
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: sb21+tK9Guvjpt62tFsx9+KrRr5LREgiuwWTaVPbU0A=
Subject key identifier: 05:26:21:2A:46:8D:38:99:83:E7:2C:34:F3:FB:39:6D:DD:C1:A0:6D
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 01C3
Signing time: Fri 19 Jun 2026 04:02:10 +0000
Manifest this update: Fri 19 Jun 2026 04:02:09 +0000
Manifest next update: Fri 26 Jun 2026 04:02:09 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: AVhJHWXc28sXDN2RWMSPAqWncdPvGS+kxpDPiLgTuSo=)
2: B2F952F624D411F1AA718F4CAB833773.roa (hash: 2wk92MzDpjsXuOZ8ntASKDQ4sTbjcbY5Km2g9d/wyUY=)
3: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: jUlzv+BPveVCQ4DOQfVrNZRZohUrZQ5kxaV6qLf2VRw=)
4: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: 1IW5uQs2D3mZAea5IiAOQwQMw8/u9YBpsGFLZqR7TM0=)
5: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 9v5gtNpE8dXzfsqG3fdMl6Hr0batTTxdzTp1LP0HWPo=)
6: DB21824E24D411F1AAE44A56AB833773.roa (hash: 8GyDfBA1IZDhkRGLkiUjHXF95KxrCV2FUfNeUOQyYBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Jun 19 04:02:09 2026 GMT
Not After : Jun 26 04:02:09 2026 GMT
Subject: CN=6a34bf42-6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:5e:ab:98:74:9a:20:c0:b2:e1:53:a3:e4:
8f:1a:7d:c7:8b:e7:16:99:dd:2c:0b:82:31:60:aa:
75:a9:04:da:d5:7a:4a:8e:23:85:01:ba:f9:88:1a:
45:ec:51:5d:26:50:1f:3a:82:a9:12:3c:f5:cf:a2:
57:eb:54:c3:b3:5c:8f:47:fa:72:21:43:c2:51:ae:
b2:b8:d0:1c:0b:0e:4f:8c:c6:b0:e2:56:78:ce:b1:
51:2c:fd:32:05:d9:0d:56:56:c4:bd:68:36:9c:d3:
e6:0e:95:cb:46:15:26:b9:ee:e9:9a:0b:79:15:eb:
62:58:55:7f:0b:6d:07:b0:af:8d:a0:4c:98:12:d8:
b9:23:9d:dd:c3:db:18:b4:48:3d:97:fd:8a:b4:fb:
78:df:f5:0d:e4:7f:e6:30:d3:f1:b7:b1:2e:69:d2:
ad:1f:76:ae:64:e7:5c:96:24:dd:ea:83:1b:31:f5:
c1:b8:bc:f7:7d:d6:eb:f9:6d:bd:67:69:c9:ef:cb:
9d:bf:d2:74:4e:af:cc:ec:b7:d5:e2:11:ae:c4:a3:
aa:c2:d6:ff:07:9a:d9:20:d7:18:29:81:4e:13:c8:
ea:35:6d:f4:eb:d2:9a:1b:4a:87:08:b2:cf:7d:c4:
30:3a:60:20:a0:ff:44:62:01:02:80:1b:13:7b:bf:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:21:2A:46:8D:38:99:83:E7:2C:34:F3:FB:39:6D:DD:C1:A0:6D
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:9e:49:a3:4e:f4:f6:a9:73:fa:1e:8f:9b:3e:48:59:eb:
35:69:7d:a8:d3:06:0f:1f:03:a8:f1:9a:f8:9c:76:1c:2d:aa:
4e:63:26:1d:1b:21:59:ac:19:a8:ac:d4:a6:1b:b6:82:2c:5b:
46:53:39:54:4e:c9:98:6b:4b:53:aa:83:74:0f:50:fe:a2:4c:
c4:a5:6f:fe:67:1f:f4:91:0b:9a:f6:d8:65:11:85:9a:c0:3c:
ba:20:ea:e9:bb:20:60:8b:68:2c:f2:87:09:6d:a6:f2:3c:b0:
93:57:fe:3d:ee:9d:48:f4:0e:2c:8e:37:27:6b:9b:21:eb:ba:
de:e8:8d:9d:1e:28:f1:b8:4a:a7:0c:aa:08:42:51:6e:72:0c:
f5:cb:dd:20:fb:ae:09:e9:f8:e7:a4:87:1d:36:40:dc:be:14:
6c:db:a4:3d:da:dc:bd:d2:2a:84:5a:12:d2:bf:85:64:2c:52:
e3:74:1a:00:42:63:19:49:8a:a5:9b:c6:dc:0a:9a:c4:93:d8:
c5:62:3e:7c:b1:b2:aa:65:bf:b9:20:7d:6f:66:6c:9f:82:bf:
c8:d2:75:9b:2f:b9:77:36:2b:a6:60:1e:55:55:83:de:65:9b:
54:bf:6a:35:7c:3d:6c:e8:f6:04:c2:21:31:b0:96:90:df:72:
92:9c:cd:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE
QUUyMkM1M0MwHhcNMjYwNjE5MDQwMjA5WhcNMjYwNjI2MDQwMjA5WjAYMRYwFAYD
VQQDEw02YTM0YmY0Mi02Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtc1eq5h0miDAsuFTo+SPGn3Hi+cWmd0sC4IxYKp1qQTa1XpKjiOFAbr5iBpF
7FFdJlAfOoKpEjz1z6JX61TDs1yPR/pyIUPCUa6yuNAcCw5PjMaw4lZ4zrFRLP0y
BdkNVlbEvWg2nNPmDpXLRhUmue7pmgt5FetiWFV/C20HsK+NoEyYEti5I53dw9sY
tEg9l/2KtPt43/UN5H/mMNPxt7EuadKtH3auZOdcliTd6oMbMfXBuLz3fdbr+W29
Z2nJ78udv9J0Tq/M7LfV4hGuxKOqwtb/B5rZINcYKYFOE8jqNW3069KaG0qHCLLP
fcQwOmAgoP9EYgECgBsTe79j8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUmISpG
jTiZg+csNPP7OW3dwaBtMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3
OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4
VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR
dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH3qeSaNO9Papc/oej5s+SFnrNWl9qNMGDx8DqPGa+Jx2HC2qTmMmHRshWawZ
qKzUphu2gixbRlM5VE7JmGtLU6qDdA9Q/qJMxKVv/mcf9JELmvbYZRGFmsA8uiDq
6bsgYItoLPKHCW2m8jywk1f+Pe6dSPQOLI43J2ubIeu63uiNnR4o8bhKpwyqCEJR
bnIM9cvdIPuuCen456SHHTZA3L4UbNukPdrcvdIqhFoS0r+FZCxS43QaAEJjGUmK
pZvG3AqaxJPYxWI+fLGyqmW/uSB9b2Zsn4K/yNJ1my+5dzYrpmAeVVWD3mWbVL9q
NXw9bOj2BMIhMbCWkN9ykpzNVw==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:12:49 2026 by rpki-client