
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
File: A_ay59uYeE9EXiRrtoDCqdiV5T0.mft (raw, json)
Hash identifier: zFnIqYyZtcRGZL0g4ZIfBhzWPGEs/eEVpYDZcj2dDyk=
Subject key identifier: B4:DE:48:D1:25:3C:B6:57:B5:F1:BF:E1:04:82:29:D2:BE:D9:42:F7
Authority key identifier: 03:F6:B2:E7:DB:98:78:4F:44:5E:24:6B:B6:80:C2:A9:D8:95:E5:3D
Certificate issuer: /CN=A91AEE8C/serialNumber=03F6B2E7DB98784F445E246BB680C2A9D895E53D
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
Manifest number: 2D
Signing time: Wed 19 Aug 2026 09:29:18 +0000
Manifest this update: Wed 19 Aug 2026 09:29:17 +0000
Manifest next update: Wed 26 Aug 2026 09:29:17 +0000
Files and hashes: 1: A_ay59uYeE9EXiRrtoDCqdiV5T0.crl (hash: gQSQ4ypzJLWOM6ezh7Bo0O4/UlnA2A9L/4Acf2dEwwc=)
2: 141F174659A011F1A4C1DFC6B6833773.roa (hash: edA5ZmsOi9ES2xxLRPNE3O08BLQwsC8SQpqFmThPcak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.crl
rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE8C, serialNumber=03F6B2E7DB98784F445E246BB680C2A9D895E53D
Validity
Not Before: Aug 19 09:29:17 2026 GMT
Not After : Aug 26 09:29:17 2026 GMT
Subject: CN=6a85776e-a105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:dd:19:84:76:28:89:41:26:6e:d0:3e:c3:
f7:51:59:20:2e:cb:1b:cf:39:77:0c:16:5f:6e:ed:
9c:12:44:aa:eb:5e:a3:10:da:e0:0e:3d:bd:c7:f7:
4c:4b:82:5f:af:12:08:25:b4:eb:2a:6c:75:1e:6f:
12:be:a7:45:a1:e2:4e:42:f7:af:2a:f4:99:18:f6:
c5:cd:2d:cf:0b:3b:82:61:65:ae:73:a6:aa:7d:0b:
70:5d:57:8f:32:b4:d0:f4:96:9e:1d:46:d0:79:82:
95:c4:ff:c8:c7:55:ba:9a:47:92:c6:bf:2c:da:3d:
01:d5:29:67:a6:6a:0d:56:fd:0b:c9:63:b0:22:ac:
ba:21:8a:4b:8e:e2:0b:04:3f:56:0c:87:7d:83:95:
78:f7:e8:a3:18:9d:e4:cb:5f:f7:1e:82:64:20:ec:
b0:44:9b:3f:1a:01:cf:f1:10:25:19:5c:70:a0:5a:
c9:11:18:c9:4c:36:e4:d9:6c:43:db:ef:70:72:e8:
8d:fc:2f:66:2e:2f:b4:96:1c:d8:28:c5:dd:89:62:
11:c2:39:f2:09:a4:08:f0:b4:e0:ad:ba:9b:34:66:
1a:3c:60:cf:c2:e8:0e:1e:48:c5:a4:77:0e:ab:4f:
25:70:4a:81:40:8c:14:5c:e4:16:65:1a:3c:2f:13:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:48:D1:25:3C:B6:57:B5:F1:BF:E1:04:82:29:D2:BE:D9:42:F7
X509v3 Authority Key Identifier:
keyid:03:F6:B2:E7:DB:98:78:4F:44:5E:24:6B:B6:80:C2:A9:D8:95:E5:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:a9:8f:b7:85:a1:c5:83:e7:a8:8a:5c:25:dd:43:92:b7:
ad:7a:e1:6f:75:73:e1:6a:73:f6:08:3d:de:71:30:28:31:ef:
ae:f5:f2:10:fd:03:21:80:1f:47:ee:dc:4e:af:69:06:cc:f7:
1f:1c:e2:a8:2a:0c:db:45:8b:74:43:95:62:6a:9d:6c:7b:07:
ff:f5:ae:ac:77:f5:88:d3:e5:32:d0:5e:31:58:0c:18:cc:35:
7a:12:1a:5d:0c:ec:1b:be:ab:fe:d9:58:c8:65:5c:79:e3:fd:
d6:c9:0f:0e:24:e4:ad:e2:e0:55:80:70:ec:72:c0:8a:43:19:
51:aa:fd:0a:57:9d:72:e3:a2:91:3e:c9:56:cd:b6:1a:a8:6e:
0d:5b:f5:73:39:75:50:ba:ca:d0:f6:8e:ce:12:2c:e2:fb:88:
27:4d:06:b2:4c:bb:97:d2:c6:be:80:bd:ce:88:3f:f0:33:b8:
3c:ae:6b:c1:f7:75:0a:b4:06:7f:00:31:f0:99:e9:41:07:52:
57:c4:02:97:bf:08:bd:4b:f9:76:dc:72:84:be:60:38:d2:23:
8e:77:a3:55:ae:ec:bb:6d:16:44:ed:26:70:e9:f2:5b:4b:6c:
a0:0c:d6:19:92:ea:a2:96:a7:5d:b8:05:9d:0a:96:0a:95:38:
85:32:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client