
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json)
Hash identifier: z4EY9N69UgRTa9XcUfDGqTq5dv9fkx153x/OeyR20Cs=
Subject key identifier: CC:93:68:2B:F2:24:74:1C:9A:85:24:F8:B4:E9:A9:0A:95:89:C6:56
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
Manifest number: 0168
Signing time: Mon 01 Jun 2026 05:34:38 +0000
Manifest this update: Mon 01 Jun 2026 05:34:38 +0000
Manifest next update: Mon 08 Jun 2026 05:34:38 +0000
Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: h21hPwMZLI9FKSi4k17jwtkYQnqyH9MIwODsmJLHIiU=)
2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Validity
Not Before: Jun 1 05:34:38 2026 GMT
Not After : Jun 8 05:34:38 2026 GMT
Subject: CN=6a1d19ee-fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:ea:21:a6:ba:20:5f:d0:51:5d:c9:38:26:
d4:e0:5c:46:0f:94:07:4e:c4:4d:19:4f:bc:7b:52:
cb:26:eb:1c:2d:9c:97:01:67:8e:af:7f:d8:3a:60:
e6:3d:3f:6e:3a:bc:5e:2b:21:f9:27:35:f4:cd:a0:
15:a1:ca:ad:24:cf:4c:e6:58:3d:04:fd:9f:dd:f8:
6c:b1:90:61:0f:4c:e2:43:51:be:a2:f3:c9:c7:19:
5c:09:44:d0:09:ea:10:e2:08:2b:74:37:5f:43:d9:
2a:ec:07:70:91:f6:82:9f:a0:a8:ea:22:cb:ce:8a:
54:74:e5:7a:bd:75:27:64:21:61:2c:28:03:be:4e:
ef:d2:31:2a:02:26:49:26:d5:4d:6b:eb:fb:d6:12:
8d:ad:03:72:2d:89:0e:71:b3:7d:47:d4:61:cb:50:
7f:36:f1:a0:77:13:83:de:8a:9f:9b:5a:61:a4:66:
ce:14:20:24:bd:12:6b:79:f7:32:59:f3:fe:e2:48:
ce:d6:31:22:b7:0b:7b:36:b6:e7:1a:e0:e4:11:7a:
9b:6a:8f:29:7d:45:ea:2f:d6:83:ce:3c:6d:49:a1:
af:e5:24:52:01:e5:6a:9d:e9:9d:ed:f2:63:bf:fd:
fe:96:87:5f:7a:95:bc:c1:a2:ce:2d:ab:71:8d:02:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:68:2B:F2:24:74:1C:9A:85:24:F8:B4:E9:A9:0A:95:89:C6:56
X509v3 Authority Key Identifier:
keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a3:bb:5f:a8:a9:5f:51:75:ef:31:1d:bb:73:a1:aa:fa:96:
45:38:5e:6e:ec:5c:ab:64:c7:c9:a5:eb:c5:72:a9:b4:1b:9a:
11:b0:ac:44:c1:c0:d1:d9:a1:9b:c2:6d:21:f2:af:f3:e2:1b:
72:cf:45:e6:cd:78:a5:77:80:12:6b:f9:68:3c:15:55:29:14:
47:c2:cd:41:e7:65:11:7a:48:37:6d:07:94:de:54:52:8d:1f:
7b:bb:06:61:ac:34:b1:f3:95:d4:24:45:65:a0:37:52:21:d4:
59:86:86:79:14:d6:9e:92:6e:a0:d6:32:7d:ad:95:f4:24:11:
af:cb:ca:c7:49:c9:e0:49:da:f7:03:68:5f:34:f6:1d:2d:19:
9f:1f:14:25:69:8c:22:70:10:f5:cc:50:d7:c6:79:3c:e4:12:
02:76:93:b6:62:cb:fc:45:e2:b8:7b:df:02:54:a2:33:63:43:
ac:30:2e:fe:5d:3c:7e:ff:51:71:10:06:95:ba:83:e7:e2:0a:
a9:21:a0:d4:45:c9:c1:7e:94:78:46:69:a5:ab:fd:6b:6f:1a:
ce:32:64:a3:62:d4:d4:fc:41:9c:ea:14:c3:5e:41:bd:43:52:
86:5e:28:f8:05:66:0e:d0:d1:f7:73:71:1e:8d:63:90:52:93:
58:23:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:38 2026 by rpki-client