
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier: GTtselQn3m8JtkItj9hk93zGkYyfJHgyvS1/w/jRCRE=
Subject key identifier: 1D:2C:D1:EF:78:68:F8:E2:27:A0:35:0C:D1:A4:66:E0:7D:D4:3A:3C
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial: 24D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number: 24BE
Signing time: Mon 24 Aug 2026 15:44:12 +0000
Manifest this update: Mon 24 Aug 2026 15:44:12 +0000
Manifest next update: Mon 31 Aug 2026 15:44:12 +0000
Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: DbggXErKc7kpPGWBghHimRm1lyWafnLw6KuGjYWaZtU=)
2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: QCiOK4+KmOrUy5xMwngOwn99titohfwS/g83Zrx37lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9431 (0x24d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Validity
Not Before: Aug 24 15:44:12 2026 GMT
Not After : Aug 31 15:44:12 2026 GMT
Subject: CN=6a8c66cc-b636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:75:a0:d4:16:33:4e:95:24:a3:7d:b3:a2:
4a:90:4f:80:b1:fc:cc:21:ea:fa:9b:3d:58:19:bb:
9e:d3:2b:d6:f2:9a:73:a4:d7:0e:c8:99:03:e0:42:
d9:aa:cc:af:50:09:6f:77:eb:fb:7b:32:75:cb:c4:
57:cb:98:90:44:e4:bd:33:20:d9:f6:66:66:28:a3:
93:c2:49:c9:ce:31:6e:4c:7c:13:4d:1f:22:ec:cf:
35:7b:a1:26:3f:66:46:60:33:23:eb:e9:b9:43:b8:
14:ec:36:6a:96:67:dd:5c:bb:a5:57:21:b8:06:9f:
fa:4d:66:d9:48:08:da:26:96:0c:10:68:77:02:78:
dd:f1:d4:ec:f2:cd:71:91:db:28:c4:00:b9:cb:b9:
91:cd:95:27:fb:02:fb:f0:44:44:d8:d5:70:65:d2:
90:15:5e:9e:f6:97:02:b9:2d:7d:35:b2:5c:8e:3b:
1b:c3:bf:bb:4a:1d:7a:dd:ff:6b:c3:66:89:6e:db:
b5:38:1e:4c:e2:b2:8f:5b:c1:34:bb:2b:f4:01:36:
2a:46:f4:63:ee:29:4c:63:88:8e:a9:f3:fe:11:69:
f7:c6:5c:86:8f:05:4e:3d:3a:30:39:da:8a:b3:b6:
28:c2:80:97:a9:fa:44:d9:6c:4a:7c:30:bf:de:0a:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:D1:EF:78:68:F8:E2:27:A0:35:0C:D1:A4:66:E0:7D:D4:3A:3C
X509v3 Authority Key Identifier:
keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:99:a3:a0:66:28:34:5f:d6:e8:23:a2:d1:f8:0b:53:7f:
b3:0c:1d:6d:31:88:70:e8:ad:83:21:1a:de:aa:b8:7b:1f:45:
86:ef:68:ef:1b:4c:f0:84:de:80:6e:da:ed:a3:fb:7c:93:f8:
ee:f3:a7:d1:6a:39:58:d7:2f:fd:d8:79:87:94:0a:05:bb:89:
52:2b:df:07:b2:cd:a5:ee:09:ea:d5:b4:51:97:d5:8e:c2:f2:
f3:48:d7:b5:b0:ce:db:5d:02:f3:b3:6d:64:04:0f:67:88:89:
da:b0:24:8e:f0:05:f9:1d:4e:bc:c0:be:2c:4a:eb:ba:d9:88:
73:8c:7a:62:72:ba:c4:c9:c1:e7:db:0f:61:37:15:37:2e:72:
4f:5a:3d:04:4f:da:65:77:47:7d:a8:48:dc:fd:e2:d0:5f:05:
21:6f:c7:5f:eb:a0:f3:50:fd:e9:47:72:c8:77:ba:5d:28:22:
7f:72:c8:7e:2d:c9:fa:08:a2:c3:65:cd:73:2a:61:77:82:eb:
cf:3a:17:4e:8c:17:8e:d2:00:b4:10:13:45:61:8e:b6:b7:53:
6c:d1:07:2d:2f:67:36:6c:14:47:e4:e2:f9:50:11:e6:94:01:
d4:20:d7:71:13:cd:2b:f4:0f:a7:c4:23:28:a7:15:95:7f:e2:
a4:05:09:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw
RUI5NDQ2OTEwHhcNMjYwODI0MTU0NDEyWhcNMjYwODMxMTU0NDEyWjAYMRYwFAYD
VQQDEw02YThjNjZjYy1iNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1l1oNQWM06VJKN9s6JKkE+AsfzMIer6mz1YGbue0yvW8ppzpNcOyJkD4ELZ
qsyvUAlvd+v7ezJ1y8RXy5iQROS9MyDZ9mZmKKOTwknJzjFuTHwTTR8i7M81e6Em
P2ZGYDMj6+m5Q7gU7DZqlmfdXLulVyG4Bp/6TWbZSAjaJpYMEGh3Anjd8dTs8s1x
kdsoxAC5y7mRzZUn+wL78ERE2NVwZdKQFV6e9pcCuS19NbJcjjsbw7+7Sh163f9r
w2aJbtu1OB5M4rKPW8E0uyv0ATYqRvRj7ilMY4iOqfP+EWn3xlyGjwVOPTowOdqK
s7YowoCXqfpE2WxKfDC/3grsQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0s0e94
aPjiJ6A1DNGkZuB91Do8MB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5
MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ
Y2JlcnptNk5lRElPdVVScEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgv6Zo6BmKDRf1ugjotH4C1N/swwdbTGIcOitgyEa3qq4ex9Fhu9o7xtM8ITe
gG7a7aP7fJP47vOn0Wo5WNcv/dh5h5QKBbuJUivfB7LNpe4J6tW0UZfVjsLy80jX
tbDO210C87NtZAQPZ4iJ2rAkjvAF+R1OvMC+LErrutmIc4x6YnK6xMnB59sPYTcV
Ny5yT1o9BE/aZXdHfahI3P3i0F8FIW/HX+ug81D96UdyyHe6XSgif3LIfi3J+gii
w2XNcyphd4LrzzoXTowXjtIAtBATRWGOtrdTbNEHLS9nNmwUR+Ti+VAR5pQB1CDX
cRPNK/QPp8QjKKcVlX/ipAUJdg==
-----END CERTIFICATE-----
Generated at Tue Aug 25 15:39:56 2026 by rpki-client