
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File: AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier: hnJA72cSTtc9LENSw0sueVYzHW1BrjPEJ19sNisKL1o=
Subject key identifier: 93:2B:08:B3:7F:ED:D5:11:BD:FE:83:48:4C:F2:33:DB:7D:08:2E:0D
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number: 0304
Signing time: Sat 03 Oct 2026 01:26:36 +0000
Manifest this update: Sat 03 Oct 2026 01:26:35 +0000
Manifest next update: Sat 10 Oct 2026 01:26:35 +0000
Files and hashes: 1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: UFx38LIQrJr7QVMLAOf+gPG5zGv4a6JDceGXvYJerzw=)
2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: WSIfxgjwZNOHCZ6QPzrFG9htwBMGx9uCmGnFB+96CFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Validity
Not Before: Oct 3 01:26:35 2026 GMT
Not After : Oct 10 01:26:35 2026 GMT
Subject: CN=6ac059cb-18f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:4d:86:6c:a6:16:96:8f:2a:13:ea:ed:fc:
a6:bb:cb:fb:b8:79:3b:b3:61:fd:0f:1b:1c:7d:96:
e1:c1:4f:10:25:a3:6e:be:0f:1f:88:71:06:17:b1:
2d:e9:f7:84:65:fd:25:e0:c4:d3:37:76:26:a7:06:
e9:d1:ae:03:8a:0a:f9:80:fd:bb:d4:bc:68:6e:02:
af:30:b7:d6:6f:f5:cd:c1:fd:b8:fc:63:d5:bb:1c:
a3:9f:76:83:cd:39:bc:a6:8b:32:08:15:c3:8d:26:
f4:19:74:88:cf:11:d2:73:97:38:8f:b0:62:1b:8c:
8a:77:15:e7:0a:f0:b0:f2:a8:a2:d0:39:ea:27:f5:
73:e7:a2:80:2b:00:c8:55:d3:66:49:5e:c8:67:50:
9e:df:20:98:8b:17:33:ef:d5:02:1e:c7:f8:61:b4:
38:18:f7:ef:38:e3:89:98:bb:ad:d8:e2:cd:50:59:
2e:a9:97:e7:51:f5:3b:24:6c:a1:a6:54:80:96:78:
34:03:e2:55:7d:94:9b:87:02:d5:76:fc:c4:9e:6d:
5d:99:d1:1f:03:c1:01:e5:8b:9c:08:60:82:19:e3:
6c:0f:2f:c4:99:81:09:d9:c5:82:8c:b3:ef:83:31:
5c:d9:28:54:56:35:c9:48:99:c0:e8:6c:43:20:51:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:08:B3:7F:ED:D5:11:BD:FE:83:48:4C:F2:33:DB:7D:08:2E:0D
X509v3 Authority Key Identifier:
keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ed:c7:98:80:82:ee:d9:44:bb:9e:7e:11:2b:13:f1:e6:e9:
bd:bd:e7:38:c1:72:b8:88:f8:fc:a1:b1:46:14:9b:4c:a8:2c:
1a:da:e6:a8:43:92:0b:a0:77:56:ca:1a:38:2d:5e:db:32:b0:
93:79:84:6a:3f:e1:a1:b9:28:61:5a:a8:b3:5d:45:9a:5f:f0:
da:b6:db:cc:d9:eb:1f:54:be:18:ae:06:82:a5:27:28:3f:c5:
a3:68:c6:b9:cc:bc:5e:8c:a4:74:c6:d6:47:de:ba:fd:65:32:
ab:f8:83:11:77:66:dc:1c:ad:29:f0:bc:14:ef:3d:77:57:a5:
0a:fc:00:18:9f:64:85:7d:3c:bc:bd:4f:9a:ef:4a:da:83:c5:
aa:ed:aa:da:f8:a0:7d:03:ec:32:c7:d2:89:03:c2:f2:f0:cf:
ea:ab:2a:9b:6b:2c:20:6f:72:5a:d9:cb:86:eb:f6:3e:86:56:
70:52:29:fa:54:e1:bd:9d:44:dc:3f:ff:63:59:a7:89:bf:a1:
d3:08:be:aa:44:df:ba:f9:96:46:ac:3f:6c:b9:1c:af:75:7b:
93:82:77:77:d1:2d:79:d5:9e:96:25:37:03:2e:18:52:8f:84:
15:7d:00:64:59:86:4e:e7:36:00:18:61:ed:9b:3f:bf:58:e0:
d0:70:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:57:37 2026 by rpki-client