
$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json)
Hash identifier: hr7P0c7pFad+o+rbs/JlcNvLhYEh6Bj/K1wBxhMC0Ng=
Subject key identifier: A9:4D:3A:34:AF:F8:2B:9F:D3:9A:60:E4:8F:76:8B:E4:DF:81:3F:A7
Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Certificate serial: 056B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
Manifest number: 0556
Signing time: Mon 22 Jun 2026 23:29:55 +0000
Manifest this update: Mon 22 Jun 2026 23:29:55 +0000
Manifest next update: Mon 29 Jun 2026 23:29:55 +0000
Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: gyxMrMfJCTepDIp3D0mp4U8qCuiwIMrM1skqgyk5eEA=)
2: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: tETiEeczeTi6RVos7PRLZrM1yj4bO0TaBc4BLbzROio=)
3: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: 7U90fAJm9Jprxru+K/b/WXWkFIPppoovbosNTZikpMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Validity
Not Before: Jun 22 23:29:55 2026 GMT
Not After : Jun 29 23:29:55 2026 GMT
Subject: CN=6a39c573-40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:f8:71:4f:e8:97:4c:81:8f:d2:b0:58:8e:
23:93:35:9d:b2:1e:91:1e:80:1b:62:bc:f3:91:67:
53:22:5a:46:a6:67:06:a1:fe:b2:12:31:27:c1:2c:
fc:38:10:24:bf:56:db:e9:2d:87:bd:fe:e9:75:be:
bc:ab:76:ed:2a:c8:a5:db:af:a6:2b:3a:94:38:7c:
d7:83:33:af:7a:84:29:14:77:60:6f:b9:9b:0f:11:
33:82:c7:19:48:ae:0e:58:74:03:4b:74:82:37:e9:
2a:6c:8a:47:ff:e4:b8:96:90:88:ca:16:3d:77:ec:
f1:f7:69:4b:33:e3:d7:a8:70:a2:ab:66:3b:86:c0:
2f:d8:7b:7d:a3:85:fd:76:1f:3f:4a:b2:cc:49:fc:
81:7e:bb:24:c1:c1:01:5a:25:d7:59:7d:3d:49:f9:
10:08:09:72:57:c0:87:e2:64:26:63:ed:73:bf:e9:
e3:da:c7:60:95:b5:68:21:3c:8b:b2:1e:93:ea:ca:
e3:f7:2b:a0:88:5d:c3:16:cc:0b:28:61:70:c2:7a:
e2:d5:a1:db:99:c4:85:04:6f:39:02:b5:ab:1e:2f:
3e:03:a8:0d:78:15:67:9a:81:6f:1a:67:57:10:6d:
53:8d:29:de:9f:e3:c5:0c:66:7a:e0:1b:4b:e4:c7:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4D:3A:34:AF:F8:2B:9F:D3:9A:60:E4:8F:76:8B:E4:DF:81:3F:A7
X509v3 Authority Key Identifier:
keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:59:e4:a3:8c:47:a8:4e:d5:92:a1:92:88:fd:0b:6e:52:7b:
7c:52:22:cf:e3:af:95:58:9d:63:e7:d3:b5:3b:18:b4:4b:a0:
34:fa:b3:cd:ea:6b:46:e2:6b:11:5b:a9:8e:f2:6b:54:33:30:
19:db:f4:63:72:2c:bb:5b:26:6b:bc:a1:df:43:27:07:e7:5d:
ae:7d:f0:ba:b6:5a:4f:ec:4d:4d:d2:10:3e:5f:e3:a1:52:6f:
c4:7a:a2:6a:3f:e2:60:d5:61:0f:ae:a5:f9:d8:52:2d:2d:d5:
66:13:d7:b3:e6:72:81:3f:27:69:ee:98:78:de:84:ca:91:9b:
f3:af:d4:19:77:45:60:32:38:7f:3a:ea:57:ba:30:66:f7:47:
96:e4:63:72:d1:46:5a:5f:28:ec:b6:b6:a2:e8:7c:e0:70:8d:
43:91:70:f5:4a:15:f3:9b:15:d3:a3:03:dd:d9:fd:b1:a2:11:
c6:d0:80:5a:bd:47:10:6e:de:26:a4:90:c3:2e:ba:00:ee:aa:
0c:f7:d1:88:3a:c5:28:42:87:97:d7:ab:23:a4:83:9e:21:97:
64:51:bc:ba:58:78:ca:ad:e0:fe:39:d9:64:d2:4f:f4:62:92:
b3:d0:b0:62:e3:a6:3a:c6:e0:5c:06:32:16:be:28:ea:33:32:
43:83:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:00 2026 by rpki-client