
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier: Tx17gL8JLlgffVAZzExtF02dt8ioq5dTWMg0pCZSQFM=
Subject key identifier: BD:D8:B8:2E:48:E7:07:B7:D3:B9:23:EE:44:3E:47:1F:FC:44:AD:B1
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number: 0839
Signing time: Thu 04 Jun 2026 15:55:46 +0000
Manifest this update: Thu 04 Jun 2026 15:55:45 +0000
Manifest next update: Thu 11 Jun 2026 15:55:45 +0000
Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: 8g6AT3DOKQLGJpHKh60+ADQx7RKHGMOKkJQP38ANCVo=)
2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Validity
Not Before: Jun 4 15:55:45 2026 GMT
Not After : Jun 11 15:55:45 2026 GMT
Subject: CN=6a21a001-0c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:d0:9f:d7:25:74:5c:2f:e1:96:3c:6b:4e:
f5:92:57:cb:f5:fc:a0:60:4e:9a:92:d5:b4:5a:93:
15:90:78:e7:fb:47:af:13:63:1e:90:b3:11:0e:ca:
27:2e:fc:17:e5:33:db:5d:57:21:70:0f:46:13:9c:
9d:7c:fe:fa:a8:5a:d3:e7:31:32:d7:6b:03:09:26:
f8:99:3d:4c:09:1e:37:f1:36:c4:77:bf:66:e3:f2:
0c:c6:81:f2:6f:63:f9:51:f2:66:d4:15:76:4e:f9:
e1:0d:0a:d6:7f:c5:b4:fb:4f:d2:ff:f7:42:4c:c0:
c1:73:41:f0:6d:84:2d:bd:a6:b3:2c:27:65:a7:8e:
58:bd:73:f4:ab:5e:fb:d6:a7:ca:29:db:71:b7:aa:
04:81:8f:75:6d:b9:2e:14:9e:e2:22:39:4b:1e:1f:
ac:c1:5a:59:50:55:18:99:da:2a:55:a0:fe:cb:5f:
61:b9:86:b2:d0:30:a2:ec:e8:aa:ed:9e:02:77:b4:
1f:49:5e:af:f5:a3:9a:8d:ec:ac:50:6c:5a:dd:a6:
f9:a2:24:09:db:06:f4:b2:2f:61:97:be:7a:86:ef:
05:ca:ed:d8:61:ce:15:0b:20:58:d3:7b:2f:f3:da:
13:9a:1b:04:c2:51:95:cb:e5:8b:1d:dd:c6:bd:a1:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:B8:2E:48:E7:07:B7:D3:B9:23:EE:44:3E:47:1F:FC:44:AD:B1
X509v3 Authority Key Identifier:
keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:44:d3:39:e8:fe:eb:a9:d2:04:74:01:e5:48:7c:e7:53:ca:
ae:67:6f:17:2e:0b:8f:e5:b5:e1:9f:60:3a:6c:61:31:5e:6e:
0d:23:6d:a2:b8:30:e7:b4:0d:4c:ec:b9:ca:b9:b8:4a:0c:34:
64:78:e7:fe:c3:30:10:52:28:ff:ca:3a:c0:d8:dd:1f:66:41:
42:e2:4e:69:57:97:0f:90:cc:6e:0d:8b:26:85:5a:04:ae:7f:
8e:3b:9d:d0:f1:43:3e:ba:62:c7:5a:c0:db:3f:96:a2:45:14:
0a:e3:d8:eb:63:f1:6a:23:7d:7b:b0:e9:40:c6:11:d3:2d:3c:
83:b1:23:59:2c:a5:bf:25:c8:6b:bc:48:97:b7:aa:a9:4b:a9:
8f:8c:86:93:27:31:b5:c1:1b:37:4f:29:ca:a1:ec:80:bf:90:
a5:ab:2c:c9:6a:5e:c3:04:a9:3c:db:3a:45:6a:6a:1b:ea:39:
5c:bc:2f:6e:18:21:1e:0c:c4:45:fd:e8:62:2e:c1:79:dc:cb:
eb:05:37:44:37:6d:c2:b5:e7:99:89:2f:44:1d:0f:12:a1:6f:
90:eb:0c:ee:29:e8:d2:5e:c9:98:ad:2e:fe:59:4d:4f:1c:77:
90:a1:ef:13:d9:24:01:e0:07:4d:8d:63:7d:45:af:c0:6b:b8:
cf:c1:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:46 2026 by rpki-client