
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json)
Hash identifier: HWwCVkiiHC8mcZ/GavUN37+/4Btor7NWrqeCiikgAWs=
Subject key identifier: 3A:05:08:A9:4A:8B:0D:54:EA:A0:20:2B:1D:A3:F4:9B:67:9E:48:9A
Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D
Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
Manifest number: DA
Signing time: Tue 23 Jun 2026 06:52:18 +0000
Manifest this update: Tue 23 Jun 2026 06:52:17 +0000
Manifest next update: Tue 30 Jun 2026 06:52:17 +0000
Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: McwsoXAj0PaQrMqQS+nc5idbJ/vC7H6FzlvONiQKY/E=)
2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: cpTkaIVcfxMsjIQ1xhEgH02kzgyJBnRj6lfOSU2p6Zo=)
3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: D/OzwXsfqgyoo+s7SIt2MT/fG+YoQqkSHFrfFh1LpUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl
rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D
Validity
Not Before: Jun 23 06:52:17 2026 GMT
Not After : Jun 30 06:52:17 2026 GMT
Subject: CN=6a3a2d22-e697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:ce:d7:88:04:a6:46:69:47:6f:79:94:d0:
d0:f5:1c:9e:d6:ce:34:13:39:e8:30:34:0b:70:13:
d0:81:35:d4:ae:ae:f7:7b:c5:12:c5:6b:fc:0e:a4:
e7:cd:bd:59:69:71:c2:16:6f:51:ad:ba:e0:f7:31:
a0:bd:72:9b:1c:6b:7a:b2:88:e0:78:04:fb:c9:46:
0e:35:31:13:3c:76:18:88:91:3a:03:f7:92:5c:97:
a9:25:4b:b8:d9:00:70:2c:cd:82:d8:46:65:04:1b:
9d:6e:fd:ea:93:72:d6:3a:da:61:be:21:e7:c7:a7:
e4:38:2c:db:ec:8c:f2:75:67:5f:a1:4d:52:ff:28:
67:27:db:03:b7:10:db:9e:52:1a:f7:66:04:e9:6f:
7b:c5:f2:1c:00:1f:da:3d:49:c7:27:b6:6c:0e:5e:
47:0d:c2:24:8b:8c:42:fe:90:c3:04:84:fc:7a:4d:
8f:92:56:86:36:bb:96:75:0a:f2:c8:9a:04:f5:28:
91:d9:de:c4:db:86:8e:27:c3:6e:bb:61:8c:04:ee:
34:bf:c3:3c:39:3a:e5:28:f8:3b:e7:a0:64:8a:94:
94:90:89:02:1a:d9:f1:c3:d5:18:7b:a8:db:50:35:
6a:57:ab:93:32:cd:90:de:9f:64:51:a6:79:ec:bf:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:05:08:A9:4A:8B:0D:54:EA:A0:20:2B:1D:A3:F4:9B:67:9E:48:9A
X509v3 Authority Key Identifier:
keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:bb:cb:44:11:71:42:f9:1b:d7:5e:a3:5f:dc:94:e7:9f:4d:
08:38:a7:03:17:ae:f0:c2:b0:33:65:86:32:78:17:79:1c:47:
c2:39:77:31:2b:1c:aa:aa:74:4a:68:89:98:fb:b9:e8:eb:9c:
d7:31:06:d0:f5:6f:a9:78:2b:2e:d5:97:b5:cd:c4:64:76:0f:
58:fd:b8:54:30:a3:30:bb:93:b7:1e:37:07:57:d8:a1:bd:db:
1f:a9:ae:00:48:c3:17:3d:0f:28:3a:6f:38:62:a4:5b:10:d4:
f2:96:84:03:11:60:f1:cb:5b:f1:24:5a:7a:a6:f6:04:22:de:
31:80:29:ca:fc:2e:3d:54:32:64:d3:7d:8d:07:4f:07:1a:0b:
a0:da:f1:79:03:eb:7a:f0:38:8d:69:37:bc:4a:4b:eb:a9:f8:
12:06:cb:69:ed:4f:6d:d8:59:40:cf:66:95:c3:29:24:00:1d:
ed:ae:3b:1b:6c:61:37:21:9e:fe:75:de:d6:bc:da:ae:75:6d:
91:15:b2:6a:16:31:eb:3d:e6:48:bf:5c:2f:e4:48:8e:a2:ec:
6e:7d:4c:db:43:11:da:6b:08:a7:86:f4:a9:00:d6:ee:6e:be:
c1:90:40:b3:3a:72:68:fd:7d:5e:ff:61:70:31:b1:74:94:7c:
fc:c6:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:01 2026 by rpki-client