
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier: UyWV5yoWFJVhAP0z9UDUUTtEIt9aptOIqXU7GSTN+OA=
Subject key identifier: D5:65:C6:67:5F:11:FD:E6:E7:7D:AF:2D:32:0B:B0:7D:70:45:FB:FA
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number: 65
Signing time: Mon 01 Jun 2026 08:44:16 +0000
Manifest this update: Mon 01 Jun 2026 08:44:16 +0000
Manifest next update: Mon 08 Jun 2026 08:44:16 +0000
Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: TK7RiNSeOoSLC31uGrzD26bfWLOykxJf8T02iSSN7QY=)
2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Validity
Not Before: Jun 1 08:44:16 2026 GMT
Not After : Jun 8 08:44:16 2026 GMT
Subject: CN=6a1d4660-4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:b8:a1:f7:20:18:aa:df:a2:7c:1c:28:e3:
33:b7:17:a4:21:a9:fc:64:5b:5e:e0:53:f2:bb:32:
a6:0e:59:de:d7:d6:59:d8:eb:37:e5:81:8d:37:17:
c2:d7:66:43:24:2c:16:60:47:1a:db:24:8b:a9:56:
da:8b:00:a6:4c:61:8e:28:95:5b:6e:38:fb:2a:14:
99:30:57:58:c3:c0:50:40:37:01:87:2d:5f:59:02:
0e:f7:54:10:88:bf:c3:24:72:e3:da:df:22:c8:45:
9d:df:03:b2:55:2c:59:54:49:0e:2b:d8:04:b6:fd:
42:70:2d:4c:f8:c0:a0:3c:45:24:61:6a:cb:ba:93:
f7:b8:e8:0f:eb:bb:14:e0:44:a3:17:37:c5:23:f2:
44:ef:ac:b2:ed:e9:61:f8:5d:5f:dd:3d:83:f2:ff:
3d:d8:cc:81:8f:ae:ed:29:5e:47:7d:e8:38:12:b9:
3c:cc:b3:81:41:4f:04:ac:39:9e:4a:2b:e1:e1:ec:
0a:5b:48:70:86:22:1a:aa:10:3a:fe:1c:21:ed:b5:
f6:45:32:f8:39:ab:8d:4f:8e:1e:04:aa:bc:5f:c9:
13:46:6c:3f:d6:98:4c:6b:0c:1f:2a:76:fc:2f:a7:
c8:0f:a9:fd:c1:12:79:10:a0:18:87:ee:ab:34:69:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:C6:67:5F:11:FD:E6:E7:7D:AF:2D:32:0B:B0:7D:70:45:FB:FA
X509v3 Authority Key Identifier:
keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:28:3b:4f:05:3a:a6:29:70:dd:74:06:fd:08:c6:39:c4:
4e:7d:a8:59:1d:8c:9e:af:28:0f:75:af:c1:c4:ec:3b:90:6e:
c4:4a:7c:aa:b6:58:23:6a:2c:71:34:5b:53:e1:dc:92:79:23:
14:06:d6:88:23:1a:70:35:3b:c2:a9:82:0b:63:36:d6:25:6f:
88:a4:9f:41:e0:ed:c5:a1:45:dc:81:5a:7d:e9:2d:0c:6b:da:
0a:c2:80:6b:36:da:2c:56:8c:bc:aa:1f:99:5c:82:cb:c9:a9:
5b:b9:0c:7f:c7:50:09:65:c6:92:be:21:90:e5:cc:86:9f:ff:
4f:58:0a:bf:63:ad:3f:eb:55:dd:59:eb:2e:ce:9d:af:98:1c:
8a:42:ea:b3:59:71:1e:13:3e:b8:36:42:55:dc:af:a4:ca:87:
a4:e9:d9:a3:cc:d5:86:e8:8e:f8:49:ed:9c:55:00:59:e6:5f:
46:bf:54:c4:83:05:be:c3:47:e6:a6:ef:92:78:3e:63:7d:f3:
7e:20:e6:68:b7:ca:30:17:02:e7:69:3d:c8:47:f8:7f:f8:45:
e0:f5:8c:e7:2b:d2:9d:ce:b7:8f:74:f7:b1:5b:c7:ef:8e:a8:
fe:c9:26:75:34:23:a7:39:b6:de:1b:84:8f:64:0e:c4:22:05:
6f:27:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:15 2026 by rpki-client