
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: JZtU0LbmiJjDJTdi+q/QG9u/3C+lrxvi9e4P9fygdvA=
Subject key identifier: 78:0E:AA:4A:45:F0:11:11:66:B4:A4:E7:A2:E2:5D:B1:38:2C:D4:BA
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 02A1
Signing time: Thu 11 Jun 2026 03:53:47 +0000
Manifest this update: Thu 11 Jun 2026 03:53:47 +0000
Manifest next update: Thu 18 Jun 2026 03:53:47 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: eL+SKmY16ssi1n1et9ee7tmV3V+3SMVDSkGJPt6c01o=)
2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Jun 11 03:53:47 2026 GMT
Not After : Jun 18 03:53:47 2026 GMT
Subject: CN=6a2a314b-53d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:f3:ad:7f:93:ee:45:d6:84:7f:ef:f2:20:
5d:40:9a:ce:69:0b:61:e5:50:4b:61:4c:e5:94:7d:
a9:1b:f3:80:53:bb:b4:ef:c0:07:2e:04:b7:53:b2:
4f:87:c5:32:9b:a8:aa:79:56:b8:2d:07:4b:f8:59:
05:6e:a1:f1:c7:5f:da:b9:bc:b6:37:a8:93:62:71:
df:19:03:3a:73:7b:fc:f4:5c:e6:5e:70:80:47:58:
57:f5:95:62:9f:fe:39:29:d8:9f:cc:0c:2d:42:77:
3c:4b:1b:20:18:ac:6e:16:0a:bd:3b:b1:bc:82:0c:
e5:90:f4:d8:74:92:3a:90:2a:28:16:54:9b:6d:b7:
86:31:fc:0e:a5:b9:16:d5:39:8d:1f:d9:0f:98:06:
37:ea:16:28:56:bf:3f:b0:82:50:7f:5a:28:58:6e:
95:cc:da:45:fc:a7:48:d0:84:3d:ca:54:47:c7:86:
a6:04:21:c3:a2:39:ae:97:64:a7:71:c5:7a:55:f9:
cd:04:5d:c9:06:88:20:5e:71:13:0a:ce:46:12:d2:
c2:87:ad:55:0d:74:37:13:46:50:17:4d:28:0b:3d:
09:b0:d5:58:0e:e5:6d:21:ae:25:4a:a4:95:f1:e9:
21:e8:74:d4:d5:74:77:13:23:f6:a0:20:04:43:30:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:AA:4A:45:F0:11:11:66:B4:A4:E7:A2:E2:5D:B1:38:2C:D4:BA
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:65:a6:a7:8b:f6:4e:32:0d:0c:03:0e:fb:f6:9d:ef:8c:08:
9f:d7:6b:39:77:08:6a:26:75:05:e2:e6:84:a4:f8:46:ec:d8:
1d:81:6d:1f:e4:c3:20:9b:c1:e2:79:78:c3:49:93:bb:de:1a:
1e:a3:5b:10:35:50:4d:45:38:e6:19:7c:c9:56:3f:b0:4e:b7:
fd:4a:56:88:1c:8e:0a:df:57:a6:a5:53:e8:5e:ec:47:41:3b:
d3:7b:40:27:bf:0b:c2:f7:c7:a2:42:fb:93:bd:81:ef:99:35:
2d:79:07:a9:fd:39:69:71:34:d8:bf:8a:75:e8:36:71:42:d1:
72:3f:a4:9d:fc:ec:70:48:1a:49:8b:1f:fd:79:78:f5:41:d2:
2b:79:84:23:fc:59:a0:20:42:75:4a:a5:99:9a:47:0e:24:82:
d6:1e:98:8f:56:37:58:a1:b3:cd:b4:b7:8a:0d:f7:23:96:d4:
e6:68:02:9d:fc:53:34:8f:c2:54:ec:9e:f9:5b:1c:b1:ed:e2:
06:19:5f:58:df:fd:e1:eb:a2:85:99:8b:16:af:40:79:fc:c6:
7d:6e:1f:1f:a7:46:39:86:37:35:0f:3b:fa:63:51:fe:46:e3:
f1:1d:64:57:57:6b:2f:8d:76:af:3a:31:90:53:1e:95:53:ad:
24:bb:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:51 2026 by rpki-client