
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json)
Hash identifier: YZaJe6M4IZRVoyyUAPjfJ8R1AUhx95sz8sT5fCyu+Mw=
Subject key identifier: 47:2D:49:82:4F:97:FD:2F:93:EC:11:0F:F6:F7:A0:FF:95:2D:D4:92
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
Manifest number: 029E
Signing time: Thu 11 Jun 2026 03:50:58 +0000
Manifest this update: Thu 11 Jun 2026 03:50:57 +0000
Manifest next update: Thu 18 Jun 2026 03:50:57 +0000
Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: YLozzvNvpFDePwD2HvCe4hJgr2PWb8vfIf/4i4CE+84=)
2: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: niAe7uFd21HH6WERU7iTs3hEOi8m5PmAvBhzB5K4rB0=)
3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Validity
Not Before: Jun 11 03:50:57 2026 GMT
Not After : Jun 18 03:50:57 2026 GMT
Subject: CN=6a2a30a2-a0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:f0:66:f5:86:dc:06:18:72:29:f5:a1:97:
01:b4:47:bd:47:3b:aa:63:fa:d9:09:89:06:bd:51:
31:f6:95:39:93:35:40:09:17:04:ad:c1:5f:91:f5:
7c:87:6f:d0:a9:eb:f6:9a:1b:94:db:0e:d5:ec:e2:
2d:f6:30:57:21:fb:5a:2c:c9:2a:70:ac:07:89:c1:
03:c6:13:41:5b:47:2b:8f:77:dd:27:ce:8a:07:de:
35:9c:a2:b8:4d:93:d0:8c:09:b1:76:02:a2:99:09:
c6:d2:03:8a:b4:b3:34:f7:e9:08:7d:e5:86:16:16:
de:fa:35:6f:09:7f:a6:83:62:74:07:59:f0:05:c7:
a9:21:7d:07:ed:6a:9e:d1:34:b5:6b:b8:36:18:f1:
ff:98:b3:2f:23:0e:d0:8b:31:b5:9a:f5:f5:34:7b:
f5:dd:0f:30:a7:2b:3d:6e:52:46:34:5a:95:02:4e:
48:d9:f7:f4:c5:4a:03:9d:d2:32:af:5e:7b:1d:ed:
13:a7:f1:0c:0c:0e:df:d5:6c:c5:f5:d9:c8:49:9c:
fd:ed:7b:30:0c:0c:75:7b:9d:53:42:c9:c4:19:1c:
b8:9c:75:00:a1:9d:f4:e3:d0:d5:f8:ed:c1:42:93:
97:41:ab:95:25:88:4d:a4:f3:9f:ad:b4:8e:e2:b9:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:49:82:4F:97:FD:2F:93:EC:11:0F:F6:F7:A0:FF:95:2D:D4:92
X509v3 Authority Key Identifier:
keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:20:8a:af:00:72:3c:a3:cb:4a:fb:cb:33:2b:56:2e:28:62:
71:39:7f:e1:b4:b5:bd:82:26:12:f4:43:1c:bc:3f:59:f9:46:
ff:9c:37:ce:7e:16:14:7a:bb:ae:16:19:1c:a0:3f:43:fe:ac:
ea:73:3d:a3:29:10:cc:0b:99:f2:18:ea:1b:8d:43:94:08:eb:
4b:f8:55:75:fa:27:6e:bd:28:c7:70:eb:ff:ae:c8:4d:48:97:
ca:fb:1c:61:e7:15:7b:5f:ba:f1:bc:dd:7b:b5:2c:7a:1d:02:
5a:3d:c3:85:41:e4:a2:81:b0:55:e3:dd:c0:78:a1:89:4f:32:
38:92:27:df:5f:44:04:6a:9d:d0:d3:f2:4f:f6:42:15:01:61:
72:80:98:19:d6:1f:72:e8:40:ab:d7:fd:69:b6:65:82:e8:41:
4a:6a:b0:10:69:9b:17:35:b9:89:30:e1:54:68:64:fa:db:af:
68:e4:26:bd:84:25:bd:d6:4f:62:b7:54:40:d5:48:89:ca:0b:
9b:b8:72:61:95:be:ce:c7:a0:76:6b:c0:b0:e9:e3:c0:9a:c0:
87:ee:c3:e3:a6:ed:73:6a:c8:0d:fe:52:6f:34:c7:1e:28:f0:
63:e7:7a:d8:e3:c2:48:db:a2:b0:ab:c2:bb:eb:cc:ab:0d:77:
e0:90:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:23:58 2026 by rpki-client