
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier: c8SD6SaNMjrXUcw8IV8VQu+JKwRqwHqrEUHfEFykwRQ=
Subject key identifier: 1A:0F:A3:2F:58:DB:C3:8C:88:12:FD:AB:E2:15:0D:CD:9A:0C:44:99
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0D0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number: 0CDC
Signing time: Mon 08 Jun 2026 18:28:06 +0000
Manifest this update: Mon 08 Jun 2026 18:28:05 +0000
Manifest next update: Mon 15 Jun 2026 18:28:05 +0000
Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 8uCpoBXOLmbUROiwdHRbYR8LCvU4n8AJqgmtG8nCnB4=)
2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
3: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
4: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
5: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 18:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Jun 8 18:28:05 2026 GMT
Not After : Jun 15 18:28:05 2026 GMT
Subject: CN=6a2709b5-540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:de:ea:1c:ed:99:07:f1:b0:ad:af:46:2b:
90:e0:55:a7:06:e5:8e:19:b0:c9:f6:da:c9:9e:72:
f0:4a:70:11:f5:e8:e4:f6:26:0b:95:34:8a:99:53:
39:e3:75:e3:f3:67:75:cd:af:55:f3:fb:ed:68:fe:
68:df:48:55:e0:6d:fa:8b:b4:d1:18:21:02:c8:ea:
0e:a5:5d:bb:bc:6e:36:24:4b:1d:06:53:6f:a1:28:
cc:22:13:48:40:2d:f3:81:ad:1d:4a:1b:9d:4c:7e:
37:f3:75:52:06:c8:e2:b4:86:70:36:bc:22:d8:88:
e1:8b:c4:bf:a6:d4:a8:2d:f7:a8:48:47:cb:45:b4:
41:08:98:e3:e2:18:34:57:42:44:45:91:84:5a:4b:
9f:31:c3:45:d0:f2:6c:63:a5:1b:7b:ca:61:67:1d:
40:cd:d8:7d:2e:31:2c:2b:e4:17:59:2d:f8:81:cd:
3a:78:13:b7:fd:ac:7f:26:2c:5e:4c:69:86:24:99:
03:7b:52:01:b1:b4:9d:2c:df:f2:11:5f:f9:a4:dc:
d3:a4:c7:8a:9c:37:f8:d8:62:1d:23:c0:52:ea:1e:
35:2b:d6:3c:e6:da:6b:18:17:30:de:13:e8:95:1d:
a0:5c:e5:86:f9:3c:04:57:9c:f9:9a:fc:32:60:22:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:A3:2F:58:DB:C3:8C:88:12:FD:AB:E2:15:0D:CD:9A:0C:44:99
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:19:cd:3c:9f:15:97:78:52:59:a8:d8:e0:ac:1b:03:fb:de:
ae:af:f8:cf:14:fa:3b:75:cc:65:59:d8:2f:41:24:fd:63:9a:
cb:c2:ca:e8:1b:5e:0a:41:a8:d9:5d:09:e4:fd:a9:d9:64:40:
46:3b:1e:88:03:79:21:38:16:80:9a:82:58:ab:97:9e:cd:e2:
f0:d7:b6:35:a1:22:11:50:db:3a:38:c2:42:0d:d5:5d:85:53:
fa:eb:fa:67:2a:90:89:1c:70:1f:28:8d:64:16:d1:0e:07:1d:
09:ff:bc:4f:82:bb:b9:d4:09:c2:88:f2:8b:28:a8:37:6b:ba:
d7:e8:c0:f0:74:4e:3d:b7:fa:fc:3a:73:68:ee:76:26:4f:7a:
64:c6:f6:c8:7d:78:72:2b:02:6f:bd:24:81:07:e7:d3:ee:c5:
54:09:90:bd:c7:74:95:87:27:e1:3f:e9:80:de:5c:ce:10:75:
f7:f0:9f:56:01:37:21:43:fd:2e:d2:1b:e9:fd:66:45:55:57:
95:06:ec:d3:fa:e7:3f:53:82:6e:10:c7:bb:8d:d4:fe:84:97:
7a:00:16:ca:c2:e9:91:f9:e7:ff:93:5c:30:62:fb:68:47:31:
86:2b:84:98:69:4d:9e:49:2e:c9:1c:63:ca:86:f0:57:28:b0:
6d:35:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 21:48:14 2026 by rpki-client