
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier: Sq+PA4vKIkJsOLtCsBeFCD/P6Dewm5+ksYqpQz1BGHM=
Subject key identifier: 60:63:EF:50:14:92:54:64:D0:0D:D2:25:89:45:C5:52:B2:9E:86:F0
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number: 50
Signing time: Fri 05 Jun 2026 08:42:16 +0000
Manifest this update: Fri 05 Jun 2026 08:42:15 +0000
Manifest next update: Fri 12 Jun 2026 08:42:15 +0000
Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: vyvlY1eQmNOT+lNSfLTiiB50xZQtaC64ySjAcB4F6jQ=)
2: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=)
3: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Validity
Not Before: Jun 5 08:42:15 2026 GMT
Not After : Jun 12 08:42:15 2026 GMT
Subject: CN=6a228be8-219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:12:51:9d:e9:da:a8:86:68:fc:80:fe:2e:
85:6a:d6:79:43:99:a5:58:9a:bb:4c:47:d2:7c:79:
f3:26:3c:5c:f3:b1:49:0b:d0:ff:04:be:23:c8:75:
23:9d:83:65:b9:07:40:63:c1:5f:4d:c3:f3:67:a9:
94:e0:24:b9:fb:81:99:b2:b8:58:6e:9e:51:7e:f5:
ff:bf:b1:4c:76:c4:1d:ab:22:fd:18:d8:05:30:dd:
b6:51:64:95:0b:d0:75:84:ae:10:dc:19:3d:b6:d4:
6c:0d:d8:af:9c:56:72:63:79:56:88:59:10:dd:db:
e8:81:8d:c4:bd:72:5a:84:bb:83:07:01:c0:e0:92:
da:42:86:d9:0e:0a:6c:76:29:b7:9b:3f:b0:bd:05:
9d:f1:b5:e3:64:36:d3:31:85:2b:dc:e4:b1:33:8b:
c7:78:ee:4f:b8:58:e3:23:d5:31:26:60:24:60:62:
48:eb:b8:81:d9:bb:a2:0e:03:50:a8:ab:49:5f:1d:
bf:ea:aa:b9:cf:74:8d:d2:b3:25:3f:4d:0c:c6:08:
84:99:04:bb:26:d2:28:c4:c5:b0:fb:06:2f:bf:ae:
34:a9:bc:5a:51:98:12:a5:59:bb:50:96:b0:1f:77:
d0:a9:ed:07:eb:87:63:b1:25:08:46:92:e9:3d:b4:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:EF:50:14:92:54:64:D0:0D:D2:25:89:45:C5:52:B2:9E:86:F0
X509v3 Authority Key Identifier:
keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bd:76:b8:a8:b4:dc:8b:07:1b:da:60:46:9b:00:c8:43:45:
18:94:69:d3:1e:fd:42:3b:ba:0b:25:04:37:7f:3e:0a:ea:3e:
d8:17:e3:0f:ab:cb:f4:c0:92:28:f9:c2:d3:29:1b:71:28:46:
35:8c:76:47:61:f3:e8:a8:23:5e:00:88:5c:68:2e:85:0a:d0:
eb:5a:1e:c8:f1:8f:c4:44:91:f6:11:8c:e0:30:5d:d9:e5:45:
25:2d:18:22:40:a4:14:88:32:ed:ca:88:65:0e:c8:4d:a9:92:
74:8a:22:9c:0f:6a:b3:b0:de:eb:e7:d7:94:7b:02:55:37:0f:
1b:ac:7c:16:96:1c:77:f2:04:32:6e:61:17:af:9d:78:cc:47:
24:ca:5a:4f:d5:3b:94:77:ab:e5:1a:48:67:44:0f:1c:65:ea:
6f:70:9c:91:05:0c:9f:8d:aa:0d:74:68:a5:db:f6:a6:16:61:
ba:28:4b:bd:7b:ed:14:ca:06:45:00:e0:f3:5b:fb:18:67:9f:
3d:14:f0:85:8f:35:83:e5:7d:f1:33:1e:db:9d:50:3d:18:ac:
36:b7:79:6f:10:4f:11:fb:ae:e2:33:27:47:3b:0f:60:69:63:
5e:21:a1:30:15:ee:c0:24:d5:f3:98:f2:fd:ab:5d:e7:47:fe:
7e:af:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:21 2026 by rpki-client