
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json)
Hash identifier: 61iVLc06VW2LdpzELm4HuBa8AYvLUPtm9T8nOWgBKw8=
Subject key identifier: 4C:B7:D4:EA:11:F7:35:2A:AB:4F:1F:45:53:F5:2C:CE:24:E0:8D:72
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
Manifest number: 03AC
Signing time: Fri 05 Jun 2026 00:55:40 +0000
Manifest this update: Fri 05 Jun 2026 00:55:39 +0000
Manifest next update: Fri 12 Jun 2026 00:55:39 +0000
Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: x+3wdOIyj+SmbOkEHs0WQxVBW2eoyd14Jfj4tWMBlS8=)
2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: 02sNcIE+dl1r1NO0Wyn+KyNimeMzfijnSUn5nP17d5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Validity
Not Before: Jun 5 00:55:39 2026 GMT
Not After : Jun 12 00:55:39 2026 GMT
Subject: CN=6a221e8c-7303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:96:44:c2:bd:7d:43:72:5c:3b:86:88:8b:
69:15:9b:a0:f2:37:e4:a7:6b:e8:26:35:51:40:fb:
0d:17:f3:a9:b6:a7:6b:a5:eb:34:2c:46:2a:3c:a5:
e4:42:e1:7c:ce:ac:99:ae:66:be:73:bc:96:d9:9f:
24:cd:a4:e7:88:e1:df:a4:00:77:46:6c:26:2a:4c:
dd:49:fd:fd:3c:d7:c8:12:c2:29:10:56:02:5e:cf:
b9:3e:55:a5:bf:17:11:64:55:3e:1d:fe:a1:7b:cd:
39:21:4e:a1:f5:ec:7c:a0:0f:0a:f6:b9:2f:c1:14:
19:e6:57:8c:d7:42:2f:a5:fc:3d:74:a3:a0:5b:fa:
68:cb:15:de:c3:9e:b5:bf:66:f6:60:c0:75:6b:81:
54:c1:34:df:2c:11:ee:74:1d:fd:1a:ad:4d:a1:b7:
84:a7:24:3b:e4:31:8b:e6:d8:8d:bd:a4:94:b8:b0:
4d:82:b9:c0:46:ec:99:dd:f4:2e:a6:44:a9:bd:1e:
fc:df:f0:24:08:8e:8e:86:c5:6b:9f:92:f1:1a:69:
58:f1:f6:14:2f:cb:ee:89:66:c8:9a:17:65:38:2f:
f7:90:80:0f:ee:6d:4d:14:c9:fa:65:7a:63:e2:98:
1c:ee:cc:31:62:df:18:60:23:e1:72:f2:23:a5:f3:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:D4:EA:11:F7:35:2A:AB:4F:1F:45:53:F5:2C:CE:24:E0:8D:72
X509v3 Authority Key Identifier:
keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:bc:c5:29:2f:8c:44:61:34:c7:d9:37:3a:90:39:a2:8e:
74:b4:f4:9a:c6:11:ee:17:90:09:a5:68:80:50:6d:1a:34:d3:
23:11:95:99:f0:4d:d7:b8:c7:ef:7c:b9:ba:c7:42:7e:2d:72:
b9:67:e1:6e:c4:ea:1c:df:b8:bb:43:12:16:33:77:04:2e:a1:
d5:1d:39:2c:f2:99:bf:d1:98:cc:4e:b9:13:7b:54:71:44:6a:
aa:0e:a7:74:07:fd:60:64:e8:26:f6:ae:39:49:ce:ae:95:c7:
b1:1d:2d:60:5c:04:dd:08:18:a4:e5:6b:a3:70:1d:63:94:35:
14:6a:7c:38:d3:05:4f:be:49:ae:4b:47:fd:d9:60:fa:8f:ce:
9c:d6:57:c7:06:b1:7b:f3:8c:8d:13:85:ea:93:e1:3e:19:da:
64:b0:32:ee:39:b1:20:2f:f4:e7:58:fa:79:cf:0e:94:b7:32:
bd:d2:f5:b0:83:d3:dd:fc:1d:d2:ad:84:8a:e8:e8:6f:41:0a:
2b:2e:55:ae:43:29:d6:ae:79:eb:6e:f0:79:1d:e7:fb:a9:80:
40:23:b6:91:c1:59:f7:6b:a9:14:b8:6e:b1:f6:04:2c:4e:55:
30:16:b8:52:7f:09:b3:6a:c1:de:3f:6e:7f:da:c0:f0:23:6a:
0d:5e:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:42 2026 by rpki-client