
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json)
Hash identifier: FXGKmRFmVOkNtJwBh+7wsz5JYLRuB3lrgJuZq0mOElE=
Subject key identifier: B7:AD:87:DB:14:A6:41:9E:C1:9F:35:2F:99:C8:C7:F1:77:8E:22:1B
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial: 0D2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
Manifest number: 0D07
Signing time: Sun 26 Jul 2026 18:40:29 +0000
Manifest this update: Sun 26 Jul 2026 18:40:29 +0000
Manifest next update: Sun 02 Aug 2026 18:40:29 +0000
Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: LeRriDGNesZlOx7rtYH7A3oAX14uXiLSd1pXtGBJrs0=)
2: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=)
3: 6D3BA6B0834D11F18EA3856060A30FBC.roa (hash: 02eJd1zQT0JnnntRDHq6rSGX1dpQL3jq24n2qQzP6QM=)
4: 033EB676834D11F193DB325E60A30FBC.roa (hash: JeLY9INIwkxyYjsTV9pQhbhk/f5tgjUgFdxQQau5BR4=)
5: 20F1E6906B8C11F0A612561BC4F9AE02.roa (hash: ZU1zBpAfTGCrjm2xsGHreVQj4RFT5bNxMFoo9IRDAv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3371 (0xd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Validity
Not Before: Jul 26 18:40:29 2026 GMT
Not After : Aug 2 18:40:29 2026 GMT
Subject: CN=6a66549d-f6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:5f:04:d7:ea:15:5d:b2:7f:4f:32:af:19:
9c:2d:53:fc:7e:0e:22:13:b5:e6:ed:b7:9e:ff:ae:
44:c6:64:d9:45:04:bb:0d:2e:13:3c:db:46:c3:28:
5a:a2:da:e9:db:7a:87:71:6f:5b:c2:87:4a:03:66:
2d:79:14:14:d0:ca:4e:03:65:de:a5:db:56:6b:a1:
6b:e2:50:95:0a:2a:a3:3a:3c:3e:fc:e4:1c:03:4c:
7f:06:5d:bd:16:32:d0:63:22:07:92:88:b0:21:36:
de:e4:47:6a:f5:b1:84:34:c4:5b:19:72:84:d0:66:
15:67:33:31:a9:e3:b7:fc:f0:ba:db:72:76:c1:c0:
f4:1b:b9:a2:7c:59:2b:f8:6c:3b:5a:91:a5:71:11:
7b:2b:07:25:df:e6:73:c8:82:92:c4:3b:01:49:56:
f1:60:c3:b6:8c:b2:39:fc:f7:a7:d1:72:2e:2a:1c:
0d:ea:2d:c2:3b:7c:fc:4c:3a:50:fb:8c:f8:7c:7c:
5b:d5:71:5d:5e:5e:59:d4:8d:bf:f5:d7:63:fa:a7:
72:aa:31:40:78:98:de:ea:dc:a4:02:31:44:29:fb:
49:6e:0b:d4:fb:c7:5f:66:64:b4:4b:47:2b:28:d5:
3c:1b:84:12:34:0b:8f:db:a8:ca:a3:81:89:ce:23:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:87:DB:14:A6:41:9E:C1:9F:35:2F:99:C8:C7:F1:77:8E:22:1B
X509v3 Authority Key Identifier:
keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:93:ff:c8:f6:0a:46:ac:1c:9f:ae:15:b5:35:e0:86:09:eb:
26:c8:51:04:6e:4d:14:f7:32:17:40:e2:cb:24:01:82:7e:30:
0e:f0:39:21:27:f4:7c:e7:3e:c9:4b:db:20:9b:51:71:f5:0d:
3f:87:01:2f:6c:e6:9a:30:2c:7f:4e:8e:3a:2e:4c:bd:29:a7:
18:71:68:76:65:52:1d:0c:7d:aa:9c:b8:86:0b:ab:5e:e1:bf:
df:8d:70:c3:8e:cb:e4:94:3c:6d:b6:1b:7c:ae:f6:b0:7b:f7:
c6:bb:85:46:16:b0:c5:f8:7b:13:e5:51:67:a9:9c:24:42:16:
4b:ed:a5:4d:bb:99:28:4b:cc:96:8f:a6:af:73:aa:19:3d:5d:
99:6d:85:4d:05:be:19:13:8d:c8:6f:ce:bb:d5:f6:63:94:81:
24:76:e2:65:ae:53:72:4d:d7:2a:88:7a:13:64:a2:a0:aa:34:
72:21:33:13:ed:0b:a9:ff:17:1f:9b:e3:67:ee:4a:7b:f0:d7:
92:01:06:78:11:ec:59:83:a1:ba:72:62:ab:35:5e:72:0a:70:
ef:87:a0:fb:a5:13:34:97:07:1d:a3:d8:84:a9:3c:8c:2e:d3:
0e:56:34:69:cd:a8:0b:c7:1e:5e:38:18:18:ab:49:da:fa:1f:
b6:ce:ef:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx
QTZBREIwNUIwHhcNMjYwNzI2MTg0MDI5WhcNMjYwODAyMTg0MDI5WjAYMRYwFAYD
VQQDEw02YTY2NTQ5ZC1mNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurhfBNfqFV2yf08yrxmcLVP8fg4iE7Xm7bee/65ExmTZRQS7DS4TPNtGwyha
otrp23qHcW9bwodKA2YteRQU0MpOA2XepdtWa6Fr4lCVCiqjOjw+/OQcA0x/Bl29
FjLQYyIHkoiwITbe5Edq9bGENMRbGXKE0GYVZzMxqeO3/PC623J2wcD0G7mifFkr
+Gw7WpGlcRF7Kwcl3+ZzyIKSxDsBSVbxYMO2jLI5/Pen0XIuKhwN6i3CO3z8TDpQ
+4z4fHxb1XFdXl5Z1I2/9ddj+qdyqjFAeJje6tykAjFEKftJbgvU+8dfZmS0S0cr
KNU8G4QSNAuP26jKo4GJziMCqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeth9sU
pkGewZ81L5nIx/F3jiIbMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD
MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw
V0hRLWh0UEkwR0VhYXRzRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATZP/yPYKRqwcn64VtTXghgnrJshRBG5NFPcyF0DiyyQBgn4wDvA5ISf0fOc+
yUvbIJtRcfUNP4cBL2zmmjAsf06OOi5MvSmnGHFodmVSHQx9qpy4hgurXuG/341w
w47L5JQ8bbYbfK72sHv3xruFRhawxfh7E+VRZ6mcJEIWS+2lTbuZKEvMlo+mr3Oq
GT1dmW2FTQW+GRONyG/Ou9X2Y5SBJHbiZa5Tck3XKoh6E2SioKo0ciEzE+0Lqf8X
H5vjZ+5Ke/DXkgEGeBHsWYOhunJiqzVecgpw74eg+6UTNJcHHaPYhKk8jC7TDlY0
ac2oC8ceXjgYGKtJ2vofts7vdg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 06:52:36 2026 by rpki-client