
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier: yCH4nbXpSCdNN1Q7V6VqykGbr34VHPRluqBdbn04ptE=
Subject key identifier: E8:3A:E0:69:B1:A2:E4:77:E8:89:89:68:0B:4B:1E:AB:9F:46:3D:F2
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number: 42
Signing time: Fri 05 Jun 2026 08:57:08 +0000
Manifest this update: Fri 05 Jun 2026 08:57:07 +0000
Manifest next update: Fri 12 Jun 2026 08:57:07 +0000
Files and hashes: 1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: w1igB7vSeMSV4RBevpfh6YZ+Ufiq553j3J7T9aI9Pt0=)
2: BA419250081C11F1AD289B7B323D8C67.roa (hash: rFS/SZQK8Yk9ioV0Y+bTAAI4kAqBKXvpYRG0EHKZ9fI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Validity
Not Before: Jun 5 08:57:07 2026 GMT
Not After : Jun 12 08:57:07 2026 GMT
Subject: CN=6a228f63-288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:c7:72:ad:a5:be:28:a2:af:da:d7:67:d2:
ca:8d:d9:51:a9:24:02:d9:06:6c:e1:48:ed:c2:38:
23:4b:6a:e0:00:58:9a:99:e3:18:91:7d:91:c9:ca:
57:44:05:f6:42:3c:3d:d8:6c:6c:e0:75:4e:ee:4a:
36:29:90:59:0d:21:94:04:5f:09:60:c5:62:fe:1b:
42:11:87:69:54:a6:fd:0b:4e:91:8c:82:6a:b5:3a:
24:57:0c:6d:f4:b3:0a:23:8e:13:76:e6:70:46:5e:
3c:f4:04:7e:ba:f2:61:81:a6:a6:72:44:a4:f6:6b:
47:84:78:a4:1e:bc:ef:13:99:3d:9b:3e:43:b1:24:
04:40:aa:7f:9d:e6:66:8e:10:da:07:65:32:2d:78:
0b:1a:2c:34:2b:80:5f:38:ee:b3:01:c6:d5:a6:23:
dc:ba:c9:5d:66:55:d8:e2:bf:f5:0e:5d:ea:ac:e1:
9b:72:14:db:ea:12:53:55:ee:36:39:9a:e3:53:1c:
0f:b0:d7:71:8e:47:6d:03:6b:cc:9d:4d:17:09:66:
47:f4:dc:c5:ef:31:72:ac:20:da:06:4a:f7:05:4f:
91:91:ce:a4:13:3a:b8:f7:c1:7a:54:b7:3f:96:13:
af:ab:06:d9:73:83:c9:77:6f:4e:30:5b:9b:06:f3:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:E0:69:B1:A2:E4:77:E8:89:89:68:0B:4B:1E:AB:9F:46:3D:F2
X509v3 Authority Key Identifier:
keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:e3:be:bf:ef:e2:d1:1f:d4:05:c6:91:82:c7:5b:53:d0:
3c:26:1d:79:53:2e:fd:9a:e3:02:27:bc:1c:3d:b0:fb:85:d7:
4b:e3:1a:2e:cf:4e:6b:39:17:58:18:c8:86:a5:f6:b2:e7:44:
ad:39:34:d3:6c:ad:91:ee:35:f8:cb:dc:83:c5:c2:aa:ae:2e:
b5:16:0f:32:cb:3f:41:aa:33:7c:a8:f9:a5:5d:81:2d:1e:af:
d4:c4:75:2d:d8:b7:51:14:05:ad:95:a1:ce:1a:33:92:77:e0:
0c:db:da:b5:a9:38:96:6c:0b:7f:53:79:67:aa:a3:61:cf:ac:
11:0d:e6:7c:e9:32:2c:42:21:a6:94:83:1e:f8:7a:c2:0f:36:
b0:ff:42:ed:30:cd:2c:ae:ce:41:b2:f6:11:db:80:39:ee:51:
7e:47:95:fd:41:d2:b0:14:79:f1:e9:d3:99:6e:e1:01:fc:a1:
b6:5b:6e:80:0b:58:5f:aa:ae:a1:2c:95:60:55:59:17:8f:0b:
0e:bd:fd:22:72:1d:ae:26:15:10:c6:5c:30:4d:70:47:cf:ac:
92:05:91:9a:ba:ba:37:a9:87:16:c9:1a:35:d4:93:cf:73:ef:
f5:ec:e8:9a:35:f1:b2:e6:61:4f:ae:72:44:ed:7d:67:76:fa:
10:89:ee:0e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0IwNjExMC8GA1UEBRMoMzFENDQzOTQ2NzE2MTA2OEREMzA0NTdDMzgzOEZFNjM1
NjkyN0QzRTAeFw0yNjA2MDUwODU3MDdaFw0yNjA2MTIwODU3MDdaMBgxFjAUBgNV
BAMTDTZhMjI4ZjYzLTI4OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8KMdyraW+KKKv2tdn0sqN2VGpJALZBmzhSO3COCNLauAAWJqZ4xiRfZHJyldE
BfZCPD3YbGzgdU7uSjYpkFkNIZQEXwlgxWL+G0IRh2lUpv0LTpGMgmq1OiRXDG30
swojjhN25nBGXjz0BH668mGBpqZyRKT2a0eEeKQevO8TmT2bPkOxJARAqn+d5maO
ENoHZTIteAsaLDQrgF847rMBxtWmI9y6yV1mVdjiv/UOXeqs4ZtyFNvqElNV7jY5
muNTHA+w13GOR20Da8ydTRcJZkf03MXvMXKsINoGSvcFT5GRzqQTOrj3wXpUtz+W
E6+rBtlzg8l3b04wW5sG8zdrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6DrgabGi
5HfoiYloC0seq59GPfIwHwYDVR0jBBgwFoAUMdRDlGcWEGjdMEV8ODj+Y1aSfT4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDQjA2LzcwNEQ0QkMyMDdF
NDExRjFBMzQ3MThBNTIxM0Q4QzY3L01kUkRsR2NXRUdqZE1FVjhPRGotWTFhU2ZU
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWRSRGxHY1dFR2pkTUVWOE9Eai1ZMWFTZlQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
QjA2LzcwNEQ0QkMyMDdFNDExRjFBMzQ3MThBNTIxM0Q4QzY3L01kUkRsR2NXRUdq
ZE1FVjhPRGotWTFhU2ZUNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNt+O+v+/i0R/UBcaRgsdbU9A8Jh15Uy79muMCJ7wcPbD7hddL4xouz05rORdY
GMiGpfay50StOTTTbK2R7jX4y9yDxcKqri61Fg8yyz9BqjN8qPmlXYEtHq/UxHUt
2LdRFAWtlaHOGjOSd+AM29q1qTiWbAt/U3lnqqNhz6wRDeZ86TIsQiGmlIMe+HrC
Dzaw/0LtMM0srs5BsvYR24A57lF+R5X9QdKwFHnx6dOZbuEB/KG2W26AC1hfqq6h
LJVgVVkXjwsOvf0ich2uJhUQxlwwTXBHz6ySBZGauro3qYcWyRo11JPPc+/17Oia
NfGy5mFPrnJE7X1ndvoQie4O
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:25 2026 by rpki-client