
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json)
Hash identifier: 1kEcQCzMUTRC9vn2SCiOZd+W9XeHwSsc5x7YLJimiuc=
Subject key identifier: 79:40:FA:FD:FF:D3:0D:B8:01:2A:CA:FF:58:8C:4B:2B:63:9F:23:65
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
Manifest number: 021B
Signing time: Fri 17 Jul 2026 03:53:10 +0000
Manifest this update: Fri 17 Jul 2026 03:53:09 +0000
Manifest next update: Fri 24 Jul 2026 03:53:09 +0000
Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: xjOlhbIdSiuVND6iK45MsTd3JHjxd0XzeJJWlNyLhRo=)
2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=)
3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 03:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Validity
Not Before: Jul 17 03:53:09 2026 GMT
Not After : Jul 24 03:53:09 2026 GMT
Subject: CN=6a59a725-5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:a3:c7:6f:e5:4b:9c:a0:3d:42:48:92:bf:
89:53:cf:6d:14:f1:fc:5a:de:1e:ae:38:7c:3e:b3:
56:11:33:1c:2a:04:a0:42:d0:02:a6:a6:6c:c8:64:
d8:3e:08:12:b4:80:5c:60:b1:17:98:73:ba:47:cd:
f7:bd:7f:fc:42:c8:b7:2f:7d:2c:ad:17:56:f7:98:
b5:85:9f:96:bb:90:04:11:92:23:6b:11:22:80:56:
97:49:af:7b:d9:7a:05:21:3a:05:1c:cf:3e:fd:b7:
1f:e8:96:b5:b9:51:1b:a1:7b:29:4e:1d:6a:91:55:
0d:77:49:a4:bd:87:48:aa:db:7b:b7:0c:53:f3:ca:
04:98:f6:2d:9a:59:9c:23:82:2e:7b:df:e2:ad:6c:
dd:e1:0b:83:49:7d:05:18:59:8a:50:11:98:be:7b:
0d:22:a7:32:a1:b2:48:5f:44:e1:76:ea:6a:e0:45:
f8:f5:02:1b:32:98:f9:14:13:7d:bb:3d:76:f9:c9:
b3:41:69:e4:c8:64:ec:92:77:e6:68:19:7d:de:21:
cf:1f:04:8c:23:69:52:e9:18:8c:e8:17:77:dd:57:
8d:33:92:53:b4:ca:d6:03:b3:c3:06:ac:11:fa:7d:
fc:f3:5b:80:a4:b1:70:88:05:fa:df:b7:53:bc:ef:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:FA:FD:FF:D3:0D:B8:01:2A:CA:FF:58:8C:4B:2B:63:9F:23:65
X509v3 Authority Key Identifier:
keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:aa:0f:2e:f6:3d:79:b5:19:2e:63:93:04:b3:9d:ba:e5:
5c:e5:8d:ec:6c:1b:cf:b0:ee:ee:6b:8c:f1:84:11:50:2d:54:
68:eb:d7:a5:d1:c0:d5:38:1e:35:11:d2:0c:81:1d:3a:4e:aa:
69:a2:12:b8:ad:dd:89:b9:92:aa:7f:8a:39:ad:4d:b9:cb:54:
96:c4:41:ca:b0:93:38:4a:e8:29:cc:b8:09:49:e6:60:9f:e1:
6a:a5:19:db:90:6e:ab:88:ab:e5:08:4d:0e:41:08:6c:28:0e:
df:7c:03:b2:60:4e:79:d2:73:0c:d1:5c:fc:2e:61:6d:21:ac:
75:94:2d:5e:44:8c:60:3a:f7:f3:57:9f:7e:90:ab:d9:fb:2a:
c1:80:ff:23:06:32:be:e4:14:0f:95:9a:5d:a7:07:b2:fa:b6:
a8:48:27:06:31:57:8d:22:cf:8c:0c:5d:df:57:06:65:b8:6d:
aa:3b:6f:de:86:b6:81:9f:98:bd:cc:28:d3:61:96:6e:20:43:
ba:09:cc:a7:4d:6b:85:3d:b0:a7:79:23:fa:17:3e:6d:6e:a0:
74:c6:23:69:5f:71:ff:f8:23:0c:24:cc:74:7e:89:e1:3d:fb:
f7:b7:89:bb:17:25:ad:50:ee:16:aa:a7:5b:31:76:83:27:19:
08:64:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:11:32 2026 by rpki-client