
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier: zhrOnTwmRH4Ac1FVRtP8FGMFH3QYus5ctoZAeTYCY/U=
Subject key identifier: F0:EF:EA:52:BB:5C:4A:95:58:40:D9:60:15:8B:BA:D8:F9:B2:66:15
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial: 0FCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number: 2DF3
Signing time: Mon 22 Jun 2026 16:42:26 +0000
Manifest this update: Mon 22 Jun 2026 16:42:26 +0000
Manifest next update: Mon 29 Jun 2026 16:42:26 +0000
Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: fE4LqBmzPjSS/peew+4FSR36/OSMDXwGrD7+LmcIZJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4046 (0xfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Validity
Not Before: Jun 22 16:42:26 2026 GMT
Not After : Jun 29 16:42:26 2026 GMT
Subject: CN=6a3965f2-7066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:3d:13:77:7b:5f:05:cb:f2:6f:50:15:35:
2d:9d:b5:ce:28:c2:e9:60:c0:e5:50:c3:03:03:04:
f9:fb:be:96:84:64:09:c2:6f:bf:2b:e5:9d:15:80:
e9:1c:d4:f2:2b:87:31:10:cb:c0:2d:f0:73:e1:d8:
d2:94:68:54:5b:00:73:55:85:0b:3f:c4:5c:df:c6:
be:08:2b:38:af:f7:29:67:cb:0d:02:88:8c:c1:c0:
31:83:d0:01:1c:f3:57:5f:4a:f9:7f:39:a0:d3:68:
49:97:da:7d:f7:5d:b0:e9:e7:24:07:de:f9:25:e6:
72:0c:77:bf:78:6a:72:86:f4:e8:62:f9:5c:9e:0e:
37:ce:5a:6f:73:86:14:13:7a:37:fd:99:44:52:5f:
e7:81:d0:05:34:1c:60:92:64:a3:40:41:c5:ae:05:
ac:e8:23:93:dc:6c:ee:4d:5b:8a:00:3c:08:e8:82:
13:89:52:42:ac:c0:d8:cd:38:db:30:94:7c:a7:f5:
2c:04:26:6c:2f:98:65:a0:23:7f:5d:fd:cd:0c:e2:
e3:d3:70:72:4c:ab:a3:62:48:9b:77:9b:f6:3b:b8:
75:35:73:7f:09:90:94:29:eb:ce:e4:51:04:96:06:
cb:94:c9:42:c0:7f:e8:12:4b:8a:00:54:08:2c:a8:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:EA:52:BB:5C:4A:95:58:40:D9:60:15:8B:BA:D8:F9:B2:66:15
X509v3 Authority Key Identifier:
keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:e8:b0:03:1a:f6:97:b3:23:49:2f:99:a0:b2:b6:4d:b7:
98:3a:9e:78:c2:3c:cb:8d:97:38:82:f5:56:ed:1e:2d:14:37:
da:12:84:12:f5:af:bd:70:38:ca:8e:e6:b0:c7:24:b3:b0:29:
11:9c:a1:4b:09:5a:d7:f8:6f:d3:3c:0b:45:b8:99:6d:3d:44:
59:d5:8b:b9:b2:73:6a:43:9f:b8:d4:c7:53:89:58:c4:45:91:
02:af:34:33:0b:b3:db:61:b8:ce:18:e2:a7:f7:b2:d0:67:4e:
16:59:3b:26:39:76:25:ca:b8:86:f4:44:30:19:e3:e3:95:95:
7d:74:23:95:0b:a5:6c:e0:e0:50:d8:c3:63:07:76:08:97:50:
46:28:f2:91:98:0d:36:ac:ff:6a:82:ae:e4:47:06:f8:a3:f3:
e6:df:a1:1f:73:22:5f:db:8b:46:d5:3f:96:85:51:96:fb:43:
37:a4:7b:fd:ba:e6:6f:13:e4:12:70:bc:ae:21:b1:67:19:49:
b7:3d:71:62:9a:be:3e:86:94:9d:57:44:a2:e7:81:2a:39:53:
59:5b:f2:17:a3:ad:96:65:10:5c:e0:fd:b5:0c:3c:c6:f7:a9:
6a:bb:25:36:bd:8b:89:a2:b2:a1:89:20:ca:d0:a0:72:e5:86:
56:fd:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client