
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json)
Hash identifier: m50KF0PX/5cas+jrO0bwHGMt5VTc6lKoQ6glC2x5QU8=
Subject key identifier: 96:7F:E3:3E:C4:65:9C:23:87:BA:BE:04:73:85:1A:FC:95:58:1E:1D
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
Manifest number: 0276
Signing time: Mon 15 Jun 2026 02:06:10 +0000
Manifest this update: Mon 15 Jun 2026 02:06:10 +0000
Manifest next update: Mon 22 Jun 2026 02:06:10 +0000
Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: 9oXoSwV4b0Ufm/WIk/QLY+F93hRSjcfPckyv/M2pJoU=)
2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: WkBrG4Ptn2oOu7MUQprdMpFUUGYiR0bDGLQIFpoza1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Validity
Not Before: Jun 15 02:06:10 2026 GMT
Not After : Jun 22 02:06:10 2026 GMT
Subject: CN=6a2f5e12-52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:e5:f8:73:74:73:f1:c2:14:1e:51:21:84:
e2:57:84:d6:58:ed:05:6c:4b:c7:06:fa:33:4c:fc:
5b:be:88:0a:c0:5c:34:a4:7f:e0:1d:ec:8b:f7:f0:
d7:05:5f:f0:76:30:af:d3:c0:a8:a2:91:c2:e5:bb:
4b:21:9d:06:7a:bc:54:e4:d8:58:f8:3d:c9:52:69:
9f:30:5c:92:28:21:e0:4d:65:c5:27:24:4e:88:32:
e8:f2:b1:ce:7e:78:4d:96:83:64:b7:7f:48:5c:dd:
6f:96:bb:e2:6c:9a:0d:b6:d0:e1:b1:8a:1d:c8:46:
ef:e5:2d:74:b1:e5:08:79:bb:3e:78:16:1e:55:0c:
d2:ba:0d:32:30:24:0a:71:d9:0a:b3:43:08:92:fb:
6f:49:36:10:2d:26:b1:65:7b:13:cb:02:9b:b0:65:
51:af:10:93:d2:c9:cd:ba:eb:e4:f9:76:b3:6e:4d:
90:40:c2:35:45:29:5c:c4:03:58:bc:e1:29:ad:9f:
99:81:88:18:ce:2f:61:2f:1c:91:8c:25:5c:b4:5e:
8d:c0:7a:97:26:27:92:93:6a:fd:92:6d:a8:8e:62:
87:a7:de:59:b9:a2:70:77:69:9f:90:1e:d2:21:28:
15:67:21:fc:a3:a3:d8:57:8e:62:47:b5:36:1c:05:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:E3:3E:C4:65:9C:23:87:BA:BE:04:73:85:1A:FC:95:58:1E:1D
X509v3 Authority Key Identifier:
keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:87:35:db:c4:8e:67:f3:94:63:42:36:0c:86:f7:f1:15:
42:c9:b3:0d:7a:35:54:ab:0c:e8:3f:35:c6:90:5c:e7:5d:e3:
9f:64:4b:19:22:35:dc:77:2a:1a:5b:13:ce:16:30:28:f9:0f:
70:29:02:88:2e:7a:3f:da:f3:cc:0e:84:92:95:1c:12:39:a0:
46:f1:74:84:2b:f2:19:5d:6e:8c:e6:ac:e3:19:12:a3:90:64:
c2:71:f9:9e:99:4e:74:6d:2b:ab:5c:6b:1b:07:ea:76:cb:ed:
82:0c:00:d1:02:e7:85:d3:3f:c9:42:78:d9:79:ec:24:fe:d3:
79:d4:10:a7:00:8c:19:ba:11:9e:f4:42:93:0e:b0:a6:7d:22:
08:97:41:21:a7:d2:41:2e:cf:cf:6c:5b:da:52:d6:01:e0:92:
33:a5:ed:49:92:a0:36:02:cb:d6:f2:c5:cd:5a:ce:ba:83:17:
9f:57:dc:ad:ec:7e:e5:e0:0f:a8:1c:58:ef:dc:2e:5c:51:ee:
4e:71:30:b1:de:fa:3a:e6:18:92:37:0f:a8:a2:33:75:01:f8:
5f:04:d5:13:4e:3b:9f:da:eb:b1:3e:14:e3:aa:05:fc:c3:d9:
dd:3d:9d:5a:fb:f6:56:3b:d1:3d:a6:83:67:95:4d:4d:29:fd:
55:ed:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 18:56:02 2026 by rpki-client