
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: KfAxv/AR374PWetrBinsFBaPmaBt+R8uXinMCsumT/8=
Subject key identifier: E3:AF:91:69:77:51:7B:8F:9F:20:82:94:D4:9D:0A:E7:A9:60:38:47
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 1403
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 13E8
Signing time: Thu 04 Jun 2026 16:56:34 +0000
Manifest this update: Thu 04 Jun 2026 16:56:33 +0000
Manifest next update: Thu 11 Jun 2026 16:56:33 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: vSbq9VVpkr362hkOruJOtnyvyX/v8XnrKH03/NJ6KLo=)
2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 16:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5123 (0x1403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Jun 4 16:56:33 2026 GMT
Not After : Jun 11 16:56:33 2026 GMT
Subject: CN=6a21ae42-27e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f0:c7:e3:07:5f:2c:09:46:8e:1a:26:84:a0:
f1:16:1f:66:83:37:78:83:a5:9e:05:95:ad:87:5c:
29:1c:7c:27:35:82:f2:3b:80:ed:0c:e5:a2:82:6a:
d4:1d:de:46:75:5a:1f:d1:fc:6b:b9:6d:33:26:ec:
7e:d7:a9:5a:29:23:a6:a0:03:89:27:a7:2b:31:9a:
f1:bc:2c:6b:e3:58:ef:41:67:7b:d8:a6:ed:6f:81:
33:32:44:ee:f3:15:6f:05:d2:16:f3:d0:2b:c2:79:
5d:5f:60:9c:ae:fa:e6:09:3f:cd:e3:ee:d6:57:a0:
30:ce:09:44:76:15:7a:b4:86:c4:99:40:05:53:3a:
e2:24:77:57:44:76:b4:0f:07:eb:a5:98:76:b1:88:
dd:e3:18:5f:2a:66:c1:cd:80:c3:e2:53:27:e9:58:
db:eb:fa:d4:94:2a:29:9f:7e:08:f9:c5:c7:e0:19:
92:48:d2:4a:32:9e:b8:f8:ac:49:44:37:9c:4e:d0:
bd:ad:28:b0:25:a3:df:21:05:3f:07:5b:38:49:aa:
44:f4:85:f9:58:90:97:96:b2:cd:05:21:b7:37:07:
60:11:83:98:50:e1:42:60:23:81:9a:6d:11:85:63:
21:89:c4:10:de:33:da:7e:e1:35:de:ed:91:79:c3:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:91:69:77:51:7B:8F:9F:20:82:94:D4:9D:0A:E7:A9:60:38:47
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:65:b3:ed:33:85:d3:4e:35:85:c9:4b:ef:08:c7:4b:61:1f:
56:68:1e:b7:34:61:32:17:62:54:2a:73:12:27:30:91:16:a9:
4b:18:22:45:91:85:45:7a:e1:c3:63:98:a0:dc:df:88:24:9f:
af:98:fd:32:ba:ee:7f:22:de:ea:bd:e5:16:1c:4c:32:35:c9:
ce:14:e4:8a:a3:08:e8:2e:e0:45:26:ea:e3:a7:40:df:77:8b:
db:34:bb:32:e3:7b:66:93:51:62:99:61:65:42:55:0f:00:6b:
8b:e4:a9:3f:77:50:09:0d:56:60:77:5f:b1:28:20:8b:4b:a5:
0f:94:18:83:06:0e:4b:4d:3f:7b:e5:88:9c:49:a3:5f:98:b0:
e6:53:e9:48:c3:ba:f7:51:56:27:da:92:ab:76:38:bc:52:29:
ba:48:90:32:e6:9a:bb:1d:1a:83:3a:dc:ac:05:4a:ea:80:05:
d1:9f:8c:fc:f0:b1:df:20:6e:80:c4:81:90:cb:c4:af:0b:ef:
85:af:a2:38:0b:9e:ae:78:f1:70:51:09:31:c9:34:68:01:1b:
bc:a3:f4:25:da:55:45:85:5c:0d:54:c8:45:5c:8c:68:69:65:
91:3c:c0:d5:3f:f0:42:9e:c4:f7:cb:2f:ce:bb:ca:ef:c3:f7:
75:86:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:24 2026 by rpki-client