
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier: MbQmhd9lsIQ2xvPn94YEAcK/rf39f/Ei7xTiJ5MSenE=
Subject key identifier: FD:C9:DA:3C:1D:22:5B:27:E4:77:1F:3D:2D:6B:5A:11:86:4B:7D:03
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number: 0D
Signing time: Mon 01 Jun 2026 09:57:08 +0000
Manifest this update: Mon 01 Jun 2026 09:57:08 +0000
Manifest next update: Mon 08 Jun 2026 09:57:08 +0000
Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: iCSS0FN7V5PkJN9HKVB8ZvOdl4lMtINykLsRLn30y98=)
2: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
3: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Validity
Not Before: Jun 1 09:57:08 2026 GMT
Not After : Jun 8 09:57:08 2026 GMT
Subject: CN=6a1d5774-4610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:76:f9:04:c6:2c:92:96:59:8a:8b:9f:06:
fd:47:5d:da:6a:e5:54:e9:db:04:ad:eb:c5:b9:13:
97:6a:a7:1b:82:bb:fe:25:36:3d:51:5d:29:d2:06:
39:ae:6e:d0:6e:0c:07:22:f7:8e:b2:66:d0:8d:1f:
2f:63:31:06:a7:2c:5c:35:f1:bd:b3:b9:ab:f9:8b:
d5:88:ec:7f:a2:90:d1:37:59:b2:17:2a:94:eb:59:
01:ec:b9:c2:ec:52:1c:48:cf:20:f7:3b:b9:6a:9e:
e8:f3:e6:23:a0:8e:0c:29:c5:f9:a0:f9:bb:d9:f4:
97:71:2b:3d:fc:8c:e1:d5:18:7b:ab:fa:0f:ab:d4:
7f:ca:26:00:82:d1:9a:01:0c:86:d1:be:15:d9:6a:
56:c4:15:2f:3b:7a:ad:58:77:f3:2c:5d:9c:41:06:
55:6b:ae:7c:08:a1:6e:86:1c:dc:76:73:49:93:8d:
ee:6f:aa:8a:0b:b1:6f:34:a0:c3:87:5f:5e:21:db:
ce:63:7e:a7:f6:cf:59:94:3a:0f:57:ca:0a:5d:fd:
6f:58:9f:b8:46:62:e1:cc:8d:ab:8e:da:51:86:fb:
80:e9:1b:06:18:1b:9b:d0:9c:a6:e5:f1:99:77:1f:
15:8d:e5:0f:61:e0:fa:e4:ec:02:cd:12:5a:b2:f2:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:DA:3C:1D:22:5B:27:E4:77:1F:3D:2D:6B:5A:11:86:4B:7D:03
X509v3 Authority Key Identifier:
keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:f5:f5:16:02:1e:5b:d1:a6:f9:bd:fd:4a:f1:1d:99:31:
a2:7b:2e:37:84:bd:94:d5:44:06:76:19:3b:e1:c3:ae:1a:ca:
5f:8c:17:44:98:30:19:7f:ad:2b:08:94:c5:61:ef:ca:e7:22:
b4:61:4e:16:64:9e:2c:7e:21:f3:6f:b4:ef:12:12:1f:70:b2:
0f:29:3f:e7:00:ff:2f:91:9a:59:1d:04:54:46:59:0e:03:c6:
09:ce:76:ba:8f:8e:03:72:a7:90:be:32:f3:b6:4f:e6:e4:29:
83:5d:e0:41:01:92:d1:d9:ad:9b:ab:1a:d6:c7:51:f2:17:09:
6b:9e:45:56:c9:6e:6a:16:be:52:59:57:99:c8:12:c2:12:36:
5b:de:79:de:57:e7:2c:42:a3:69:3c:e0:78:54:0b:46:88:d7:
50:68:7a:27:73:56:aa:88:6e:1d:cd:64:15:e6:88:1b:22:c8:
8d:ed:47:9c:01:f6:14:fd:1e:dc:c9:e0:b0:c2:2d:d1:67:01:
41:65:fc:b1:81:ad:91:1b:b6:21:9d:ec:4b:a6:4a:3f:5a:17:
a4:c7:9d:27:22:0e:e7:76:f9:68:6d:db:26:ba:78:eb:8a:87:
f6:40:63:ce:d4:e2:de:df:27:9a:94:c5:7a:75:32:b5:42:f2:
0f:cc:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:00:39 2026 by rpki-client