
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier: dH18nYRFgy1n3S3dt/ueJb7scS1lpep3E/R2IpNR+R4=
Subject key identifier: 07:1D:25:7C:23:71:B3:AF:07:02:16:46:22:E1:62:09:6F:8D:C9:9A
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 1407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number: 13F0
Signing time: Thu 10 Sep 2026 16:54:31 +0000
Manifest this update: Thu 10 Sep 2026 16:54:30 +0000
Manifest next update: Thu 17 Sep 2026 16:54:30 +0000
Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: hW7rxucwbVgTfGV2jXNDCuJItchOB1RTziRkyC4sojQ=)
2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=)
3: AE7603724F8711F1ACC1478F91833773.roa (hash: m3sG9C0voTAzwCTrnGEExTYMamH/vClHoEE2jHx5FJc=)
4: B80482FC748911F19DCB36BA84A30FBC.roa (hash: jW6OnogRVDWjla3xscS9xPToyDbj+RJjVrfHDwtYH9Y=)
5: F5B633B2283411F1B1D7DF7FCA833773.roa (hash: Kt9rQh1UmXU3aG3p58XCWtin2O3CyyL613kv0PisisY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5127 (0x1407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: Sep 10 16:54:30 2026 GMT
Not After : Sep 17 16:54:30 2026 GMT
Subject: CN=6aa2e0c7-8676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:2a:66:cf:4b:dd:53:91:f3:f8:78:32:0e:
ed:40:38:40:75:c3:87:03:6f:7b:ba:73:51:29:a3:
db:7c:9e:b5:68:41:77:6e:f6:47:4f:9d:38:5d:40:
89:88:e8:4f:11:a5:d2:b1:c4:11:be:43:4e:ca:b4:
4f:18:d3:e0:54:52:ab:d8:ea:68:ee:b6:46:6b:75:
ce:d4:2e:fe:14:4f:03:3f:a9:86:f2:92:1d:e1:78:
14:3c:67:17:bf:e2:95:a9:e6:2b:3f:50:07:74:0b:
f2:0a:21:ba:86:c7:ba:ce:14:f3:ec:67:f0:34:fc:
1a:45:ec:ac:ff:c9:00:34:e0:e2:78:72:0f:ef:3f:
b6:a9:d4:5c:d7:56:b7:72:f7:44:e6:8c:7d:41:82:
4c:fa:04:8a:f4:0e:ea:f3:a4:08:aa:7c:df:c2:bb:
ee:99:29:80:66:63:50:45:ee:a6:34:5a:2e:10:52:
c8:a0:0f:8e:3f:4b:9b:e8:20:ee:b2:e5:e3:62:fb:
75:9f:ce:5b:16:a3:1b:86:f1:45:fd:c1:0d:5f:fc:
0f:15:f9:73:66:53:91:c5:6c:c9:2a:cf:8c:c7:a7:
39:e3:75:7e:f6:96:55:94:e8:66:f7:71:a4:bb:f5:
5a:86:88:72:a8:cb:a5:8e:cd:a5:d4:f9:68:8c:97:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:25:7C:23:71:B3:AF:07:02:16:46:22:E1:62:09:6F:8D:C9:9A
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:a5:d1:dd:03:6d:b0:b2:5a:54:83:3f:90:18:b5:99:c8:
2d:52:5a:44:d0:fb:2d:d7:64:b1:cf:04:eb:11:d2:fe:7e:9a:
9a:e1:42:48:cb:9e:2e:6a:f0:50:e2:80:1e:e5:6e:a5:39:66:
af:45:c3:95:11:51:50:0e:07:8e:76:45:77:b8:c9:9b:74:3a:
79:32:14:0e:80:b0:e6:de:63:22:d0:db:9a:93:98:74:09:0f:
9f:ee:aa:24:98:b9:f5:de:32:7a:8b:86:f1:70:09:d5:ca:2c:
e9:9f:c2:5d:81:54:72:08:82:e9:ba:19:ff:6f:55:b0:a6:69:
2a:de:e9:c8:82:c0:d9:97:a9:5f:90:15:2e:99:f6:d2:57:06:
8f:19:38:0a:a2:ea:36:5f:7f:20:ce:09:77:cf:c1:f2:be:87:
e7:13:fa:c5:8d:10:04:23:b0:91:67:9d:7c:80:27:41:90:b4:
71:d5:05:6c:3c:97:cf:63:c5:c4:cc:06:5b:61:53:18:0d:5e:
2a:ca:07:3a:72:5c:15:f5:74:bd:d6:3f:0e:f7:c4:0a:39:87:
a8:cd:38:32:3a:28:42:17:37:47:4c:e0:ec:4f:04:47:09:27:
a4:b0:28:09:50:a4:df:2b:3f:09:a0:86:6c:59:31:08:eb:ac:
81:1d:9b:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz
RDY5NTZFMzIwHhcNMjYwOTEwMTY1NDMwWhcNMjYwOTE3MTY1NDMwWjAYMRYwFAYD
VQQDEw02YWEyZTBjNy04Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdwqZs9L3VOR8/h4Mg7tQDhAdcOHA297unNRKaPbfJ61aEF3bvZHT504XUCJ
iOhPEaXSscQRvkNOyrRPGNPgVFKr2Opo7rZGa3XO1C7+FE8DP6mG8pId4XgUPGcX
v+KVqeYrP1AHdAvyCiG6hse6zhTz7GfwNPwaReys/8kANODieHIP7z+2qdRc11a3
cvdE5ox9QYJM+gSK9A7q86QIqnzfwrvumSmAZmNQRe6mNFouEFLIoA+OP0ub6CDu
suXjYvt1n85bFqMbhvFF/cENX/wPFflzZlORxWzJKs+Mx6c543V+9pZVlOhm93Gk
u/VahohyqMuljs2l1PlojJeYtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcdJXwj
cbOvBwIWRiLhYglvjcmaMB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2
OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5
YV9vSktEQWhfcEU5YVZiakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE6Cl0d0DbbCyWlSDP5AYtZnILVJaRND7Lddksc8E6xHS/n6amuFCSMueLmrw
UOKAHuVupTlmr0XDlRFRUA4HjnZFd7jJm3Q6eTIUDoCw5t5jItDbmpOYdAkPn+6q
JJi59d4yeouG8XAJ1cos6Z/CXYFUcgiC6boZ/29VsKZpKt7pyILA2ZepX5AVLpn2
0lcGjxk4CqLqNl9/IM4Jd8/B8r6H5xP6xY0QBCOwkWedfIAnQZC0cdUFbDyXz2PF
xMwGW2FTGA1eKsoHOnJcFfV0vdY/DvfECjmHqM04MjooQhc3R0zg7E8ERwknpLAo
CVCk3ys/CaCGbFkxCOusgR2bfA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:34:51 2026 by rpki-client