
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier: I24xmZvfYN9EJHsYzO9wvGLPRmKZHFOX3ovXHCRFKmY=
Subject key identifier: EA:8C:42:71:4E:C8:DC:EB:30:ED:40:2D:30:55:70:3F:4C:EB:52:0A
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial: 1476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number: 1454
Signing time: Fri 12 Jun 2026 16:51:38 +0000
Manifest this update: Fri 12 Jun 2026 16:51:37 +0000
Manifest next update: Fri 19 Jun 2026 16:51:37 +0000
Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: OsMTL1n9MERYbsk6TMd+TNOwbsLrAfo+XpTaq/anXy8=)
2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: KULiokLKjpXc0pp9Pep/euPdtbUiF2v7Pq95R/P+7Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5238 (0x1476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Validity
Not Before: Jun 12 16:51:37 2026 GMT
Not After : Jun 19 16:51:37 2026 GMT
Subject: CN=6a2c391a-dd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:cc:f3:08:3b:74:0b:e1:c4:31:41:c2:39:
94:71:e0:57:81:7e:30:25:a6:f7:46:f5:09:a3:82:
8a:0d:57:9d:9b:c1:77:ae:31:dd:61:e4:43:d2:f2:
8c:85:09:93:75:e4:86:2b:1d:03:d0:e3:ef:a7:16:
5b:34:af:9d:4e:6b:6a:8c:2a:04:57:b3:07:91:e8:
81:97:12:0f:d7:7c:aa:60:8b:05:d1:89:0b:4c:ff:
39:46:b4:a1:fd:a2:52:11:bb:6d:61:ed:94:d7:2d:
4d:54:0a:56:de:10:aa:e1:1a:31:4f:65:7b:7b:d2:
c8:5d:ae:b7:ea:a3:44:c5:52:33:66:20:52:93:08:
1e:25:12:b3:6f:8a:73:10:a5:8e:e5:f1:26:ff:a3:
68:e5:76:61:91:2d:f6:0d:8f:97:19:42:79:83:df:
54:87:cf:c7:fc:d4:cb:ce:f0:ac:88:9d:3e:3d:44:
5a:56:aa:00:fa:9a:66:da:e6:79:57:38:f1:3c:2f:
56:ad:ef:45:14:2f:50:f0:2d:50:1d:28:86:93:ef:
19:22:62:80:60:49:7c:75:50:56:18:0e:5a:f7:20:
62:25:12:ce:3a:d1:77:c0:06:16:53:69:ad:f7:0e:
d3:f0:82:2d:c0:1d:eb:85:2e:e3:1b:25:50:2d:52:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:42:71:4E:C8:DC:EB:30:ED:40:2D:30:55:70:3F:4C:EB:52:0A
X509v3 Authority Key Identifier:
keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:e6:b3:7b:2a:de:a3:56:e5:c4:04:82:84:1d:c9:26:1d:
42:82:99:05:9c:0d:dd:00:f3:bc:c3:f3:e3:cd:0e:b1:0c:99:
f1:66:fc:7e:e1:9b:28:04:47:69:43:83:14:b8:a6:67:b3:d3:
8c:4c:b1:9f:df:0d:25:da:7e:e8:ff:52:90:71:a8:9a:91:80:
5b:b4:98:75:d1:96:dd:50:ff:ab:4f:e8:15:fe:d9:1d:66:09:
66:8d:1b:e4:8d:43:1d:a2:b1:f6:2e:eb:04:ab:cc:9c:bf:4e:
41:8b:51:eb:70:be:76:26:1b:a8:98:dd:c9:4c:ba:e0:64:8f:
e3:79:60:f4:bc:43:b2:1f:7d:f7:01:56:3c:e7:a2:8c:0a:e3:
28:7e:98:9a:cb:2a:e3:71:45:d1:58:25:5e:16:52:48:15:94:
17:03:be:72:f5:b4:f8:6c:c7:88:a9:ce:0f:2e:30:9b:92:b0:
05:a8:3c:0a:c4:24:8d:e6:30:d9:0f:0a:47:db:c3:d0:15:1c:
0e:76:2d:66:8e:f5:b9:da:60:0d:0e:b6:5d:bb:74:aa:6c:4e:
03:5e:34:4a:88:d5:4d:f0:2e:c8:c7:54:ee:f5:db:45:34:97:
ce:f0:54:fa:31:3e:6b:5f:37:8e:2a:4f:05:d6:35:75:81:f0:
c3:5a:18:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB
NTE0MkRGMTQwHhcNMjYwNjEyMTY1MTM3WhcNMjYwNjE5MTY1MTM3WjAYMRYwFAYD
VQQDEw02YTJjMzkxYS1kZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAseTM8wg7dAvhxDFBwjmUceBXgX4wJab3RvUJo4KKDVedm8F3rjHdYeRD0vKM
hQmTdeSGKx0D0OPvpxZbNK+dTmtqjCoEV7MHkeiBlxIP13yqYIsF0YkLTP85RrSh
/aJSEbttYe2U1y1NVApW3hCq4RoxT2V7e9LIXa636qNExVIzZiBSkwgeJRKzb4pz
EKWO5fEm/6No5XZhkS32DY+XGUJ5g99Uh8/H/NTLzvCsiJ0+PURaVqoA+ppm2uZ5
VzjxPC9Wre9FFC9Q8C1QHSiGk+8ZImKAYEl8dVBWGA5a9yBiJRLOOtF3wAYWU2mt
9w7T8IItwB3rhS7jGyVQLVI+TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqMQnFO
yNzrMO1ALTBVcD9M61IKMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE
RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR
dTF4MW1YM2w5OWlsRkMzeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWjfms3sq3qNW5cQEgoQdySYdQoKZBZwN3QDzvMPz480OsQyZ8Wb8fuGbKARH
aUODFLimZ7PTjEyxn98NJdp+6P9SkHGompGAW7SYddGW3VD/q0/oFf7ZHWYJZo0b
5I1DHaKx9i7rBKvMnL9OQYtR63C+diYbqJjdyUy64GSP43lg9LxDsh999wFWPOei
jArjKH6Ymssq43FF0VglXhZSSBWUFwO+cvW0+GzHiKnODy4wm5KwBag8CsQkjeYw
2Q8KR9vD0BUcDnYtZo71udpgDQ62Xbt0qmxOA140SojVTfAuyMdU7vXbRTSXzvBU
+jE+a183jipPBdY1dYHww1oYEg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:21:22 2026 by rpki-client