
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json)
Hash identifier: LHqjOk2P9xN2FrburdtWyEcobDaZXjZJCgFm8bU7pnE=
Subject key identifier: 86:DD:FE:5F:76:3F:D8:E8:2D:49:D0:04:05:7A:BF:13:70:D4:0E:63
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial: 06EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
Manifest number: 06DB
Signing time: Wed 20 May 2026 22:17:47 +0000
Manifest this update: Wed 20 May 2026 22:17:46 +0000
Manifest next update: Wed 27 May 2026 22:17:46 +0000
Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: Uqh6cQLFYkx3oM8zer15ILALCFin7Ns5ZQuLeCGnRXg=)
2: 3178D7C2FC4511F09C766CE9466F56BC.roa (hash: G84/tCrVXrJ15CgRG1mh3hFuH70Ak+Y49JyhM84ghWw=)
3: 190C2054FC4511F0B3BAE0E1466F56BC.roa (hash: EugNDSEUcv8s0/hdkai7icbbEYSczSe5xjpiA4JXe7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Validity
Not Before: May 20 22:17:46 2026 GMT
Not After : May 27 22:17:46 2026 GMT
Subject: CN=6a0e330b-839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:b2:d9:82:ea:b6:f2:ad:83:4e:39:0e:cd:
2a:ec:89:f9:82:89:ee:33:c6:9a:af:f8:92:31:91:
00:ab:77:e0:36:3b:0d:c7:90:24:6d:f1:04:ba:14:
77:89:18:91:62:fe:b1:6c:6b:43:21:77:4b:45:f6:
fe:3f:68:cb:37:e4:e6:32:67:b5:d4:a6:8b:32:00:
e2:29:5c:77:30:3c:e0:8d:3e:4b:9a:d6:9b:09:91:
1b:be:e2:4c:17:6c:7d:dc:89:3b:89:59:8b:bb:06:
1c:27:39:19:5f:3e:0c:b6:45:53:73:3f:8d:08:4f:
c9:15:24:e2:3a:a1:52:dd:3c:3e:5c:06:40:d7:81:
08:08:b6:83:c1:79:41:7c:f6:e2:74:1e:e7:df:c3:
ee:0e:25:14:29:97:81:d0:1f:3f:c2:93:b6:e4:74:
72:ad:48:15:f2:d3:51:00:09:99:10:b3:57:d8:9c:
cb:d1:05:03:e2:94:5e:fe:b8:24:05:e4:80:44:6b:
e3:8a:d9:b6:95:9c:67:e0:a5:25:a2:26:9b:6b:10:
4c:7f:87:ee:e8:d6:53:64:c2:bb:cc:90:b9:aa:ee:
68:ea:a5:44:e9:47:9d:97:7e:4c:c4:ef:a5:78:28:
95:b0:6e:06:f2:46:b9:58:28:8e:fd:a6:53:94:68:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:FE:5F:76:3F:D8:E8:2D:49:D0:04:05:7A:BF:13:70:D4:0E:63
X509v3 Authority Key Identifier:
keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:f9:53:5a:d2:fc:58:8e:9b:ba:7b:79:14:66:50:fd:9c:b3:
00:f8:5f:35:a5:4c:00:f1:7f:21:ac:00:16:3f:2f:c9:71:ec:
7a:a4:e5:d4:e5:cf:b9:0d:b1:eb:bf:7d:9e:06:b5:8b:dc:d3:
7b:6d:46:ed:7e:af:a7:fb:67:6d:ab:86:ae:02:c3:87:eb:52:
03:d5:85:9f:60:98:de:1a:ae:16:ac:d7:a5:98:ad:b3:0a:6d:
31:57:2e:7e:ea:9f:b4:2f:f7:3d:6a:e7:00:0e:a6:90:a7:22:
4a:ab:71:81:95:06:e3:c0:5d:b7:4a:53:cd:df:b3:92:6d:22:
49:01:0b:1f:3d:d0:e5:9a:50:61:c6:c6:6b:85:d3:d0:0f:9e:
43:23:36:0e:ba:3f:b4:47:7a:6a:21:0d:e0:14:20:17:39:d3:
11:0d:19:91:df:a6:f8:df:70:31:1d:6e:4f:21:43:9c:f3:69:
3e:fa:8b:7a:f2:61:96:bf:ca:49:66:00:04:d8:93:60:98:4a:
b1:06:c3:18:05:1f:2d:37:c1:66:96:2d:60:e3:99:31:6c:58:
5f:16:4f:9c:b4:3d:b3:c7:dc:1d:42:29:8b:ef:f1:77:83:0a:
12:74:85:f1:0f:07:10:23:83:ad:03:69:1f:fe:76:c0:69:01:
d1:7a:87:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw
NTFFMTk0QkMwHhcNMjYwNTIwMjIxNzQ2WhcNMjYwNTI3MjIxNzQ2WjAYMRYwFAYD
VQQDEw02YTBlMzMwYi04MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6iy2YLqtvKtg045Ds0q7In5gonuM8aar/iSMZEAq3fgNjsNx5AkbfEEuhR3
iRiRYv6xbGtDIXdLRfb+P2jLN+TmMme11KaLMgDiKVx3MDzgjT5LmtabCZEbvuJM
F2x93Ik7iVmLuwYcJzkZXz4MtkVTcz+NCE/JFSTiOqFS3Tw+XAZA14EICLaDwXlB
fPbidB7n38PuDiUUKZeB0B8/wpO25HRyrUgV8tNRAAmZELNX2JzL0QUD4pRe/rgk
BeSARGvjitm2lZxn4KUloiabaxBMf4fu6NZTZMK7zJC5qu5o6qVE6Uedl35MxO+l
eCiVsG4G8ka5WCiO/aZTlGi7cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbd/l92
P9joLUnQBAV6vxNw1A5jMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE
QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP
OEEtTTZNYmI2dnNGSGhsTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcvlTWtL8WI6bunt5FGZQ/ZyzAPhfNaVMAPF/IawAFj8vyXHseqTl1OXPuQ2x
6799nga1i9zTe21G7X6vp/tnbauGrgLDh+tSA9WFn2CY3hquFqzXpZitswptMVcu
fuqftC/3PWrnAA6mkKciSqtxgZUG48Bdt0pTzd+zkm0iSQELHz3Q5ZpQYcbGa4XT
0A+eQyM2Dro/tEd6aiEN4BQgFznTEQ0Zkd+m+N9wMR1uTyFDnPNpPvqLevJhlr/K
SWYABNiTYJhKsQbDGAUfLTfBZpYtYOOZMWxYXxZPnLQ9s8fcHUIpi+/xd4MKEnSF
8Q8HECODrQNpH/52wGkB0XqHQg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:21 2026 by rpki-client