
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier: WwyPoMUjCXeRHi1gN+S1VgY5YYg9O9R5ZMASDWWoJUA=
Subject key identifier: 62:0D:00:CB:D2:0B:21:D1:65:65:6D:97:7F:90:A3:16:9C:A2:9B:0F
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number: 01F6
Signing time: Thu 04 Jun 2026 18:33:32 +0000
Manifest this update: Thu 04 Jun 2026 18:33:31 +0000
Manifest next update: Thu 11 Jun 2026 18:33:31 +0000
Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: 37E6vvQwuj7EbYjrvsNYYBh6RNDDFt2kTyGAmI78huw=)
2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 18:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Validity
Not Before: Jun 4 18:33:31 2026 GMT
Not After : Jun 11 18:33:31 2026 GMT
Subject: CN=6a21c4fc-d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:a1:a8:97:cf:f8:07:ac:74:74:81:b7:2a:
50:73:c7:d9:e8:76:92:02:9d:43:77:40:3d:6d:a0:
cf:de:49:56:06:4a:f5:cf:8f:98:0b:77:f1:27:f5:
b3:af:d8:8a:f7:f2:05:3a:6a:92:2d:52:3b:fe:ed:
52:8a:d9:04:d3:88:87:00:ff:4e:b4:5b:cc:64:f9:
28:13:87:96:0b:7a:31:ff:9b:bb:35:16:76:30:d2:
ac:34:ee:db:21:4b:58:b8:6b:83:6b:1a:bc:da:3d:
e0:3d:cf:a3:60:53:f8:d5:ba:93:d7:6e:bf:5b:b4:
95:e9:b3:44:ab:22:41:4e:e2:a1:9a:03:12:43:94:
62:c8:4a:19:21:09:af:1c:75:f9:e6:dc:0b:da:69:
03:06:f6:da:41:9a:a3:62:6a:fe:e3:64:18:18:48:
c1:a7:d5:a2:f3:2c:2d:54:3f:46:ba:ac:ef:d0:55:
bf:57:c0:35:15:ef:d5:7c:91:2b:09:6a:ba:8b:2f:
7f:5a:ba:e6:1e:f8:d1:31:a9:8a:44:79:4d:c4:4a:
f2:99:4b:40:d8:c0:6e:c8:da:a3:6f:33:53:9d:33:
63:47:e5:a4:33:c0:dd:cd:54:6b:5e:58:95:95:41:
b9:d3:b6:c6:69:f8:00:22:f7:3c:0a:a8:56:1b:93:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:00:CB:D2:0B:21:D1:65:65:6D:97:7F:90:A3:16:9C:A2:9B:0F
X509v3 Authority Key Identifier:
keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:83:50:cb:1b:63:3f:4d:95:a5:87:7b:67:2b:c2:d9:ec:c3:
17:e2:5e:fc:91:7b:89:1b:93:b7:c0:3d:2a:66:c9:ea:3f:b1:
7d:05:d9:73:db:d5:8c:14:57:28:75:6b:41:f8:d8:3e:df:a1:
81:b9:8c:70:bc:3c:46:1e:86:53:7d:d1:cc:c8:65:38:44:c2:
83:28:7f:a3:25:8e:39:33:c6:2c:8c:0a:b9:4a:b6:c8:fc:17:
8d:d4:0c:48:64:85:6c:8c:be:7e:73:10:77:7f:82:66:aa:d6:
93:a2:86:9d:4d:2d:2c:92:98:95:75:2d:29:40:00:3e:30:9d:
0c:89:65:91:dd:f7:26:69:ab:25:f8:c7:c2:7b:a0:9f:3c:7a:
0d:0c:74:e8:de:6a:96:53:aa:35:58:60:98:13:f8:6e:dc:91:
14:51:90:95:e0:5a:1a:b6:95:8c:0a:95:fa:71:3b:cc:60:f9:
60:3e:f9:fd:3a:f0:ea:a1:f0:ef:72:0f:9a:0f:11:56:b0:ea:
9e:5f:c6:73:f9:a8:b0:76:d5:5f:77:d0:88:99:4f:7b:87:98:
f4:7a:96:b2:c2:a9:79:da:8c:9e:30:4c:3b:26:96:85:86:de:
de:b4:0e:52:92:11:4f:61:df:1c:27:40:c6:72:bd:fe:f8:62:
cc:80:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:59 2026 by rpki-client