
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier: 1LAcvV08a8N9zccGamstJHonLzIZ/68XnNuzuf91qQU=
Subject key identifier: 6C:17:6B:C8:23:F4:EF:2B:4D:0E:6C:49:5B:D0:9C:C2:DF:85:29:4B
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial: 2CFD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number: 2CFA
Signing time: Thu 04 Jun 2026 14:26:36 +0000
Manifest this update: Thu 04 Jun 2026 14:26:35 +0000
Manifest next update: Thu 11 Jun 2026 14:26:35 +0000
Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: KLX7+VogfoJGEMBds51x+cAB8WUS1U56FgyuCBzSs4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11517 (0x2cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Validity
Not Before: Jun 4 14:26:35 2026 GMT
Not After : Jun 11 14:26:35 2026 GMT
Subject: CN=6a218b1c-228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:56:bf:40:b7:5e:f3:30:1d:fb:81:15:09:
f7:0b:ff:af:1a:2b:99:87:75:68:90:b4:fe:07:79:
fd:ef:4c:a3:4c:2c:cd:d1:e1:a6:82:68:47:c4:fe:
22:89:a3:03:fc:29:1e:6f:aa:72:d5:99:53:5e:f1:
a5:87:b7:04:11:7d:80:da:a8:34:9d:b5:5a:d8:98:
91:53:d8:c2:7b:e7:14:db:e4:eb:03:3e:4a:68:25:
01:cb:09:47:b7:78:6b:ec:b4:2d:32:2a:e8:a5:5a:
f1:ca:62:9a:79:1c:07:36:17:30:dc:eb:dc:57:6c:
87:31:af:af:e4:70:f0:69:1a:e1:49:45:19:57:ec:
3c:51:8c:c0:a5:dc:8f:64:14:06:bc:2c:b3:c5:f3:
30:f9:17:d7:9c:67:9e:40:b0:75:5c:40:82:d1:db:
6e:2d:39:e3:53:8a:9e:84:69:b2:68:7a:a8:43:74:
d3:32:9d:e8:a2:e3:83:81:19:73:4a:e6:92:70:52:
e5:61:3c:f1:45:32:f1:4a:17:70:96:15:47:cd:39:
43:2a:ed:77:2d:69:71:63:f4:b9:0e:9f:82:44:32:
4d:7a:29:ad:f3:c7:4e:d0:a6:b9:32:5a:0c:67:57:
5b:38:78:b9:d5:b8:13:75:da:a8:13:24:f1:a7:92:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:6B:C8:23:F4:EF:2B:4D:0E:6C:49:5B:D0:9C:C2:DF:85:29:4B
X509v3 Authority Key Identifier:
keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:29:1a:d4:68:a3:68:ae:1d:f1:b2:8f:b2:a9:e5:28:e7:fb:
cd:8d:f4:39:5a:a4:16:da:7c:53:ed:01:e1:11:eb:33:1b:2d:
20:46:70:56:1b:18:ae:71:e5:21:0b:0b:c9:72:c8:84:8a:46:
68:03:e6:cb:36:55:c5:61:bd:5a:c5:71:14:f4:1d:bc:74:97:
8a:4c:c3:6a:a0:14:ba:0b:57:c7:2b:8a:31:82:a0:fa:4b:51:
c1:15:87:a0:f1:11:80:20:c3:d3:d2:2f:c3:aa:9b:c1:9e:fb:
29:13:0e:ab:cd:61:dc:7e:df:8d:97:f4:0b:c0:18:6e:0a:76:
14:f9:3f:3a:e6:79:63:1a:04:af:69:4c:34:b8:dd:c5:6d:25:
03:99:c3:02:da:be:48:14:03:76:4a:74:ac:c8:2a:70:d3:01:
03:1a:34:6a:01:33:0b:03:1d:86:a0:32:25:b4:96:3d:c7:a4:
18:8d:90:0e:d3:8f:f3:b7:87:eb:b5:ae:92:9c:b1:a5:35:4c:
e6:93:47:60:20:01:6f:2f:14:2b:d3:4b:28:09:16:be:86:2e:
c9:c6:c7:d3:df:31:c7:6a:a3:b1:2e:f8:29:b0:bc:35:75:b5:
b7:e4:13:79:1e:f5:89:69:98:f3:b6:4c:14:d4:3a:64:9e:dd:
10:81:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:21 2026 by rpki-client