
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: fPyO5y3NFbj/EpupSdwDceUUyf55FYRuYd3VFFjk6Uc=
Subject key identifier: 2B:37:18:13:80:89:5C:19:63:4B:7C:97:6E:F7:E4:AA:9B:4B:EE:3F
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 14DC
Signing time: Thu 18 Jun 2026 16:48:41 +0000
Manifest this update: Thu 18 Jun 2026 16:48:41 +0000
Manifest next update: Thu 25 Jun 2026 16:48:41 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: t83ys6k+lN+eN0zzg/634vPaVTqGoze/poQNPQrQ8bM=)
2: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=)
3: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=)
4: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=)
5: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=)
6: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=)
7: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=)
8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=)
9: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 16:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5385 (0x1509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jun 18 16:48:41 2026 GMT
Not After : Jun 25 16:48:41 2026 GMT
Subject: CN=6a342169-d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:90:c3:0c:76:65:00:e2:5f:90:76:f1:59:
63:3d:f7:22:21:e2:08:83:b7:69:5d:8c:70:a9:9d:
c3:5d:20:4c:63:75:49:45:16:e4:22:d4:7b:71:be:
08:1e:16:01:fb:c7:1f:97:d9:8d:cb:2e:03:be:0a:
4d:31:a0:9d:50:0f:04:ed:b3:4c:62:e4:98:26:12:
d3:83:10:80:52:7b:46:b2:7b:24:df:a6:e7:06:f8:
4f:20:4d:d3:e0:94:82:65:c7:bf:fa:41:fd:d3:3c:
c0:5b:ca:ec:42:ba:2a:01:d1:03:87:e2:92:b8:c6:
b2:bf:c0:d7:bb:e3:ca:97:28:0e:55:11:fa:ac:e5:
65:88:56:a8:b6:91:6b:9d:32:6d:de:78:f6:7c:9b:
a0:1b:9d:25:af:fe:b2:14:fe:60:cb:03:22:8b:79:
6e:42:e6:a2:7a:a1:9c:29:41:67:14:3e:cb:fe:a7:
69:95:dc:62:34:98:98:40:ec:cc:d6:aa:1a:85:ed:
4d:88:e4:4e:b1:09:83:7f:35:22:8c:41:8e:64:64:
29:72:f7:eb:b9:aa:8d:51:84:bc:26:24:19:23:41:
7c:e7:20:b8:30:c0:65:17:1b:7a:16:bd:82:37:c4:
e9:e2:8e:69:b2:dd:9a:5e:24:6b:af:17:14:8f:17:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:18:13:80:89:5C:19:63:4B:7C:97:6E:F7:E4:AA:9B:4B:EE:3F
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:6b:50:6e:34:3b:ff:62:36:a8:df:ef:35:07:7e:2b:08:
61:95:5e:a6:a3:6e:c6:82:8b:7b:61:34:24:78:6e:9c:6d:79:
91:84:35:32:e1:e8:f2:46:85:8f:d5:2c:de:28:77:ed:fe:9e:
d4:64:0a:df:62:73:63:08:00:d1:5f:05:61:c5:42:0f:7c:bd:
9d:43:86:3d:0e:75:73:24:3d:6d:4c:99:45:aa:0e:6a:da:27:
81:ca:05:f6:bd:b3:da:12:7f:63:77:2b:a0:ac:c8:a0:23:e7:
79:fe:1b:59:41:29:84:b8:ea:db:9d:ee:43:c2:b1:75:00:6c:
db:b3:62:f4:26:dc:fc:4b:88:31:9a:4b:40:f5:0f:97:fc:37:
11:8e:9c:2e:39:13:02:96:31:cc:55:69:3d:40:2a:0a:72:31:
20:c8:c8:28:99:14:9e:33:a1:37:e7:f4:a4:96:df:dc:b5:68:
e5:16:f1:4a:05:15:3d:a1:d5:4a:f1:63:57:73:13:1f:0c:98:
94:02:72:8e:f4:27:3f:99:d8:d9:45:aa:45:0d:10:39:c0:8d:
59:8a:0f:c0:76:a7:7c:82:49:af:f3:61:0f:45:99:7d:4a:33:
bd:b3:3d:29:94:2b:77:bc:78:8d:5a:df:49:a0:25:d2:d9:e0:
08:23:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:12:50 2026 by rpki-client