
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json)
Hash identifier: vKGEnwADTenujcZTw/UUMQXzrxqvBP0ecvTOwOlruJU=
Subject key identifier: B0:6F:86:75:75:03:D3:6E:3E:A5:42:05:C9:C5:9B:17:54:96:A3:8F
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
Manifest number: 06C2
Signing time: Sat 04 Apr 2026 22:06:45 +0000
Manifest this update: Sat 04 Apr 2026 22:06:45 +0000
Manifest next update: Sat 11 Apr 2026 22:06:45 +0000
Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: 30TO4k/RusVwG2bn2P5e8s83cISQcLI9Eyzj7bVNbPc=)
2: 3178D7C2FC4511F09C766CE9466F56BC.roa (hash: amHTyWIq2OtRmCPA/SGgVZzJhBt3f4JrQzwmqyQYO7Y=)
3: 190C2054FC4511F0B3BAE0E1466F56BC.roa (hash: VbS3vbL0hqKPBaB8wK0DHbWRgAZrEub7dam1PJVejWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Validity
Not Before: Apr 4 22:06:45 2026 GMT
Not After : Apr 11 22:06:45 2026 GMT
Subject: CN=69d18b75-5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:83:ca:56:51:b4:ff:7f:74:7d:1f:cf:53:
71:12:24:9c:ca:a5:d5:fd:62:d9:b2:47:73:8b:aa:
46:60:80:e1:4e:80:f1:75:34:c0:be:55:e7:3b:b8:
2a:d1:4a:57:44:ea:0f:47:c0:de:bf:6d:56:51:71:
30:81:a9:8f:aa:6b:1e:fb:a1:a8:a2:4b:bd:3f:21:
bc:57:f2:49:75:14:23:26:77:ac:b2:4f:b5:3e:e8:
b4:91:05:b5:ce:99:b9:69:05:03:0b:b4:4a:90:dd:
6c:63:bb:1f:18:24:c6:1a:00:d6:c8:73:20:2f:9d:
7c:fc:8a:79:d9:7f:75:47:df:1c:01:ab:b0:c6:7d:
72:3e:ef:e0:05:cd:9f:71:3c:63:ab:19:46:30:ab:
39:5c:56:25:28:1b:7f:b3:55:49:ce:83:65:c5:68:
ee:6c:47:32:c4:cb:ab:45:e9:39:64:f8:16:97:83:
b1:b6:84:ea:67:0b:c1:93:fa:f3:89:29:ae:01:64:
b6:04:fa:fc:ed:c4:bf:14:9c:5a:d6:79:5a:d0:b8:
e0:1b:25:11:dd:1f:27:03:5c:2f:5e:30:a8:fb:5f:
16:0d:56:51:29:08:6e:b3:4d:dc:d4:cc:ab:12:39:
f3:34:88:78:30:0e:aa:0c:2d:c5:f3:d2:e9:7e:8e:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:86:75:75:03:D3:6E:3E:A5:42:05:C9:C5:9B:17:54:96:A3:8F
X509v3 Authority Key Identifier:
keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ef:e8:48:a9:d9:d8:ce:2c:11:cc:7c:ab:5b:07:bb:d8:54:
30:8e:ff:90:fe:e2:a7:4e:12:d9:95:90:3e:05:8f:f9:13:f1:
98:0c:79:63:67:38:b2:6b:07:f7:86:1e:0a:58:3d:13:a7:62:
49:60:3c:c6:9f:1a:b0:a0:55:c7:03:ca:da:5a:97:b2:05:03:
3f:af:57:05:39:c3:38:98:9f:3e:81:e9:2f:58:d6:6e:a4:b7:
ce:3c:2b:6b:ab:97:c1:bb:6a:22:c1:ce:4b:68:0c:ee:c8:43:
b4:be:f9:f8:b6:57:f7:49:aa:5d:f9:cb:3f:13:9f:e7:d3:6b:
c9:a4:1e:3f:3e:9e:20:db:f1:bc:7e:a4:69:6d:cc:c8:df:f8:
94:cb:90:d7:a8:02:c1:40:17:6b:e7:1b:8f:2f:20:c9:20:34:
9b:2e:af:a6:54:17:64:6d:70:c6:9b:bc:69:06:d8:76:4d:34:
d6:7d:d5:ce:a1:25:62:64:dc:d1:e7:21:6f:38:08:cd:72:89:
94:cf:cc:d4:b5:5c:21:b1:79:84:3e:f5:50:17:d4:2c:4e:df:
8c:24:d7:1e:b9:48:b3:16:35:e1:fc:7c:88:bd:c8:27:8d:22:
38:54:c1:84:24:d9:07:b4:44:a1:9e:15:e4:65:ca:8b:63:6f:
53:f4:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client