
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier: AOvMmGLaIutfIue0/dxqbVzRAvb3ssYw5jbxXryHdkI=
Subject key identifier: 55:4C:4D:DF:05:D2:1A:E4:78:0C:2A:3C:34:21:D8:BB:06:86:83:7B
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number: 019A
Signing time: Thu 11 Jun 2026 06:36:15 +0000
Manifest this update: Thu 11 Jun 2026 06:36:14 +0000
Manifest next update: Thu 18 Jun 2026 06:36:14 +0000
Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: uvAO5tGR3Rhmbgj9oacdHPJoI1fwCNp1VX7owPyxr50=)
2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=)
3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Validity
Not Before: Jun 11 06:36:14 2026 GMT
Not After : Jun 18 06:36:14 2026 GMT
Subject: CN=6a2a575f-a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:ab:6f:80:03:60:28:e5:74:6d:5e:12:3a:
50:97:3a:d6:06:72:87:6f:12:c6:83:da:47:0b:32:
a6:21:a4:8f:46:7e:70:49:16:02:34:5c:9e:e6:30:
6d:72:fa:37:0a:e1:05:41:f0:24:7d:42:f7:27:d8:
2f:cc:b9:54:05:68:a4:55:1f:13:43:e0:33:b0:92:
8f:0b:df:16:eb:68:10:97:c0:ab:51:8d:f2:e6:e5:
3b:10:83:b0:21:36:16:d7:f4:a5:66:ef:61:bc:f4:
77:40:66:a0:93:bd:c9:60:5e:57:34:e6:1a:a7:6a:
d6:c1:99:08:13:21:89:fb:c9:de:b4:6d:41:54:99:
96:ea:8d:e7:b6:a7:c0:1a:47:1a:25:6e:b4:27:33:
ca:72:9b:8a:bf:a0:66:5e:95:c2:83:01:9b:4c:43:
94:ae:83:37:23:09:8a:95:32:0a:27:63:66:0b:1e:
fc:3e:ac:2c:cc:22:69:a5:13:89:e5:3b:46:97:a9:
bd:5f:aa:4a:ab:b0:31:2d:fc:99:56:a7:f0:ba:bf:
4e:3a:74:77:c9:ce:19:91:a0:23:d9:8c:73:d3:05:
5e:9c:09:7b:a9:e9:74:97:7f:19:98:0c:b5:91:e4:
c0:63:30:cc:6d:b0:6d:ad:4d:ee:b0:73:74:3d:d6:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:4D:DF:05:D2:1A:E4:78:0C:2A:3C:34:21:D8:BB:06:86:83:7B
X509v3 Authority Key Identifier:
keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:f8:b7:26:a0:f3:f8:77:69:99:eb:9c:95:56:45:f2:f3:
a6:3f:c3:6c:85:94:f0:af:11:e4:62:6f:a5:19:a5:e2:83:30:
4f:48:82:07:33:6b:fc:62:5a:c8:0e:6b:0d:f2:df:33:34:86:
54:9e:7b:5a:17:14:92:b2:f3:d3:15:19:86:d7:e2:8d:8f:b9:
ef:66:41:77:12:fc:38:f7:94:69:93:20:ca:6f:6d:4d:5b:c9:
ef:d3:d8:cb:ff:4a:21:67:2b:c1:01:e9:f5:8d:a5:9b:f4:93:
9d:cf:64:ce:29:f1:91:5f:0f:53:a9:d1:2c:d1:a0:4b:ed:d4:
15:f7:51:2d:2b:38:bf:d1:c5:4d:b9:19:57:d9:02:4d:15:09:
0e:aa:fb:c4:b9:16:4f:45:6f:d2:67:44:0e:04:82:3e:87:73:
61:b1:a4:42:ea:d4:af:85:85:2a:ff:24:ef:33:fc:45:b4:48:
0d:34:71:ca:fe:86:7f:f6:91:f2:8b:fa:b0:e7:92:ff:6b:d1:
70:5a:7e:f2:b4:71:f5:3a:f0:d5:75:80:08:c7:fc:ea:14:46:
d9:1d:06:10:d1:7b:83:11:18:15:67:68:5d:b5:cf:b3:36:ce:
ae:13:7f:86:2a:11:06:b7:f3:d5:a4:00:6f:ee:e4:16:81:3c:
23:9f:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:51:57 2026 by rpki-client