
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json)
Hash identifier: xfx4qWwnrn0sdyAUk4u/ZP5fSQzbLkBQAs794uMAzcc=
Subject key identifier: F8:1D:B6:50:7E:DE:B9:CD:5C:B4:30:81:93:6D:15:86:78:44:7F:AB
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial: 08AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
Manifest number: 0893
Signing time: Fri 12 Jun 2026 20:38:43 +0000
Manifest this update: Fri 12 Jun 2026 20:38:42 +0000
Manifest next update: Fri 19 Jun 2026 20:38:42 +0000
Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: t3vDV0qX/t4gbi+zB8OWgNFb0V6ZUOws2WCNnSZyup0=)
2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=)
3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek=)
4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Validity
Not Before: Jun 12 20:38:42 2026 GMT
Not After : Jun 19 20:38:42 2026 GMT
Subject: CN=6a2c6e53-be6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:f0:15:eb:12:de:dc:a7:3b:89:21:36:f2:
26:7c:5f:9c:16:79:8a:71:9d:bf:04:4c:e1:bf:46:
99:35:2f:be:13:0c:81:dc:1c:75:f0:f5:78:85:7b:
1b:da:08:34:b9:5e:11:19:b4:2b:11:83:ce:1f:9c:
6c:85:79:5d:4b:50:cb:92:f4:c9:64:09:50:f7:9e:
31:07:18:9e:28:e9:31:50:ff:88:52:8d:2b:99:59:
6e:9b:11:1e:2f:62:23:39:ba:1f:1f:0d:af:db:16:
d1:3e:1b:34:d7:8f:83:d7:27:cf:b5:2c:bb:33:6b:
4a:09:e7:a0:c3:eb:eb:23:ab:b9:9e:3d:f8:f9:ba:
d7:f2:b3:cf:a5:72:e7:22:15:24:22:76:a8:c9:fe:
eb:67:c7:fd:8d:c7:cb:bf:16:99:ef:5b:bb:49:13:
b1:8c:d7:64:f7:67:24:bd:d1:c8:3f:14:24:97:00:
f8:44:be:2f:fd:8e:ec:92:7a:f0:69:4c:c8:21:84:
4f:86:e7:83:70:d1:d3:39:f8:0d:ea:31:6f:a7:56:
f7:20:6a:25:87:78:a7:38:93:dc:0e:41:57:67:20:
c0:3d:66:f6:88:75:82:91:50:aa:62:ae:25:fd:28:
aa:86:8d:9a:ac:cf:ef:09:32:6e:ff:df:fb:24:f7:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:B6:50:7E:DE:B9:CD:5C:B4:30:81:93:6D:15:86:78:44:7F:AB
X509v3 Authority Key Identifier:
keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:53:8e:f6:f4:93:ad:25:ec:9d:e0:11:9b:10:05:a8:19:ac:
1f:0d:df:24:39:2a:54:ed:2c:6d:c3:8b:b0:4b:99:72:21:cf:
3f:f5:b0:a5:48:c6:d0:6e:95:28:a9:1a:c6:af:e6:9f:e8:50:
e1:1f:ca:c9:61:28:2f:94:32:25:1d:63:fb:d1:a8:7e:f6:f1:
62:1c:6c:7c:17:2f:0d:ad:4f:f4:02:68:96:84:18:c8:5d:9a:
05:61:72:a5:a2:eb:ed:55:39:4e:f2:2c:17:35:7d:9e:cd:db:
54:5f:da:cb:38:db:70:19:da:3d:58:e1:d8:6f:95:b1:45:85:
8b:7c:b0:8a:89:74:eb:93:8d:46:e6:33:9a:32:94:90:da:a6:
aa:85:79:af:e8:b9:43:b9:eb:2a:6a:1c:eb:38:d1:6d:8e:48:
8d:84:54:29:55:dc:2e:5b:bd:69:35:6f:cc:de:a9:c0:19:16:
6b:5c:7c:1b:a9:95:09:3c:4a:2c:2f:bf:c1:e2:40:5b:e4:7d:
e0:e6:5f:c2:84:1b:42:81:43:46:e8:14:13:0d:f6:78:3c:51:
44:4d:5c:c5:00:b2:5c:18:d1:1d:d7:69:37:26:88:bf:7e:29:
75:05:13:6a:53:8e:a8:c9:13:0c:af:2c:a4:85:58:e9:9f:1b:
c2:86:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:22:53 2026 by rpki-client