
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File: u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier: tO2+eVUcAPE053kqpLpaJudoVEELvBVxsIym7Tpzftg=
Subject key identifier: EC:03:0A:8C:D0:03:6A:42:08:8F:F2:94:37:97:E9:ED:AC:49:CE:90
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number: 089A
Signing time: Mon 22 Jun 2026 20:46:57 +0000
Manifest this update: Mon 22 Jun 2026 20:46:57 +0000
Manifest next update: Mon 29 Jun 2026 20:46:57 +0000
Files and hashes: 1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: DMU5T02xG7la7t5tdiipLI2WvGGobRoB9n4n36D04t8=)
2: 862720F4031611EB9086351AC4F9AE02.roa (hash: dI4uEYRTevD4k8lUcliTFdH9yVvmS9D4l9JYwuyuP2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Validity
Not Before: Jun 22 20:46:57 2026 GMT
Not After : Jun 29 20:46:57 2026 GMT
Subject: CN=6a399f41-ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:f6:ff:4c:1d:d6:35:b6:8f:ef:6a:ef:27:
90:36:a4:e0:c0:b9:d3:f6:3e:d1:88:ec:1d:73:26:
a8:2c:06:d1:e0:f5:d7:97:46:43:87:11:98:93:dd:
0b:90:70:c3:2a:e1:30:57:11:00:db:a8:3a:64:f4:
be:6e:d6:ea:c9:c5:c2:a0:a8:fa:f0:cf:2c:76:70:
0b:22:d2:42:bd:d9:42:26:45:8c:58:01:8d:d4:9a:
e6:3b:b7:4b:d5:de:a5:c0:f3:23:5a:db:94:50:2c:
48:12:f5:31:e6:62:07:28:45:f7:d4:54:fe:33:7a:
a0:59:55:01:43:14:0b:94:df:2b:80:cd:f1:18:a1:
f8:ea:d6:09:90:a2:59:68:0e:3a:ca:82:37:9b:87:
e4:d6:34:bc:36:f6:37:a2:2b:4a:74:6a:ca:0a:fc:
3b:b1:a3:23:39:2e:7b:dc:6f:ac:24:71:f5:6e:5c:
64:a7:fb:8c:9c:4d:12:32:1d:b6:0a:7f:3f:85:56:
e4:34:16:74:89:c3:c5:8d:42:5a:78:cb:d9:bf:7f:
99:14:9e:32:44:70:d5:98:6a:3b:ba:ac:aa:49:bf:
88:36:5d:df:b3:29:36:bf:e2:a3:f5:67:94:43:60:
46:1d:f2:69:91:db:43:b7:67:5a:be:49:64:1f:9e:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:0A:8C:D0:03:6A:42:08:8F:F2:94:37:97:E9:ED:AC:49:CE:90
X509v3 Authority Key Identifier:
keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b9:3e:d5:ba:d5:ae:df:43:ee:83:f9:84:7d:fb:81:fc:ec:
ab:3c:28:16:9a:81:0a:3e:60:07:0d:13:15:1f:40:1d:08:5a:
37:21:7b:43:cf:7e:c5:c4:e7:a2:d7:e9:c9:e4:97:6f:75:f5:
8a:a9:d1:27:ac:97:77:fa:10:aa:e9:89:d2:a1:11:7a:97:b1:
89:d4:5d:33:59:b2:2c:dd:3e:43:7c:86:8e:95:6f:9b:86:bc:
ec:57:36:78:84:e8:cc:28:72:06:32:15:2b:68:65:12:33:91:
d5:c6:d6:17:f9:df:c4:93:87:f3:7a:65:ec:e5:48:6a:0e:f7:
9c:97:5e:f4:a5:5f:cf:4c:4e:11:04:10:31:49:98:e7:38:5b:
e1:58:31:0f:60:60:1d:f1:d3:ee:e9:4b:30:75:ae:33:73:bf:
4a:5b:9e:8b:36:3a:a1:ce:80:10:bf:78:10:65:ec:98:53:cb:
fe:2f:b0:37:24:d9:d8:9a:6f:1f:fe:5b:6f:03:a1:97:84:36:
27:51:82:85:a1:6a:2d:af:22:99:fb:4e:de:8d:9a:7e:8e:7a:
87:00:98:06:5f:f7:41:3e:73:61:fe:2f:ea:19:47:92:d1:d1:
d7:4a:ab:5c:85:fc:0c:17:f0:0d:aa:ba:9b:e8:cd:7c:14:a2:
67:89:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:56 2026 by rpki-client