
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: ioZxGuKxXW90BBxOoKB/o0PVGmLKnT2bFUbvIj5En/w=
Subject key identifier: 9F:E2:40:63:D5:9D:88:AE:32:BC:1C:2D:D4:24:3E:F4:54:7D:88:AC
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 02AE
Signing time: Mon 01 Jun 2026 02:19:45 +0000
Manifest this update: Mon 01 Jun 2026 02:19:45 +0000
Manifest next update: Mon 08 Jun 2026 02:19:45 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: FUontvZ3IciOeIucr9/DcFdK2TP8dsaxfvzy4JtmOyY=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jun 1 02:19:45 2026 GMT
Not After : Jun 8 02:19:45 2026 GMT
Subject: CN=6a1cec41-b1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:3b:7e:09:12:de:34:b9:be:2e:30:5d:a5:
63:d8:19:d7:de:93:26:b2:7c:9a:7d:06:5c:08:c7:
aa:43:6e:7a:21:5b:fb:ae:43:63:6e:f1:3f:ea:bb:
cf:cc:97:87:41:3e:71:73:37:e0:43:67:60:f6:0a:
dc:08:4d:cf:97:02:64:ce:da:79:9d:88:bf:fc:0e:
de:03:69:e1:dc:90:37:30:71:c5:02:24:94:15:65:
fd:e1:00:90:6e:4b:99:1a:6e:69:05:db:2a:db:54:
af:25:38:72:14:28:a2:d9:88:79:6a:ab:10:b8:92:
6e:10:83:ef:ed:85:d2:d0:03:40:3c:cf:fb:03:73:
a5:d3:10:68:b9:73:b1:b0:6b:0f:5f:d6:2f:27:9b:
a9:98:03:ff:10:0a:1b:1a:18:f9:1e:e5:5c:ad:97:
49:fd:17:ac:52:62:4f:41:90:04:07:67:67:4f:25:
cc:e0:06:e1:8e:c0:49:8a:50:58:09:c5:bd:5e:00:
f0:55:70:df:ce:30:9e:d8:e6:39:e6:56:12:e0:7c:
f1:4f:dd:cb:a0:32:fe:d8:a5:13:df:6b:21:fb:bf:
68:40:63:a3:bb:be:17:d2:9f:bb:23:a6:15:d8:1f:
25:16:8d:eb:24:f7:d2:67:3c:87:25:e6:7a:93:fb:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:40:63:D5:9D:88:AE:32:BC:1C:2D:D4:24:3E:F4:54:7D:88:AC
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:fe:87:e5:f3:ad:09:9d:c3:dd:03:6a:6e:68:92:56:5c:
21:a9:53:43:51:b5:39:f4:b5:84:1b:29:8f:7a:11:c1:98:a2:
7a:15:22:b2:93:f0:d4:ff:ff:eb:a5:06:73:2c:93:c6:38:33:
d2:0f:44:1f:1f:77:87:3c:2d:be:6d:c2:22:22:ce:d7:d2:4d:
48:1d:a8:2a:0a:4e:95:cb:b8:62:32:f4:cc:51:fe:b8:5c:30:
c0:d2:9d:ff:9d:08:3a:49:6c:6b:f5:c2:d6:54:b5:17:a6:c6:
f8:4e:1c:f3:a6:39:86:f7:3f:09:47:44:fc:2d:ca:65:f6:f6:
49:a6:12:53:14:7e:5b:a0:e9:b4:93:43:4c:83:f6:87:87:51:
f0:1e:8e:72:f0:49:61:4e:6f:95:62:79:88:3f:9e:f8:22:e1:
44:88:49:1a:0c:0f:fb:13:f6:aa:11:ff:9e:ba:13:f2:31:f3:
11:61:c8:a5:e6:f3:6f:9e:f2:0d:13:69:fa:2d:ad:c9:51:d5:
e1:f1:85:0f:44:5b:84:f6:92:08:8d:1c:8b:23:1b:6b:0c:c8:
21:d7:0a:8c:91:55:6c:73:31:b2:2e:94:85:7e:fb:8d:be:65:
87:7a:09:e2:3f:71:dd:b1:fd:93:c9:c5:eb:c6:c2:3a:46:df:
7f:7a:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:16:48 2026 by rpki-client