
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier: kC5fIO94UXxvHN/+TS9L+MlDuRAei2SU0nQXyYf+vg0=
Subject key identifier: C4:D2:AD:55:8C:15:61:E3:98:3B:95:31:34:AC:45:66:F7:79:99:B3
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial: 24A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number: 2489
Signing time: Sat 16 May 2026 15:45:33 +0000
Manifest this update: Sat 16 May 2026 15:45:32 +0000
Manifest next update: Sat 23 May 2026 15:45:32 +0000
Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: 7lcOau/JfXe5+ZWjEdjSodeI8xWE50VlS8ijF9DN1BU=)
2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: kE6e/2uyAi3HKTrQshUdCns+fLTS/L8pSxDJFAPtMig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9377 (0x24a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Validity
Not Before: May 16 15:45:32 2026 GMT
Not After : May 23 15:45:32 2026 GMT
Subject: CN=6a08911c-b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:16:b3:d2:35:75:06:af:c2:02:2f:5e:3e:
f3:2a:9a:d2:d6:a4:52:db:1a:22:4c:f0:23:c4:e0:
09:84:59:c9:d2:02:1c:3c:1f:ce:9f:c8:bc:e7:cf:
0e:de:91:5f:39:b3:2a:a0:a5:fb:25:14:f8:89:ca:
0d:71:86:bc:fe:7c:c0:a1:56:c1:93:c7:d2:cd:6b:
66:ba:14:d8:c0:67:df:c9:7e:03:1e:4c:54:7e:cc:
54:eb:e5:0b:06:7e:56:1e:47:5e:c3:cd:bd:67:51:
c6:36:17:dd:fd:73:65:b4:d4:d4:6c:2e:b9:cd:28:
10:39:22:ce:a7:73:4f:3a:d9:77:8d:67:30:96:e4:
4e:10:ed:01:3a:db:1d:fa:cf:2e:a3:3f:3d:c7:79:
b8:68:6e:05:d5:7c:3c:d6:a4:bf:3f:ca:cc:14:94:
a7:d9:5c:b8:b6:83:54:6f:e0:4e:5f:dc:55:1f:06:
e9:f0:a3:e7:cf:02:b9:6a:0e:3c:48:fd:96:2c:96:
e6:7d:af:16:66:2e:d1:61:20:25:cd:5c:2c:f3:10:
0b:a3:85:1d:43:bc:8f:de:7d:08:a8:f6:30:f5:61:
ee:f4:3a:bf:40:20:5e:9e:33:f3:bb:2d:95:9c:94:
85:7e:52:93:c7:1a:93:e3:83:bf:58:e1:74:67:ed:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D2:AD:55:8C:15:61:E3:98:3B:95:31:34:AC:45:66:F7:79:99:B3
X509v3 Authority Key Identifier:
keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:28:0f:ae:b8:da:08:84:b3:ff:25:df:36:08:e5:55:fc:
e5:fb:ca:fa:83:83:3b:d1:30:38:bc:cf:c8:d7:51:15:af:37:
8b:a1:a4:3a:4c:04:00:da:8f:28:77:5c:62:e2:19:0b:ab:ec:
ce:35:af:c3:70:c6:44:60:a8:83:f4:2d:9c:db:b7:69:72:7e:
c9:cb:ad:84:cc:43:dd:52:d3:fe:20:8c:41:26:4a:fc:4b:ca:
6a:f8:6d:53:aa:46:6d:5b:04:96:e2:73:5b:41:d8:5a:03:2e:
ac:c1:87:f8:f5:b9:ca:7e:c3:65:4d:b9:88:b2:d2:11:1b:25:
a0:07:5c:0a:b5:6f:0a:66:6c:df:af:70:4f:94:43:b9:7f:cb:
11:58:4c:28:23:7c:f9:d9:27:50:8c:f3:a3:46:de:61:30:63:
22:7e:7b:9f:ff:3f:38:c9:cc:79:dd:67:8e:5e:7f:1d:cb:e9:
74:7f:98:29:05:42:fb:fc:43:15:11:f6:96:ab:f5:03:d1:15:
64:f7:40:1d:75:d2:ca:0c:04:d6:13:d4:c3:62:d9:f6:40:c6:
17:b9:22:84:e1:43:21:5d:5a:db:25:70:aa:ed:be:13:81:65:
b2:56:d8:9a:57:39:a1:59:3b:3d:a5:c6:c9:5b:58:5b:c8:93:
57:49:67:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw
RUI5NDQ2OTEwHhcNMjYwNTE2MTU0NTMyWhcNMjYwNTIzMTU0NTMyWjAYMRYwFAYD
VQQDEw02YTA4OTExYy1iMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQkWs9I1dQavwgIvXj7zKprS1qRS2xoiTPAjxOAJhFnJ0gIcPB/On8i8588O
3pFfObMqoKX7JRT4icoNcYa8/nzAoVbBk8fSzWtmuhTYwGffyX4DHkxUfsxU6+UL
Bn5WHkdew829Z1HGNhfd/XNltNTUbC65zSgQOSLOp3NPOtl3jWcwluROEO0BOtsd
+s8uoz89x3m4aG4F1Xw81qS/P8rMFJSn2Vy4toNUb+BOX9xVHwbp8KPnzwK5ag48
SP2WLJbmfa8WZi7RYSAlzVws8xALo4UdQ7yP3n0IqPYw9WHu9Dq/QCBenjPzuy2V
nJSFflKTxxqT44O/WOF0Z+1N8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTSrVWM
FWHjmDuVMTSsRWb3eZmzMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5
MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ
Y2JlcnptNk5lRElPdVVScEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKdAoD6642giEs/8l3zYI5VX85fvK+oODO9EwOLzPyNdRFa83i6GkOkwEANqP
KHdcYuIZC6vszjWvw3DGRGCog/QtnNu3aXJ+ycuthMxD3VLT/iCMQSZK/EvKavht
U6pGbVsEluJzW0HYWgMurMGH+PW5yn7DZU25iLLSERsloAdcCrVvCmZs369wT5RD
uX/LEVhMKCN8+dknUIzzo0beYTBjIn57n/8/OMnMed1njl5/HcvpdH+YKQVC+/xD
FRH2lqv1A9EVZPdAHXXSygwE1hPUw2LZ9kDGF7kihOFDIV1a2yVwqu2+E4FlslbY
mlc5oVk7PaXGyVtYW8iTV0ln2g==
-----END CERTIFICATE-----
Generated at Sun May 17 03:02:47 2026 by rpki-client