNVnPwX6OTWwJOBpjE14=)
2: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=)
3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: EzHhVhOcZNg4rGX3+arvWhv7Y1/rtxS40spbE5dRN4w=)
4: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: Bv4I5rq7MBx0s2USNkw1xSvDRiJ8d4Rtj7uOmiuLiRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 18:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3479 (0xd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: May 14 18:02:17 2026 GMT
Not After : May 21 18:02:17 2026 GMT
Subject: CN=6a060e29-9eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:4d:5d:8b:34:e5:ca:db:97:75:51:75:fe:
1c:78:54:dc:68:ac:db:ae:a4:b1:d2:c3:bb:c5:9e:
83:eb:be:46:80:2b:fb:d6:08:75:df:93:dc:41:c4:
1b:a5:7e:7e:53:b8:c1:2a:d2:97:40:1c:f4:74:61:
8d:d1:d4:1d:5c:68:9a:23:ae:2a:7c:6d:59:29:d8:
88:b6:da:4e:4d:b4:d4:f9:4f:46:6d:42:df:1c:cf:
6d:98:d3:83:3c:a1:89:ac:9b:3c:f1:20:10:0c:64:
a0:13:fa:03:0d:c4:27:74:36:e0:87:bb:c2:be:77:
95:74:62:ef:e2:66:a1:fe:99:81:9c:1c:86:7a:6d:
eb:b3:da:14:7d:4d:fd:33:a7:4d:9d:6c:bc:48:8d:
9b:5b:be:0b:7d:00:b0:90:77:fd:17:34:1e:23:ac:
c0:6f:8b:97:cf:75:22:4e:79:a3:5d:12:c7:32:58:
cd:0c:54:57:51:57:15:fc:04:ab:f8:9d:7f:13:70:
60:bd:36:d8:50:b4:11:5b:31:96:d6:f9:0e:42:17:
86:ba:99:52:e6:48:9a:1f:fa:ca:37:44:91:4f:a0:
ef:ea:b4:f1:a5:bd:55:6d:b4:e7:d5:a5:64:85:58:
77:b4:82:c6:05:76:2c:15:9c:b5:af:31:e4:75:44:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:3E:4D:B0:73:86:D5:A6:C0:A3:33:CC:C5:05:9A:B1:A2:96:BA
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:13:85:ad:5f:5a:ba:51:64:15:78:0e:e0:50:90:f1:93:34:
96:59:c9:ed:43:14:44:3e:4d:e2:ff:42:bf:09:c4:2b:bf:02:
31:bb:8b:bc:35:48:a3:cc:4d:de:af:da:48:c0:26:14:1b:73:
44:6a:88:7c:ec:d3:76:ee:fc:82:87:8d:cd:dc:fb:1e:b5:93:
5f:c0:02:57:fd:10:c1:63:e3:8c:bc:ad:00:b7:6c:63:b8:86:
28:a3:a1:a2:76:05:85:91:44:37:9a:a7:19:7c:d3:a4:b6:a1:
a4:03:31:d4:78:a9:13:27:23:6a:ec:27:64:be:7e:96:65:16:
ef:b9:39:62:6e:b3:44:a8:1f:56:5e:fe:a7:49:92:e1:9e:f6:
de:e2:ce:cb:53:e5:70:b2:a3:c0:66:e5:2a:3e:d7:bc:6c:61:
54:fa:4b:0e:38:48:70:9b:64:8f:02:79:da:8d:d0:43:2b:07:
ad:e0:20:e0:e1:90:0f:69:d3:7b:db:cc:03:1c:a5:5c:40:34:
57:4f:79:2c:a4:ae:1c:f0:87:f1:90:15:35:66:a9:de:ac:d2:
04:52:e7:43:b7:c4:41:9b:a5:a6:cb:f1:64:56:06:03:ff:f2:
79:1e:b7:24:20:d9:4a:38:c0:50:44:dc:67:9b:1f:12:8d:d5:
2a:bf:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:46 2026 by rpki-client