
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier: q7JnIjaGTOKmCC+450hIkDQdp5gC33xkjXJPrD4SFCo=
Subject key identifier: F4:0C:94:E1:95:23:94:97:8D:37:ED:C1:B9:3B:5E:FC:1D:32:34:27
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial: 0D0B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number: 0CFA
Signing time: Thu 04 Jun 2026 18:20:54 +0000
Manifest this update: Thu 04 Jun 2026 18:20:53 +0000
Manifest next update: Thu 11 Jun 2026 18:20:53 +0000
Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: mhDKNoJKm8upVwoCbe386rveeTI/JM18ZMmQMfmW5kI=)
2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: YO/LHGpdZrKxxuw5Nj9V4zkQvWAz2/rqA3ybBI8prVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 18:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Validity
Not Before: Jun 4 18:20:53 2026 GMT
Not After : Jun 11 18:20:53 2026 GMT
Subject: CN=6a21c206-dec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:07:57:4f:72:aa:30:b2:8e:2b:b5:0a:8f:
e2:ba:cb:00:02:33:28:87:cc:be:d3:0a:49:56:21:
de:42:9c:c7:65:55:75:d5:12:25:96:4a:25:39:6b:
b2:19:63:0b:53:07:7b:96:2a:69:06:9a:8a:0e:60:
65:b6:b2:a7:74:f6:59:a2:c7:07:ef:69:00:57:dd:
98:0a:6a:4d:c5:6d:63:44:89:8d:de:c3:88:c0:2d:
c9:e7:ee:e8:24:a2:89:b9:2e:de:24:72:e9:47:71:
4a:42:3e:64:d2:45:6d:48:f1:f1:c5:c1:43:05:c8:
1c:b4:f0:09:78:13:61:d7:0a:e7:26:cb:bd:10:5d:
6a:04:c1:23:19:3a:d3:d2:be:3c:72:ba:42:5c:12:
5f:11:9e:d5:63:7b:aa:a3:a2:2a:ed:e5:82:1b:e8:
07:f5:3b:6e:09:72:ef:d7:2f:2f:d9:14:09:77:77:
a2:1f:14:1c:22:a3:d3:07:64:02:94:f3:2e:f1:db:
6a:64:ce:22:8d:96:c9:c4:66:fa:89:d3:0d:cb:98:
38:6a:17:c0:64:89:7d:6a:91:68:d2:9b:96:c3:61:
82:0a:d4:b3:37:2e:77:73:a8:0a:e8:b1:7a:95:36:
03:d0:88:3d:57:48:70:46:46:40:da:d2:15:7d:a6:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:94:E1:95:23:94:97:8D:37:ED:C1:B9:3B:5E:FC:1D:32:34:27
X509v3 Authority Key Identifier:
keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:65:e0:d2:a6:e1:94:40:82:ae:7e:a8:d1:a1:ee:3a:14:85:
a8:76:1e:bf:82:44:7c:56:04:1b:88:c2:57:ce:12:57:a2:07:
71:71:cb:50:31:c7:d7:d9:22:ff:39:72:f7:6a:e1:37:95:bf:
5c:a5:d8:41:d0:3b:79:e6:68:0a:a1:2b:df:3e:ed:8c:15:8c:
01:77:19:9e:ca:d2:7c:99:a9:8a:25:71:3e:e4:74:36:92:21:
1c:8a:27:9a:4c:0a:56:89:43:62:31:32:70:6c:ef:b5:86:0e:
6b:e7:a9:be:9a:95:0e:b2:f2:a9:dd:4d:c8:b7:ca:95:91:13:
2a:66:c9:ae:78:e5:c6:2f:a3:70:85:9d:68:1b:bd:e8:ca:59:
7d:52:b0:e0:d0:23:33:e4:65:52:c0:e2:09:e9:82:0f:f1:91:
5a:13:3c:92:36:05:2a:e3:7c:89:d8:4f:06:75:b0:f4:26:e8:
16:fc:ff:ad:31:7f:6a:f1:59:e8:5c:7a:ff:5a:bc:bb:97:2e:
dd:58:90:ef:3a:16:69:d5:c6:ad:d9:ec:81:97:ee:23:2c:6a:
62:2e:27:d2:56:ff:89:50:70:cb:71:68:ad:ca:4d:f6:d2:2c:
70:ac:46:e9:dc:ba:95:11:75:7e:ac:80:16:bc:23:cf:37:f2:
78:2c:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:25 2026 by rpki-client