
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier: 6yj9ZpYbsFl8nbD+lLU/YNGcNBKg906RXVmElzl7hgg=
Subject key identifier: 44:63:91:7F:A2:CE:A7:FC:DB:BA:91:1A:53:86:A0:C4:BB:F6:1C:E7
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number: 88
Signing time: Mon 01 Jun 2026 08:27:58 +0000
Manifest this update: Mon 01 Jun 2026 08:27:58 +0000
Manifest next update: Mon 08 Jun 2026 08:27:58 +0000
Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: dEt73/+RNwnZLOlvRVUKY07NfoVs5QLpaGDYh2HhUZo=)
2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: DOrKq68OV6bv6i78b+TQ33vm1VYkB4ogKWrurv8Roro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Validity
Not Before: Jun 1 08:27:58 2026 GMT
Not After : Jun 8 08:27:58 2026 GMT
Subject: CN=6a1d428e-ef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:be:2c:f7:df:13:45:c1:2d:8c:89:b0:85:
0f:7d:ff:02:68:34:71:43:a6:a9:97:40:5b:2e:32:
e1:4e:32:47:0e:c7:67:f5:7d:ce:04:11:b9:7e:c1:
ef:cc:c2:b6:bb:f2:0c:1a:a4:ea:c6:a8:8a:51:e6:
0e:20:2f:11:81:e5:5b:20:b3:9c:56:98:6c:39:5a:
f2:dc:f0:35:bc:c1:82:5b:86:8b:db:42:b0:c4:84:
53:0a:48:b7:be:bd:d6:bb:7d:d4:86:bb:90:28:24:
49:4d:48:cf:e2:36:1d:3c:f2:11:b3:49:e6:d0:89:
33:65:4e:9c:78:33:a1:cd:dd:2d:d2:2e:89:7e:20:
f8:c9:14:02:67:c1:56:75:27:b5:d1:d8:19:e4:5e:
73:f2:b7:d3:9b:d7:49:98:d4:66:83:98:46:56:4c:
67:7c:f4:b8:d2:db:49:ec:92:c1:84:85:97:45:ee:
57:bd:e2:d7:f5:55:12:6c:ec:68:e9:6e:7e:d0:0c:
26:42:93:be:3c:45:1f:6f:a0:92:a3:6a:8a:24:dc:
d5:17:6b:2d:8d:a7:12:93:a2:51:95:ea:8b:38:2d:
93:9e:ad:64:53:9b:7c:5b:1b:01:46:5f:ab:80:e1:
0e:99:b8:75:6c:84:85:97:58:ec:4b:eb:3a:41:a4:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:91:7F:A2:CE:A7:FC:DB:BA:91:1A:53:86:A0:C4:BB:F6:1C:E7
X509v3 Authority Key Identifier:
keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:e6:ad:c2:f7:e3:4a:66:67:3f:68:90:c3:bc:2e:00:ad:
5b:76:a4:29:ce:ca:2a:b4:38:36:58:29:5a:da:58:71:cf:bd:
04:70:8a:0d:64:d0:14:da:8a:10:ec:6f:18:3f:d3:5a:aa:ed:
0a:1e:49:9e:63:e5:eb:1b:72:4f:20:37:92:28:39:a7:2b:11:
a1:bb:2e:59:5f:a9:b5:29:d3:a0:b4:78:c1:18:0d:50:fa:98:
62:d4:8d:30:3f:43:85:de:71:b3:4a:ff:03:eb:29:6a:2c:7b:
13:fa:7f:38:25:ea:3b:94:2b:b0:d3:9e:b3:03:fe:da:b6:68:
32:9e:21:41:e2:09:eb:47:1f:24:57:a1:9f:2f:52:fc:86:96:
5c:f6:a8:43:fe:89:e8:96:27:a9:e1:3b:9d:36:a7:16:1f:9f:
7f:3f:d8:39:df:fb:b3:d6:e5:fd:80:ee:ca:76:11:bb:11:91:
10:67:0a:fe:44:d2:68:ae:1b:d3:fd:fd:87:3e:eb:07:be:51:
78:03:e4:b4:7f:58:02:0e:ec:d0:e1:f9:32:8f:97:2e:89:69:
dd:d5:6d:d1:ed:39:ae:fb:46:4f:f3:65:5a:19:06:73:e5:b0:
74:97:5a:77:b7:ac:de:37:98:ac:c8:63:c7:7a:44:d9:fc:2c:
79:58:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:26:04 2026 by rpki-client