
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: TgFke8jo9Yha938nuOxewdQS8ayobl11gFLGhNeplPw=
Subject key identifier: CA:AC:0A:7A:E6:54:09:39:56:99:05:34:67:3C:4E:09:CB:55:5F:19
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 07D4
Signing time: Sun 31 May 2026 22:00:46 +0000
Manifest this update: Sun 31 May 2026 22:00:45 +0000
Manifest next update: Sun 07 Jun 2026 22:00:45 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: LjPYFLhiZaqdtTOWn2LHUVH1utW6Oc5ZNFAbtjirP5g=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: May 31 22:00:45 2026 GMT
Not After : Jun 7 22:00:45 2026 GMT
Subject: CN=6a1caf8e-6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:d1:cd:2b:78:33:7c:f3:e3:73:05:22:5e:
14:a4:0c:38:d0:ae:78:75:6b:be:46:64:ad:dc:95:
12:cc:03:90:bf:ff:98:ca:56:5b:6d:a2:31:4d:52:
07:39:7f:36:ac:0c:f8:23:40:51:bc:4c:2d:0e:78:
72:67:83:73:46:26:6f:f6:fe:8b:5e:fa:a9:a2:e8:
f8:96:4e:a2:aa:eb:5d:05:75:1f:7d:83:41:2e:bf:
22:45:27:c4:e4:e1:61:55:f9:54:3d:67:44:80:70:
f9:38:1a:24:18:18:c5:9f:2e:d9:a9:73:cb:42:de:
92:5f:7f:67:51:d0:88:7c:da:2d:31:90:4c:58:55:
f3:75:bd:34:1d:81:3d:4a:50:49:47:16:1b:d3:0c:
5b:99:b2:79:8b:d1:cc:c8:0f:4d:2c:c7:1d:2f:86:
a2:9f:ab:a3:0a:0a:c1:a0:84:27:b0:f5:22:ba:c1:
60:ff:90:ce:82:82:66:62:ac:b1:87:b3:c3:84:2b:
36:d3:ae:92:5a:94:4a:96:dc:87:52:8c:90:1b:76:
de:40:54:d8:29:b0:61:cb:7c:c5:26:ba:82:be:18:
d3:52:55:5a:de:70:eb:78:6b:5e:cf:d5:8c:d2:d8:
4d:1d:66:ea:8b:3a:c3:9d:60:98:b4:48:3f:f7:0b:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AC:0A:7A:E6:54:09:39:56:99:05:34:67:3C:4E:09:CB:55:5F:19
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3a:16:40:df:5c:8d:c2:66:a0:91:b9:6d:f0:b5:4f:a1:4d:
d2:17:98:02:99:3b:66:f7:7c:24:e9:fe:5c:66:e4:16:bd:0e:
60:66:66:f3:46:2c:2f:7f:09:5b:0e:64:e0:d1:d3:93:79:0c:
8d:87:e7:62:e9:e9:cb:0b:2e:af:8e:c7:46:76:9b:1e:9f:a5:
0e:2e:2c:de:24:a5:81:01:7f:02:9c:14:ca:11:9c:f7:57:1f:
69:77:3c:43:50:ce:40:3c:e9:b0:3a:05:19:19:ec:9e:06:3c:
6f:ce:c2:d4:c7:2f:be:00:61:e6:00:eb:86:aa:ef:c9:ec:94:
1a:1a:a6:39:5c:78:d0:62:b1:7c:55:78:87:63:d6:06:3a:d6:
f2:9b:50:27:78:de:44:e8:b5:07:80:f6:80:b2:17:b3:d9:3a:
06:4a:e3:3f:27:9d:d8:10:a3:7e:e0:93:8b:c2:a6:a7:11:e4:
fe:a2:0e:d2:09:ba:62:74:d4:25:7e:bb:4a:fd:82:87:fa:95:
e1:d0:6f:23:97:21:d9:d8:0f:26:c6:72:9b:dd:6c:19:c3:9d:
8f:f3:62:b4:7b:c4:17:d7:06:b4:89:b1:d7:36:57:e0:99:2f:
de:f4:88:f4:00:8e:72:34:10:e9:9c:56:61:d8:13:0f:b7:3e:
ea:19:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client