
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: zepslxOM9HayUsGL7CE47ETTAyorpfMwe7oMRyr5h44=
Subject key identifier: 58:66:83:C2:DB:F3:12:B4:58:E1:8A:0A:62:C1:B1:0C:9E:F3:A1:A4
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 0A26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 09FA
Signing time: Mon 22 Jun 2026 19:57:58 +0000
Manifest this update: Mon 22 Jun 2026 19:57:58 +0000
Manifest next update: Mon 29 Jun 2026 19:57:58 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: ByjI8E7b3oXCxtVq26ONsVA4LlRxc7GS0laTAjH6LSo=)
2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ZZGaP1aMdg0/Z8kpA6IgDd5lfHorn6nSTgSPV8+XGJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Jun 22 19:57:58 2026 GMT
Not After : Jun 29 19:57:58 2026 GMT
Subject: CN=6a3993c6-ae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:f6:4f:54:7b:26:cf:ea:5f:1d:29:78:09:
dc:e4:2c:8f:7f:10:c8:d6:83:86:89:16:4c:f1:5d:
0c:3d:15:43:8f:03:10:cf:46:e4:8b:47:b0:59:93:
38:b0:1b:04:39:a6:6b:85:0c:91:3b:ea:15:1b:25:
f1:62:ff:15:5c:28:4d:a7:45:33:21:67:65:59:4b:
5f:6b:0c:2c:f5:2f:c5:af:08:24:85:bc:32:eb:86:
85:b0:71:95:2e:63:3b:6c:76:91:58:50:05:fb:99:
57:76:37:ed:42:13:84:73:4b:53:b0:99:ad:10:26:
12:e0:6d:c1:22:73:4e:3c:98:ec:fd:02:62:61:6e:
4b:06:b7:64:47:c5:f5:79:8c:7d:e6:a8:44:8e:46:
40:1b:b3:e2:e2:2f:a0:0a:4e:c3:4a:88:55:4e:6c:
28:a9:68:66:b6:9b:1b:4c:b6:cf:4f:97:38:97:40:
9e:70:11:a1:db:eb:60:ea:ee:2f:b8:be:4e:bf:8d:
30:9a:e0:98:59:9a:c7:7c:62:e1:70:78:86:dd:55:
45:a5:2d:95:cc:53:1f:b7:b7:3e:fa:c3:f3:2a:b9:
c0:55:4c:b8:06:28:48:5f:da:b4:8b:d7:0d:26:f7:
fb:20:60:b0:14:2c:97:92:8c:ee:80:ec:1f:d1:25:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:83:C2:DB:F3:12:B4:58:E1:8A:0A:62:C1:B1:0C:9E:F3:A1:A4
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:bf:38:2b:bd:64:d5:35:54:10:96:8f:98:46:31:1b:ef:
09:86:bf:08:9d:d9:09:84:82:99:b3:fa:24:c0:7b:c5:74:47:
a6:13:5f:1a:47:36:97:05:7d:ea:26:44:80:a6:99:0e:7b:e6:
a9:93:f7:55:c1:b0:db:a7:47:95:c3:68:1c:ab:76:11:15:b1:
20:42:ee:9f:56:d8:58:75:ea:3e:ba:39:39:4a:39:49:58:cc:
0f:02:c4:23:5d:fe:d3:bc:06:9f:53:c1:d9:ee:8d:1a:6d:84:
a7:d1:19:30:59:c3:e9:a0:d7:7c:74:ee:e4:f9:bb:65:51:24:
ae:50:0b:4a:78:1f:b8:2d:43:6b:a4:14:b1:79:15:3c:3c:ed:
95:fd:60:5a:e4:9c:37:51:ed:5f:b6:4e:5d:02:f8:e0:67:07:
5d:6d:7f:e4:b5:c0:f7:a9:21:d0:1f:da:e2:cb:d6:e4:0a:08:
d3:99:28:54:4a:19:47:98:07:e3:46:50:a8:40:2b:32:c6:8c:
3b:cc:2d:38:e2:62:55:da:1d:41:0c:f8:0f:78:08:74:8a:a8:
3d:39:40:74:7d:57:b5:dc:50:d6:02:07:57:4b:c1:4c:33:0c:
c9:4e:63:2d:ef:50:a7:5c:d7:0d:3e:58:d0:72:6f:7b:32:66:
33:96:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:11 2026 by rpki-client