
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: k71nGWLSXXjmb/Fcj/TC2dI13p9211VfBjdLpTtXUlo=
Subject key identifier: 5C:69:81:7B:DE:C0:74:F9:44:05:00:FD:B1:BE:9D:80:30:AD:FA:6B
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 0191
Signing time: Mon 01 Jun 2026 05:09:01 +0000
Manifest this update: Mon 01 Jun 2026 05:09:00 +0000
Manifest next update: Mon 08 Jun 2026 05:09:00 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: UuX7NqrrAeCk+Iq5L8ZyDOcIxY9GI9FZOll9mjyKOjM=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: ge93gK4lUWgpZWqf0mLTvZJqGeY+ssrFNxVQ9BEvxjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Jun 1 05:09:00 2026 GMT
Not After : Jun 8 05:09:00 2026 GMT
Subject: CN=6a1d13ed-c1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:45:ba:f7:49:f0:09:8e:f1:80:a0:f4:8f:
9a:b5:43:dc:d7:2b:1e:df:87:7c:ed:29:a6:48:43:
17:34:55:28:55:65:f5:b1:57:f7:15:d8:10:3a:35:
5a:92:31:3c:6b:b2:d7:dc:b0:82:20:fe:3c:0f:4c:
de:32:ef:2a:3c:29:82:ab:89:9f:b6:3b:de:97:4a:
ac:24:a9:00:3f:c2:6f:43:64:98:9a:c1:b3:df:51:
10:a7:16:dc:d9:4d:1f:38:46:52:da:aa:af:36:f3:
fb:3b:f5:19:d8:68:7d:79:e0:f6:b5:c9:8f:69:58:
43:de:38:b3:2e:4e:e5:87:86:13:b6:36:e5:16:5f:
55:c1:ab:bd:b8:b2:3c:24:4e:f8:f0:e2:12:8a:79:
0a:58:49:78:85:d2:f4:e6:e5:9b:d0:9d:a7:40:e3:
08:46:c8:8f:fd:54:a3:35:f8:80:3d:3f:8d:5a:cd:
53:ae:8c:13:06:6c:4e:bb:7a:12:a4:67:3e:f7:cd:
27:e1:26:61:d7:72:5c:51:a5:56:26:01:da:bc:5d:
dd:2c:d5:66:d9:6c:31:ab:44:81:94:29:83:c7:6e:
b7:02:55:09:1b:a5:1c:62:47:7f:82:e8:d6:4d:d6:
83:7d:96:43:c7:01:23:8e:a2:ba:9b:c7:d4:a3:b8:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:81:7B:DE:C0:74:F9:44:05:00:FD:B1:BE:9D:80:30:AD:FA:6B
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:2d:be:91:d9:f3:c3:5c:86:f6:d9:d4:28:e3:dc:0d:79:
2e:3c:20:4e:d5:fa:89:bd:eb:f6:c4:1f:03:0b:67:40:96:0e:
27:56:59:a4:af:6d:ec:6d:ea:1c:2a:6e:4d:5a:1a:46:5a:8b:
d6:91:5b:7a:f8:cf:a4:91:70:49:37:04:ba:ba:ae:61:80:fb:
bd:95:17:63:55:d4:df:52:2e:99:65:5e:96:85:b6:d8:c4:27:
af:94:af:28:68:51:c3:5d:a1:36:fe:11:46:c8:0e:d5:2d:56:
40:5e:2f:1d:3f:2a:c6:ec:ac:ff:17:4b:d6:e7:e4:24:85:9f:
a9:ca:c3:2d:96:ae:10:1a:a3:49:ae:e4:66:a8:5f:28:e8:59:
90:5e:60:a8:aa:07:32:d9:2b:61:37:2f:26:30:9f:d1:fe:e9:
b9:2c:5b:4f:bd:5e:6f:d3:68:37:46:4d:6e:f0:f7:98:24:07:
41:ed:7f:41:ff:14:ef:fe:7b:72:d7:4e:23:bb:d8:9d:ac:d0:
fc:e9:be:9d:a3:00:c7:16:fd:32:99:be:1f:6a:06:8a:e0:50:
87:43:bb:26:5b:68:27:51:db:52:36:6e:10:94:05:47:b2:28:
ed:e8:07:a0:5f:e2:ab:3d:11:01:71:6d:8b:5e:b9:8c:bc:ed:
98:41:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:19:33 2026 by rpki-client