
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.mft
File: 0N6IEUo2jgqHd26dfLytKmDNC1E.mft (raw, json)
Hash identifier: O8tOTCM06FIZflWHltzmc/gcqj/8hlyvIvb5Z6lBs/0=
Subject key identifier: 48:CB:D7:49:F2:0A:08:8A:CF:C7:50:40:B9:82:2D:30:CC:6C:A5:38
Authority key identifier: D0:DE:88:11:4A:36:8E:0A:87:77:6E:9D:7C:BC:AD:2A:60:CD:0B:51
Certificate issuer: /CN=A919F82C/serialNumber=D0DE88114A368E0A87776E9D7CBCAD2A60CD0B51
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.mft
Manifest number: 52
Signing time: Tue 23 Jun 2026 08:30:42 +0000
Manifest this update: Tue 23 Jun 2026 08:30:41 +0000
Manifest next update: Tue 30 Jun 2026 08:30:41 +0000
Files and hashes: 1: 0N6IEUo2jgqHd26dfLytKmDNC1E.crl (hash: Ux8XpIg1puTasKHcCNNlJd0Gaeth+WDdOrNsCdkUPHk=)
2: 89FDE0EAF51F11F0B37CE3A3596F56BC.roa (hash: J6sqcK9PMbCRqvKW2qybt86lcW9b54084Ji0qFsYxGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.crl
rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F82C, serialNumber=D0DE88114A368E0A87776E9D7CBCAD2A60CD0B51
Validity
Not Before: Jun 23 08:30:41 2026 GMT
Not After : Jun 30 08:30:41 2026 GMT
Subject: CN=6a3a4432-fd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:ac:ac:3d:c9:c6:d1:cf:55:71:39:b9:3d:
5c:9a:6b:ea:86:a0:42:b1:d4:95:26:fe:ab:8a:fb:
7f:f1:34:7e:9d:70:1b:b3:90:24:79:1c:01:88:a0:
4b:b9:b1:d9:53:d4:e7:9d:32:0d:ae:58:fc:d9:dc:
fa:87:f4:e7:a9:5d:66:75:c8:11:e8:55:e7:5a:4a:
2a:2a:52:aa:13:9e:84:15:3f:19:37:f9:04:55:20:
39:05:21:6a:d0:4e:02:2c:f9:85:b8:2c:dd:10:da:
66:aa:2b:1c:06:7e:e3:32:d0:ba:6b:1f:10:fc:3a:
f0:9a:50:14:16:ce:db:0f:88:90:01:b6:4a:fb:ed:
27:6a:b2:8d:a8:72:bb:81:50:aa:ba:97:98:62:bd:
4f:1a:b6:20:79:8e:22:3f:a7:7c:ce:07:fa:1f:88:
2b:fc:9f:6f:7c:81:ea:93:93:78:d2:b0:14:35:97:
20:f9:d4:8c:56:41:c4:1b:6f:4a:11:cf:8e:84:54:
a9:85:a4:fa:44:fd:42:fb:3e:fc:53:87:4b:a0:d1:
32:04:e6:7a:9c:63:a7:0a:e4:5c:4a:d7:12:88:08:
0c:3c:bc:63:fa:fe:cc:48:3e:44:99:8f:32:62:8d:
85:92:4f:3b:24:5a:c9:f9:80:87:d8:11:f9:b4:57:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CB:D7:49:F2:0A:08:8A:CF:C7:50:40:B9:82:2D:30:CC:6C:A5:38
X509v3 Authority Key Identifier:
keyid:D0:DE:88:11:4A:36:8E:0A:87:77:6E:9D:7C:BC:AD:2A:60:CD:0B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6b:65:3c:ee:60:2a:03:30:4c:7f:f5:81:d9:27:be:fe:72:
d4:3c:0a:f4:a5:79:61:75:3d:48:56:97:21:76:da:95:fc:bc:
7d:39:b6:34:1c:d4:14:5c:58:f6:7a:03:82:71:bf:7e:d8:3c:
f2:77:65:0d:f5:30:a9:c2:4b:c8:aa:0e:ed:11:43:1d:05:dd:
8a:ab:55:48:1a:99:f9:43:d2:a2:a6:c7:58:b9:e6:78:c9:99:
3d:d3:ed:1a:4b:e2:94:94:fe:1f:0f:dc:1a:b5:32:85:6f:25:
37:72:14:98:5e:a2:30:6f:84:d8:7a:44:12:d4:0c:29:08:2f:
4a:23:ca:03:eb:94:97:36:91:99:2b:d7:74:86:74:b1:c4:f8:
1f:e2:30:31:39:c8:cd:9c:7f:24:1b:1e:f4:7c:53:9f:05:1e:
65:c8:a8:3c:19:e7:0e:eb:2e:5e:1f:87:2d:a3:91:23:ff:91:
cf:82:ab:87:e5:3a:2c:d6:5b:72:36:ed:23:4a:82:47:d8:ae:
dc:c1:26:5c:36:c8:98:e2:55:3d:2e:e0:85:b4:db:30:d9:89:
b7:88:ff:80:c0:68:99:d1:af:0d:a2:1e:75:15:fa:8a:3e:5a:
de:b0:ad:7a:0c:1d:63:80:af:55:3e:6f:d0:de:4b:a8:a4:9e:
70:83:b3:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RjgyQzExMC8GA1UEBRMoRDBERTg4MTE0QTM2OEUwQTg3Nzc2RTlEN0NCQ0FEMkE2
MENEMEI1MTAeFw0yNjA2MjMwODMwNDFaFw0yNjA2MzAwODMwNDFaMBgxFjAUBgNV
BAMTDTZhM2E0NDMyLWZkNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCL3KysPcnG0c9VcTm5PVyaa+qGoEKx1JUm/quK+3/xNH6dcBuzkCR5HAGIoEu5
sdlT1OedMg2uWPzZ3PqH9OepXWZ1yBHoVedaSioqUqoTnoQVPxk3+QRVIDkFIWrQ
TgIs+YW4LN0Q2maqKxwGfuMy0LprHxD8OvCaUBQWztsPiJABtkr77Sdqso2ocruB
UKq6l5hivU8atiB5jiI/p3zOB/ofiCv8n298geqTk3jSsBQ1lyD51IxWQcQbb0oR
z46EVKmFpPpE/UL7PvxTh0ug0TIE5nqcY6cK5FxK1xKICAw8vGP6/sxIPkSZjzJi
jYWSTzskWsn5gIfYEfm0VzGhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSMvXSfIK
CIrPx1BAuYItMMxspTgwHwYDVR0jBBgwFoAU0N6IEUo2jgqHd26dfLytKmDNC1Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGODJDLzM5MjIxNUZDRjUx
RTExRjBCODU0N0NGMDU4NkY1NkJDLzBONklFVW8yamdxSGQyNmRmTHl0S21ETkMx
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvME42SUVVbzJqZ3FIZDI2ZGZMeXRLbUROQzFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
ODJDLzM5MjIxNUZDRjUxRTExRjBCODU0N0NGMDU4NkY1NkJDLzBONklFVW8yamdx
SGQyNmRmTHl0S21ETkMxRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC0a2U87mAqAzBMf/WB2Se+/nLUPAr0pXlhdT1IVpchdtqV/Lx9ObY0HNQUXFj2
egOCcb9+2Dzyd2UN9TCpwkvIqg7tEUMdBd2Kq1VIGpn5Q9KipsdYueZ4yZk90+0a
S+KUlP4fD9watTKFbyU3chSYXqIwb4TYekQS1AwpCC9KI8oD65SXNpGZK9d0hnSx
xPgf4jAxOcjNnH8kGx70fFOfBR5lyKg8GecO6y5eH4cto5Ej/5HPgquH5Tos1lty
Nu0jSoJH2K7cwSZcNsiY4lU9LuCFtNsw2Ym3iP+AwGiZ0a8Noh51FfqKPlresK16
DB1jgK9VPm/Q3kuopJ5wg7Nf
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:05 2026 by rpki-client