
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: nkjSO3QW5qTNqqKb0SyzQw1docBH0aZHrvNbwZ+y0XE=
Subject key identifier: E0:AB:83:63:EA:6F:30:3A:A4:0B:97:81:3C:E0:3B:95:74:B1:DB:FB
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 06C7
Signing time: Sun 31 May 2026 22:57:41 +0000
Manifest this update: Sun 31 May 2026 22:57:41 +0000
Manifest next update: Sun 07 Jun 2026 22:57:41 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: eij7qbN0/YPhfTXS39VS5yvPUoDbBrGlbtPKCU9nBSo=)
2: 0771A364485311F1A9744CF89D833773.roa (hash: nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=)
3: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: HEumvxRhLmm4XHqnIYgge5GXrN6qJb1ZanXvvpMCGxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: May 31 22:57:41 2026 GMT
Not After : Jun 7 22:57:41 2026 GMT
Subject: CN=6a1cbce5-c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:84:36:e3:66:1d:d6:8e:5c:d8:73:56:bc:
ed:0c:2e:e9:6a:3d:f8:74:18:82:ee:a5:3a:cc:27:
25:86:20:dd:3d:36:79:3d:ad:49:97:a1:42:d7:32:
11:25:04:37:f1:04:93:8b:4e:bc:26:d3:0a:5a:33:
34:ef:b7:7e:9f:91:b1:8b:f9:63:af:65:d7:de:08:
5d:a8:25:21:a3:dc:ad:6a:be:c8:fa:51:b0:bd:c1:
0f:f8:f7:29:e9:09:8e:47:dc:6f:5a:bc:d4:0b:45:
21:b9:57:ed:2d:57:9a:ac:8d:e8:8b:27:dd:3f:c4:
4f:82:ce:c2:64:ee:44:eb:47:4a:62:e4:0a:84:e2:
c6:1c:e5:a3:a6:a2:c1:21:29:81:a2:ff:b1:b6:9c:
8f:e8:71:dd:10:cd:15:8d:9a:09:55:f7:8c:2e:21:
ed:2c:c3:33:54:cd:74:48:a7:50:97:6b:c4:85:d4:
66:12:0e:f6:ef:ee:3e:a4:c7:fe:31:26:84:f1:da:
83:94:5f:36:ac:b4:19:03:b3:8e:d5:74:1f:86:ac:
a7:e3:9c:f3:ec:54:03:6f:a0:9c:e1:04:63:77:c8:
75:62:a9:68:3e:a8:a6:53:29:5d:4a:37:b4:cd:ec:
81:12:fd:15:05:51:5a:3c:09:30:5f:45:bd:53:e9:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:83:63:EA:6F:30:3A:A4:0B:97:81:3C:E0:3B:95:74:B1:DB:FB
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:a1:89:69:14:cb:87:b2:49:3b:c2:32:e6:7b:3c:cc:14:
f9:48:8f:a8:4c:24:83:81:f7:9e:79:4b:71:60:bc:8e:3f:30:
f2:fe:80:75:a2:2c:96:b5:8f:6e:76:57:ad:ff:65:d0:82:f7:
2b:bf:57:74:61:59:7d:18:e2:41:26:e7:7c:18:6e:ff:87:3c:
44:26:10:60:69:23:05:b5:85:af:4c:52:28:3a:ed:c3:e6:bf:
4d:5c:df:78:c2:4e:7c:ce:33:ff:b0:72:b2:85:35:32:91:77:
ac:e1:05:5d:89:d3:d7:db:82:00:34:23:72:be:4f:e9:60:06:
0c:51:6f:3c:7a:1c:6a:aa:b0:43:d6:0a:43:97:da:ff:b6:80:
94:4b:52:4c:36:fc:d0:c3:c8:ae:78:59:12:f4:c3:56:f6:c4:
d7:1b:c6:c1:67:e1:90:1b:66:c5:6a:74:ff:18:33:7a:0a:6e:
c3:71:f4:e8:83:37:8c:60:c3:0d:ff:36:71:dc:80:7e:58:fc:
53:fa:df:13:0e:01:97:3d:4d:5e:c2:70:23:4e:f3:19:1c:6d:
8c:47:fe:58:52:7c:3f:11:83:bd:02:09:af:86:8e:70:b6:25:
9e:08:a0:f6:1e:4b:b1:ce:5c:75:55:99:b7:0f:be:ae:a7:ff:
ce:80:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:48 2026 by rpki-client