
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier: UOC39d5XbBbaqtWsxG0jxvIItsiGDtvE9zSXpM9Vg1w=
Subject key identifier: 5A:F7:AE:F3:A1:87:C5:90:C7:F2:CD:60:3B:D2:B4:D2:61:FF:23:38
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number: 06AA
Signing time: Mon 22 Jun 2026 22:26:58 +0000
Manifest this update: Mon 22 Jun 2026 22:26:58 +0000
Manifest next update: Mon 29 Jun 2026 22:26:58 +0000
Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: ijf6u0d2mAYTPeS6Qp/ahLfkVrHXbiRG4BcfNzKKMKw=)
2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: joO9Qy3+rJ6oBa6qjiJ2z+ITyusuwJIIvF1Oil74bF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Jun 22 22:26:58 2026 GMT
Not After : Jun 29 22:26:58 2026 GMT
Subject: CN=6a39b6b2-e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:2d:7d:32:7f:4e:5f:0f:7b:65:24:bf:5c:
5d:b0:4c:6b:2c:25:f1:55:fc:a0:33:ff:ef:e1:ae:
f2:f9:39:f9:22:a6:5a:19:62:d4:11:93:f6:c1:8a:
62:6b:e3:06:ae:e9:62:ea:08:41:5d:e1:c2:00:95:
98:38:76:c9:66:fc:aa:48:9d:dc:a0:d8:35:c2:34:
02:f4:bb:4c:61:0f:4d:1e:bf:4b:cc:ed:90:14:38:
33:1f:70:d1:89:30:e4:9a:f8:a8:45:fe:f9:07:f4:
3c:54:32:6b:3a:6f:06:9c:ff:be:8f:c4:5a:8c:0b:
1b:33:7f:e5:fe:dc:92:ed:22:fe:61:ed:83:18:a2:
52:41:c5:aa:c1:49:a6:de:69:47:be:94:de:51:d0:
dd:d9:e0:ac:2f:c2:fd:52:87:5e:18:35:02:5c:6c:
f6:b6:8c:59:12:eb:8c:42:25:bd:46:16:f0:79:b9:
90:17:52:13:c3:58:47:64:07:70:c9:cb:41:b9:68:
fb:f9:d0:5e:6e:b0:8e:a4:b5:a8:60:52:ee:5f:9a:
0d:46:f2:0d:c2:e4:b5:9f:73:3c:dc:ca:41:eb:a8:
d7:0b:aa:f1:0e:c0:29:97:a1:c9:19:5d:c2:05:9e:
a2:88:db:c9:52:53:d6:ec:f8:bd:30:17:3c:bf:ae:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:AE:F3:A1:87:C5:90:C7:F2:CD:60:3B:D2:B4:D2:61:FF:23:38
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:31:e3:5c:4c:4d:41:24:d2:8a:c5:e7:8f:8a:58:28:db:
14:bf:93:9d:7c:70:42:34:dd:79:31:9f:1c:5a:8d:7c:fb:3f:
38:19:43:d8:f7:88:de:9b:41:12:d9:a8:a5:0b:d8:01:ca:f6:
72:c9:b2:0c:11:7e:43:be:4b:60:6f:89:b1:bb:65:a2:c7:fd:
e1:7f:25:40:14:c0:0d:b0:4e:e4:b2:55:16:69:85:14:e4:ee:
f2:36:29:08:da:3b:48:28:af:b3:a7:75:c1:f4:b4:d0:c8:2e:
94:f9:5c:c2:09:da:52:27:ca:c7:10:ad:fd:81:f6:3c:a3:cc:
da:1e:6c:c6:2d:63:74:07:dc:01:e4:da:25:dc:42:8c:49:79:
a0:48:07:cc:34:d1:e6:7a:7e:cf:8a:b3:2c:0d:a2:d6:a0:98:
15:d5:28:ab:c0:69:58:d4:76:9b:2d:43:6e:a6:9b:b2:06:5b:
dc:61:f2:ee:21:6d:10:25:4e:46:79:9c:10:94:83:cb:e1:a8:
b1:2f:35:47:c1:2f:17:af:4c:b7:91:9a:61:6e:18:8c:75:64:
fc:c3:87:ff:c2:f4:a7:22:55:64:bf:50:d4:6a:2f:c5:cf:e3:
04:c1:61:59:b9:24:67:8f:48:14:99:d0:d1:7b:94:b3:07:27:
fa:99:fd:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC
OEFDNzQwQzkwHhcNMjYwNjIyMjIyNjU4WhcNMjYwNjI5MjIyNjU4WjAYMRYwFAYD
VQQDEw02YTM5YjZiMi1lM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAUtfTJ/Tl8Pe2Ukv1xdsExrLCXxVfygM//v4a7y+Tn5IqZaGWLUEZP2wYpi
a+MGruli6ghBXeHCAJWYOHbJZvyqSJ3coNg1wjQC9LtMYQ9NHr9LzO2QFDgzH3DR
iTDkmvioRf75B/Q8VDJrOm8GnP++j8RajAsbM3/l/tyS7SL+Ye2DGKJSQcWqwUmm
3mlHvpTeUdDd2eCsL8L9UodeGDUCXGz2toxZEuuMQiW9RhbwebmQF1ITw1hHZAdw
yctBuWj7+dBebrCOpLWoYFLuX5oNRvINwuS1n3M83MpB66jXC6rxDsApl6HJGV3C
BZ6iiNvJUlPW7Pi9MBc8v66PJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr3rvOh
h8WQx/LNYDvStNJh/yM4MB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2
Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh
MFN6WWkzWk5PWXk0ckhRTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOdMx41xMTUEk0orF54+KWCjbFL+TnXxwQjTdeTGfHFqNfPs/OBlD2PeI3ptB
EtmopQvYAcr2csmyDBF+Q75LYG+Jsbtlosf94X8lQBTADbBO5LJVFmmFFOTu8jYp
CNo7SCivs6d1wfS00MgulPlcwgnaUifKxxCt/YH2PKPM2h5sxi1jdAfcAeTaJdxC
jEl5oEgHzDTR5np+z4qzLA2i1qCYFdUoq8BpWNR2my1DbqabsgZb3GHy7iFtECVO
RnmcEJSDy+GosS81R8EvF69Mt5GaYW4YjHVk/MOH/8L0pyJVZL9Q1Govxc/jBMFh
WbkkZ49IFJnQ0XuUswcn+pn9ww==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:56 2026 by rpki-client