
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: QH19drRqWMvrfiOXUJsQT+zzqyPUx00rarER0nPdSrw=
Subject key identifier: 9E:BC:9B:0C:E8:CE:24:93:82:48:AA:29:72:AB:43:CA:AC:05:EE:96
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 087E
Signing time: Tue 16 Jun 2026 20:43:18 +0000
Manifest this update: Tue 16 Jun 2026 20:43:17 +0000
Manifest next update: Tue 23 Jun 2026 20:43:17 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: 8xNKzzAVP2xidI4OqJ98ZlXczuDO+nS3dPsgHu51J00=)
2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=)
3: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=)
4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=)
5: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=)
6: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Jun 16 20:43:17 2026 GMT
Not After : Jun 23 20:43:17 2026 GMT
Subject: CN=6a31b566-0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:ca:33:05:d9:ae:bf:ec:1b:0e:3f:fa:f9:
10:8f:13:72:59:83:6e:04:7a:90:9f:52:ea:91:6b:
9d:b1:97:8e:0d:35:7d:a0:5b:67:1b:51:dd:76:2f:
23:bd:75:24:bd:21:4d:91:8a:dd:cc:4d:31:71:38:
ee:05:d4:cc:5c:2e:10:35:93:28:9b:d9:e8:70:69:
f5:20:b7:8e:ae:87:17:18:74:7d:76:b4:07:4b:f4:
30:8b:57:6b:a4:63:a9:97:38:93:d8:eb:2b:52:eb:
bb:d9:f4:13:73:a5:7e:e8:34:7d:16:59:84:4d:d8:
96:f6:ec:0e:80:e0:20:86:29:5d:27:b5:59:d6:07:
8c:66:19:6e:93:0b:4c:b4:ba:34:8e:53:02:9d:dc:
07:ab:81:57:bf:cf:ec:2b:d9:6d:84:71:c8:e9:1d:
76:d0:84:50:ab:f8:37:0e:49:e6:ff:ba:2a:9c:1c:
88:73:ea:5d:a4:dd:86:4b:52:cf:96:48:29:40:ef:
fd:56:d1:37:95:6d:6c:40:e0:e5:4b:a6:22:b5:42:
d9:4d:78:07:84:71:a2:bd:b1:1a:9a:1c:b6:02:78:
c2:cf:84:d5:19:35:5c:92:df:ac:e7:e6:88:90:69:
da:0d:ba:78:40:57:8e:00:87:0f:c4:08:37:94:13:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:9B:0C:E8:CE:24:93:82:48:AA:29:72:AB:43:CA:AC:05:EE:96
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:1c:6a:30:6a:54:15:44:37:a6:2f:9b:23:0f:29:4c:16:
0d:e7:dc:e6:c4:c0:e4:0b:8f:dd:2e:47:40:71:00:8d:fa:02:
8a:d4:25:41:ec:29:c3:f2:c3:90:a0:6f:33:f3:f1:49:f5:52:
2a:6f:b3:b0:a5:2a:1d:f2:a8:12:3e:dd:ef:b9:7c:31:b2:96:
db:92:28:fe:a2:5a:d8:71:f2:55:a5:09:7e:6c:1a:6b:87:4b:
6f:42:eb:99:be:c1:45:c6:11:06:0a:47:a4:71:47:18:bb:f4:
1e:50:38:a7:88:0f:23:00:47:b5:a7:65:5e:43:5c:c0:b2:8f:
98:25:3a:94:66:a1:e0:3e:e8:2e:82:54:fd:21:61:8d:c6:30:
54:64:46:b0:44:4e:c0:f3:8e:3f:1a:be:1c:44:d8:0c:e9:17:
8e:61:ce:0e:0e:cf:81:af:55:3a:08:1e:da:34:83:41:be:12:
7f:fe:57:95:07:60:74:d2:d2:75:0a:b5:d9:54:ad:36:40:ca:
0d:fb:d5:2b:55:ed:af:bb:e4:9f:5d:a1:f1:8a:68:cc:2d:03:
d7:0d:19:70:c2:f1:38:cf:f5:93:e4:6d:45:ec:76:03:2e:fd:
3f:0f:43:b5:60:4f:c7:55:88:82:72:1f:33:67:90:17:93:69:
93:04:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 19:13:56 2026 by rpki-client