
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json)
Hash identifier: qqhnfsdhpPl4UiT++ITB9tV6lugP+XCgfaDu6fdN6IE=
Subject key identifier: 85:AE:45:94:67:76:23:8A:F4:2C:0B:2B:4B:42:8C:62:81:F6:FA:22
Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
Manifest number: 7A
Signing time: Mon 01 Jun 2026 05:09:10 +0000
Manifest this update: Mon 01 Jun 2026 05:09:09 +0000
Manifest next update: Mon 08 Jun 2026 05:09:09 +0000
Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: 8PNT15eFjv+6aJ7mpTVriFFkjMwSfWG/GDL+eZ4/IH4=)
2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Validity
Not Before: Jun 1 05:09:09 2026 GMT
Not After : Jun 8 05:09:09 2026 GMT
Subject: CN=6a1d13f6-4628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:6e:b4:dd:26:f5:b7:b5:2d:29:99:b3:c5:
a4:eb:f0:c5:2e:3e:2d:29:c2:7e:71:2b:b3:21:33:
2c:ff:af:3e:69:17:0c:19:47:91:2d:73:d4:1e:29:
c0:55:e5:10:d9:8b:6f:22:47:27:40:89:49:50:3a:
37:0b:09:2f:a6:fd:88:3d:b9:4b:b0:ee:52:af:ef:
89:31:f3:dd:06:ab:1d:1b:db:08:c0:3f:24:01:9a:
32:3c:1e:0d:af:de:38:8d:f1:7d:05:d2:13:d0:0a:
52:91:60:c3:a9:dd:f4:bf:db:3b:d6:c8:bb:37:d4:
37:4d:d6:68:8d:71:bb:d7:bb:de:2f:a1:10:9e:bf:
a9:90:8f:76:1a:55:71:83:cd:97:62:ff:22:96:02:
35:b0:3d:45:49:74:e3:39:f8:71:4d:23:f4:bc:47:
69:9b:50:02:46:ee:88:dd:1f:48:82:5d:e6:06:2c:
04:80:63:6e:9c:2c:56:c5:d1:3b:28:4a:12:f8:b0:
2f:ca:64:51:8e:24:66:57:a1:1f:f8:9d:74:1d:d8:
17:67:b6:fd:20:5e:a0:47:e3:fa:4d:c8:cb:68:76:
46:9b:41:e2:b9:ca:aa:01:52:79:b6:93:e8:0b:c2:
4c:80:1d:6a:8c:34:11:5a:eb:41:10:6b:37:e4:d4:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:45:94:67:76:23:8A:F4:2C:0B:2B:4B:42:8C:62:81:F6:FA:22
X509v3 Authority Key Identifier:
keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:41:21:be:29:fe:f7:b0:93:86:67:c8:59:d0:40:c4:e9:
c3:34:33:73:f2:9d:a2:ef:a3:ab:43:7e:63:90:39:a9:27:1a:
d9:5c:27:15:dd:27:e8:1b:23:51:69:f4:e0:22:bd:a5:da:6b:
92:b2:02:25:76:da:90:af:21:83:52:86:ca:11:a7:a2:7b:ca:
de:14:44:ed:c5:30:ce:0e:f5:d9:65:9b:08:aa:5e:78:d7:f2:
74:79:59:55:1e:8c:a4:8d:d5:46:98:a7:af:af:01:41:31:8c:
e9:d9:70:de:1d:49:78:0e:01:7c:30:34:08:d0:31:d3:03:d2:
d7:f4:cb:b1:0b:41:86:79:cc:16:f5:b8:f5:83:01:59:0a:69:
79:ee:09:79:17:67:94:71:fa:b2:68:18:a1:69:59:3f:f6:71:
27:5a:72:6d:3d:d4:41:29:5d:7d:e6:16:01:f0:3c:46:13:5c:
98:b7:0a:0d:c5:e6:72:a3:62:bd:d2:5b:2a:e0:4e:10:17:a3:
71:06:9b:7c:a7:79:f2:b3:14:7c:de:78:8e:b1:cb:88:8d:46:
26:94:41:75:d4:48:b4:5b:ab:3f:59:ec:a1:aa:78:44:01:54:
cd:11:fc:a2:b2:92:91:e7:1c:ac:fc:2a:74:0c:c9:4c:b1:c4:
7a:21:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:40 2026 by rpki-client