
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier: CvNWg3wgUvYqLav4dtTPJcCcAkR/Kd9dZRKU6wDzEJU=
Subject key identifier: 55:BB:9D:10:A9:19:B5:D3:F8:0D:CD:75:A7:2B:97:56:D6:D3:8B:41
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial: 24BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number: 24A2
Signing time: Sat 04 Jul 2026 15:47:13 +0000
Manifest this update: Sat 04 Jul 2026 15:47:13 +0000
Manifest next update: Sat 11 Jul 2026 15:47:13 +0000
Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: bGlguRXO3/1tNqmGLPmU3VUKXswN0OJ5TPyvhXnFy5Y=)
2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: kE6e/2uyAi3HKTrQshUdCns+fLTS/L8pSxDJFAPtMig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 15:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9402 (0x24ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Validity
Not Before: Jul 4 15:47:13 2026 GMT
Not After : Jul 11 15:47:13 2026 GMT
Subject: CN=6a492b01-46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:45:8a:f1:69:07:69:de:53:b4:28:98:d6:
c7:aa:90:84:d9:bc:57:a4:d4:36:37:3e:4d:5a:2a:
d4:c1:ba:54:68:b9:63:de:ae:ce:62:0c:08:56:91:
cf:7b:0b:17:68:eb:ae:ee:32:88:66:3e:fe:d1:04:
34:82:29:50:2e:3b:1b:cb:c6:0d:c0:ef:b1:e6:77:
5e:2d:35:5d:34:e9:8b:fc:5c:e9:0e:5b:0e:17:5f:
0d:12:d7:65:24:4d:9e:52:cc:96:26:37:92:65:cd:
1d:f2:14:50:b5:8c:9d:f6:cd:5d:0e:30:0e:9b:86:
28:c0:d1:b8:ba:21:47:96:f5:19:fb:e1:66:d4:c4:
ed:b6:f1:fa:ac:34:50:57:4c:b6:92:73:93:87:82:
12:4c:7d:16:60:8f:1f:56:1b:46:22:f1:24:c7:6d:
2d:0f:d8:4a:d7:3a:d3:bf:96:4b:53:8e:76:52:45:
f0:f5:ef:e3:cd:6d:a5:ec:7f:a5:b6:46:07:5f:51:
d4:42:46:e7:dd:9b:69:f8:51:31:3b:4e:ab:e0:2f:
51:e9:62:b0:a1:74:cd:83:c3:f0:31:49:be:3d:e5:
32:a5:05:84:09:80:2e:f4:b4:90:f0:d9:3a:94:84:
4a:a6:56:a8:98:ce:97:71:99:3e:49:4e:e5:91:0d:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:9D:10:A9:19:B5:D3:F8:0D:CD:75:A7:2B:97:56:D6:D3:8B:41
X509v3 Authority Key Identifier:
keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:98:18:b6:28:e8:fe:1b:59:d2:13:6e:6e:2c:22:ce:0e:
ab:57:7b:44:3b:dc:b4:5a:a6:12:89:2d:e4:f5:58:55:3e:ac:
0d:23:ab:61:c2:d6:42:e9:05:55:7e:20:c1:ff:13:d7:d9:90:
fc:ce:99:13:47:8e:23:53:f4:74:9e:30:b2:9e:53:6c:4c:30:
c4:b2:6e:94:96:c8:fa:87:a5:e1:38:08:64:ca:b6:bc:1b:8c:
bd:df:58:1d:89:53:99:c8:54:d9:8a:24:6c:50:95:1d:7f:7b:
4c:38:ae:79:59:76:6b:d9:92:5b:dc:36:5a:05:0b:f1:72:a6:
0d:3b:39:52:cb:81:78:57:b6:39:f1:d3:bb:87:5a:75:42:95:
b3:d3:38:8e:96:08:02:7b:19:96:ad:63:78:0d:30:46:ef:41:
9f:a7:be:a2:67:94:36:05:8c:d8:92:e8:3b:8a:8c:1d:65:1a:
54:be:87:c1:69:8f:39:df:97:ba:7a:8d:52:6e:02:c7:fe:a7:
b9:b5:cf:50:fb:57:c1:c2:b3:1b:fd:d9:b2:81:29:d1:e8:46:
4d:ea:9c:02:58:5c:61:ae:23:dd:0d:d9:76:e0:f4:91:43:6d:
69:09:1a:7d:90:96:16:ca:23:2d:69:c7:67:03:5d:99:6b:7e:
10:e7:b6:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw
RUI5NDQ2OTEwHhcNMjYwNzA0MTU0NzEzWhcNMjYwNzExMTU0NzEzWjAYMRYwFAYD
VQQDEw02YTQ5MmIwMS00NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUNFivFpB2neU7QomNbHqpCE2bxXpNQ2Nz5NWirUwbpUaLlj3q7OYgwIVpHP
ewsXaOuu7jKIZj7+0QQ0gilQLjsby8YNwO+x5ndeLTVdNOmL/FzpDlsOF18NEtdl
JE2eUsyWJjeSZc0d8hRQtYyd9s1dDjAOm4YowNG4uiFHlvUZ++Fm1MTttvH6rDRQ
V0y2knOTh4ISTH0WYI8fVhtGIvEkx20tD9hK1zrTv5ZLU452UkXw9e/jzW2l7H+l
tkYHX1HUQkbn3Ztp+FExO06r4C9R6WKwoXTNg8PwMUm+PeUypQWECYAu9LSQ8Nk6
lIRKplaomM6XcZk+SU7lkQ3VqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFW7nRCp
GbXT+A3Ndacrl1bW04tBMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5
MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ
Y2JlcnptNk5lRElPdVVScEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAKSYGLYo6P4bWdITbm4sIs4Oq1d7RDvctFqmEokt5PVYVT6sDSOrYcLWQukF
VX4gwf8T19mQ/M6ZE0eOI1P0dJ4wsp5TbEwwxLJulJbI+oel4TgIZMq2vBuMvd9Y
HYlTmchU2YokbFCVHX97TDiueVl2a9mSW9w2WgUL8XKmDTs5UsuBeFe2OfHTu4da
dUKVs9M4jpYIAnsZlq1jeA0wRu9Bn6e+omeUNgWM2JLoO4qMHWUaVL6HwWmPOd+X
unqNUm4Cx/6nubXPUPtXwcKzG/3ZsoEp0ehGTeqcAlhcYa4j3Q3ZduD0kUNtaQka
fZCWFsojLWnHZwNdmWt+EOe2Fw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:37 2026 by rpki-client