
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier: 67BLamMOmgLtOYsM5XFkU3kjn5EoFvuI31zFL1PzU7c=
Subject key identifier: 96:EB:3E:FB:7D:C5:0C:29:FA:F8:C4:2A:F9:60:74:11:E4:09:82:49
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number: 08F0
Signing time: Wed 10 Jun 2026 20:21:36 +0000
Manifest this update: Wed 10 Jun 2026 20:21:36 +0000
Manifest next update: Wed 17 Jun 2026 20:21:36 +0000
Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: uefx1zYCj/ighNGlHnpUViR7J2ev/Y77ELlRKceTCJs=)
2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=)
3: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=)
4: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Jun 10 20:21:36 2026 GMT
Not After : Jun 17 20:21:36 2026 GMT
Subject: CN=6a29c750-f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:10:1b:d7:8e:79:91:e1:0f:72:4e:09:a4:
68:8d:2b:f4:d4:42:e1:d3:24:32:73:92:12:95:1e:
96:90:59:49:21:16:26:30:8f:db:04:69:6a:0c:77:
53:29:ca:ad:17:f3:e6:1a:05:00:38:8c:68:0e:21:
df:3a:ef:3d:19:5b:60:c9:7d:5d:4d:2f:bb:65:00:
47:c2:65:92:d0:65:39:f0:c7:44:26:94:3c:cd:5a:
04:8f:ad:31:2f:bc:ba:84:3f:36:8c:00:df:59:1a:
7b:5e:4c:ab:ce:f1:22:65:62:6d:4b:aa:cf:24:5c:
a8:6c:2f:ff:e8:40:56:0b:03:36:95:35:ad:c7:11:
a6:59:9e:57:5c:e2:49:22:e6:98:ce:d2:9a:58:ba:
5d:49:75:d1:64:03:e5:03:f0:2b:56:c0:32:f1:a1:
d1:24:ef:bb:36:2a:43:5f:db:20:2e:be:f3:dc:da:
9d:44:c5:32:c1:d5:bf:94:eb:78:30:8a:77:90:7d:
59:25:d5:29:cb:04:89:d4:37:33:6d:7e:db:c0:5c:
40:81:c4:2c:c1:51:ca:41:24:2a:4b:0f:31:4b:05:
7c:09:44:61:2b:90:9f:2d:6a:f3:0b:8f:72:d9:a5:
64:73:41:e0:f4:64:44:9e:51:19:da:5d:37:ff:cd:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:3E:FB:7D:C5:0C:29:FA:F8:C4:2A:F9:60:74:11:E4:09:82:49
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:96:71:07:94:b2:93:c0:16:55:b4:ee:44:bc:b3:2a:60:
38:df:0d:81:a4:ce:ce:89:21:bf:33:0b:94:65:b2:75:5b:dd:
65:10:62:11:b2:55:c8:41:9c:62:a1:af:c3:3e:21:13:ad:a9:
a4:97:cc:42:ea:7f:34:33:8c:66:2b:9a:65:eb:5b:2b:87:42:
e9:03:59:59:92:27:47:0a:bb:5a:e9:e7:d0:eb:40:e7:c2:b2:
20:77:7f:48:30:9f:34:3f:9e:de:63:0e:41:d4:cd:33:fe:5c:
60:2c:1c:34:b9:47:3f:ba:76:32:77:8b:a9:88:02:79:85:d8:
46:af:d3:ef:3c:0e:4d:da:59:91:4e:03:a9:5e:12:18:c1:c5:
09:36:16:f5:cb:bd:ef:cb:ea:80:07:8f:30:33:24:93:af:d0:
f3:da:d6:a1:d3:49:80:06:65:09:3c:f0:c9:bf:d5:18:1c:e8:
cc:8f:e2:13:3a:00:75:f5:a1:22:d4:18:f3:6d:a8:8c:ed:f6:
07:d1:71:68:47:d8:ca:fb:60:23:5e:0f:37:d3:52:6e:05:63:
01:93:45:0b:7c:7a:3d:52:1f:2f:bb:87:25:fb:e1:8b:16:a3:
5b:86:dd:34:ed:e2:7d:fa:ce:16:1d:69:76:22:2d:eb:3c:36:
c7:e6:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:47:56 2026 by rpki-client