
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier: Oqyn+wMlJVlHZaZBgBtYN42BZYf2WeqZ9S/PIEWkwm0=
Subject key identifier: F1:46:9B:73:1F:46:51:41:E1:EE:2A:B9:7D:BE:5C:43:83:87:68:EE
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number: 71
Signing time: Fri 17 Apr 2026 07:40:04 +0000
Manifest this update: Fri 17 Apr 2026 07:40:03 +0000
Manifest next update: Fri 24 Apr 2026 07:40:03 +0000
Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: 5G29J4uH5fXda0SK4mX/y1KHHlbLIyWzeHh91PFG2qw=)
2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: DOrKq68OV6bv6i78b+TQ33vm1VYkB4ogKWrurv8Roro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Validity
Not Before: Apr 17 07:40:03 2026 GMT
Not After : Apr 24 07:40:03 2026 GMT
Subject: CN=69e1e3d3-9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:06:07:14:69:6c:c0:16:42:c5:67:32:d5:
f5:c3:a8:b0:5e:65:e2:1c:07:45:78:cf:15:87:f8:
f5:df:ce:ed:3e:0e:de:3b:32:d3:47:61:74:52:03:
ce:a3:93:a4:14:b7:5e:8a:6c:9d:83:3e:eb:03:37:
e6:11:86:cb:5f:dc:6e:b3:1b:81:9e:4f:ed:ae:12:
e4:35:82:d6:fc:52:96:83:3a:77:ae:18:34:1a:6c:
c2:c8:92:22:3b:f5:b5:d3:fc:60:1b:21:18:ba:87:
36:a8:a5:6a:bb:aa:65:5c:24:c4:08:3b:0f:6e:32:
09:9a:cb:46:a1:69:a4:0a:b8:a6:c1:52:6b:5b:a7:
52:5e:0e:1b:8c:dd:e3:30:8b:e3:c8:94:e8:fa:17:
08:d7:8b:83:70:87:7a:7d:68:2d:d3:f7:00:ea:39:
8c:92:16:13:98:f2:b3:f1:3e:80:a5:ac:4f:bc:b1:
eb:81:a6:b4:5c:b1:3b:10:5b:14:a4:36:0d:60:ae:
38:3c:43:af:48:35:fe:b6:fd:bd:2e:f0:ac:3e:0c:
79:90:05:f6:e6:1a:36:55:e6:7e:62:92:23:ab:cf:
54:af:cc:34:a3:17:68:2c:7b:e0:1d:ed:17:3c:62:
c0:d6:c6:5f:be:84:a3:26:bd:88:23:e8:b6:8a:0e:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:9B:73:1F:46:51:41:E1:EE:2A:B9:7D:BE:5C:43:83:87:68:EE
X509v3 Authority Key Identifier:
keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:df:ab:6b:c4:4f:85:4d:82:8b:8d:e3:21:0c:cb:47:d7:
84:ad:fb:79:81:8b:ba:a2:64:3e:6d:50:ff:4d:e8:4a:46:51:
a2:08:48:33:54:7d:ed:76:ed:ee:19:2f:89:77:f2:de:0d:b5:
dd:6e:2e:0f:9b:b6:e2:41:03:65:05:f7:dd:8c:bc:be:a2:85:
e1:8e:3d:75:3d:96:85:50:99:0d:87:8c:c0:32:02:e7:2b:11:
e0:82:4c:23:59:3d:dd:20:66:d6:82:b0:f9:e3:93:71:c9:d6:
a0:e7:d6:65:d4:d9:5a:cb:57:29:61:0c:cf:51:ad:07:51:06:
c4:d4:76:e8:fe:2a:65:9d:a1:a4:a3:8c:99:ad:4b:ff:27:b0:
58:43:c4:d1:e1:28:08:15:22:85:88:62:53:64:9b:2d:28:70:
d0:f7:82:48:08:ab:8b:10:8a:be:4a:27:ab:5c:54:64:c8:24:
0c:14:84:da:4f:5e:de:46:c8:a7:17:3d:c1:24:d9:d4:69:bb:
71:66:66:72:ad:d2:80:41:18:6c:c2:40:b9:23:4a:fb:af:ab:
f7:07:f6:4f:da:bc:71:f5:98:0c:2b:1f:7a:22:68:aa:f8:d0:
ae:b3:7e:a9:3c:16:86:2a:e0:7a:ec:a3:a4:f2:98:47:91:bb:
bf:39:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client