
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json)
Hash identifier: Wkt13cbJOgJJz9WaedKxPSYhelp1TW1t7yamInj0pD4=
Subject key identifier: FB:97:75:1A:C5:AF:CF:09:4A:C6:53:88:20:99:A3:37:31:79:FD:AB
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
Manifest number: 0234
Signing time: Thu 03 Sep 2026 02:52:58 +0000
Manifest this update: Thu 03 Sep 2026 02:52:57 +0000
Manifest next update: Thu 10 Sep 2026 02:52:57 +0000
Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: y222LCONkpRsPy8f6kpJD08Su84Sp9bOCw/SJz1NQR0=)
2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=)
3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Validity
Not Before: Sep 3 02:52:57 2026 GMT
Not After : Sep 10 02:52:57 2026 GMT
Subject: CN=6a98e10a-fe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:85:5d:2c:29:dd:5a:cc:bd:6c:11:99:a4:
b0:91:7e:d5:ae:a3:39:e0:b0:6d:e6:3d:d7:ac:f4:
78:87:fb:0f:13:a4:64:5f:c6:c8:01:00:45:ca:55:
cb:dd:1a:55:c3:bd:03:58:1b:8e:6e:5d:d7:e1:90:
0c:de:b5:1d:a5:b2:d7:96:63:a3:27:49:83:44:9d:
01:83:4d:0c:41:e0:ec:a7:13:f4:36:90:e6:35:f1:
95:61:ac:52:8f:e3:ea:94:6e:47:02:bb:07:ed:fb:
72:e9:e4:46:bf:82:22:dd:63:b3:66:db:ed:70:49:
cd:8c:86:f1:0d:25:5a:cf:ef:25:53:ec:38:ad:e9:
f7:93:2f:fc:9e:be:7a:a4:89:9b:78:65:43:99:6e:
99:0c:76:4f:f1:81:61:e7:85:d7:d4:ed:3c:44:d7:
eb:55:57:51:b8:76:0a:2d:4a:c1:27:f3:e3:ee:81:
0c:bc:a9:92:f0:e5:ca:d7:14:41:17:37:75:6d:66:
b8:b9:29:28:f2:27:bd:1d:80:95:c2:5d:69:86:14:
b1:07:e3:1c:57:ed:1c:13:63:9a:fa:33:64:cb:f3:
49:cd:6a:85:8e:42:a5:11:f1:90:d8:34:d4:08:81:
e8:45:11:06:ff:62:1d:2a:7b:d4:ad:18:f9:f1:fb:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:75:1A:C5:AF:CF:09:4A:C6:53:88:20:99:A3:37:31:79:FD:AB
X509v3 Authority Key Identifier:
keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f4:2f:35:32:2f:2a:81:10:b7:78:8c:df:ed:7c:d7:8f:fb:
5f:4a:b3:c4:17:24:72:50:7e:f2:e8:70:7a:41:23:23:31:65:
2b:fb:90:eb:22:cc:20:91:cc:f3:8f:1f:0b:93:01:2a:e9:d2:
0d:36:36:8a:66:c4:72:2c:76:18:b9:fa:73:99:4a:af:1e:d0:
e2:40:fe:ca:dd:0b:b3:5f:8b:1a:c0:fc:54:33:9b:3c:f1:e4:
16:1e:86:de:06:a7:0a:a9:88:12:dc:63:35:82:d2:9b:50:82:
a5:07:b4:42:c0:17:e7:86:79:69:a1:fa:6e:c0:00:46:1b:2c:
43:3f:b8:4a:12:4f:50:f3:18:ce:9e:a4:b9:1e:2a:25:23:9f:
e7:62:60:3d:36:46:3e:bf:46:01:1a:83:14:de:05:a8:56:1a:
1b:76:7e:7a:fc:af:3b:49:7e:bb:c7:ec:b9:81:b2:31:0e:15:
8c:a7:16:bf:38:f4:38:8c:2e:5f:15:5f:c1:15:61:a3:86:6d:
88:cc:9c:fa:ff:53:84:2a:c7:a4:81:f4:b7:f1:37:76:f6:3d:
23:19:84:7d:6d:40:4e:4e:9f:fb:fc:eb:2e:b6:79:15:6a:98:
8a:ab:d9:31:2f:ac:ed:0c:58:c7:70:0d:60:53:e7:7a:96:51:
e8:23:c4:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2
MkE5RDI4MzMwHhcNMjYwOTAzMDI1MjU3WhcNMjYwOTEwMDI1MjU3WjAYMRYwFAYD
VQQDEw02YTk4ZTEwYS1mZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0E2FXSwp3VrMvWwRmaSwkX7VrqM54LBt5j3XrPR4h/sPE6RkX8bIAQBFylXL
3RpVw70DWBuObl3X4ZAM3rUdpbLXlmOjJ0mDRJ0Bg00MQeDspxP0NpDmNfGVYaxS
j+PqlG5HArsH7fty6eRGv4Ii3WOzZtvtcEnNjIbxDSVaz+8lU+w4ren3ky/8nr56
pImbeGVDmW6ZDHZP8YFh54XX1O08RNfrVVdRuHYKLUrBJ/Pj7oEMvKmS8OXK1xRB
Fzd1bWa4uSko8ie9HYCVwl1phhSxB+McV+0cE2Oa+jNky/NJzWqFjkKlEfGQ2DTU
CIHoRREG/2IdKnvUrRj58fulxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuXdRrF
r88JSsZTiCCZozcxef2rMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC
M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P
MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHPQvNTIvKoEQt3iM3+1814/7X0qzxBckclB+8uhwekEjIzFlK/uQ6yLMIJHM
848fC5MBKunSDTY2imbEcix2GLn6c5lKrx7Q4kD+yt0Ls1+LGsD8VDObPPHkFh6G
3ganCqmIEtxjNYLSm1CCpQe0QsAX54Z5aaH6bsAARhssQz+4ShJPUPMYzp6kuR4q
JSOf52JgPTZGPr9GARqDFN4FqFYaG3Z+evyvO0l+u8fsuYGyMQ4VjKcWvzj0OIwu
XxVfwRVho4ZtiMyc+v9ThCrHpIH0t/E3dvY9IxmEfW1ATk6f+/zrLrZ5FWqYiqvZ
MS+s7QxYx3ANYFPnepZR6CPEYA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:57 2026 by rpki-client