
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: 4eglp2A1mpHHH+Rzgk+f4FjKiBdBC23MqyMLAU5GyjU=
Subject key identifier: 65:04:A0:B6:D5:02:63:BE:B3:A8:BD:E2:43:F9:A8:DC:9C:E7:5D:03
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: BB
Signing time: Thu 11 Jun 2026 09:22:00 +0000
Manifest this update: Thu 11 Jun 2026 09:21:59 +0000
Manifest next update: Thu 18 Jun 2026 09:21:59 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: Bu36P6W2F+ZRK0bUyF9Tf8/Dtlwral8msjtjOfOoBi0=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Jun 11 09:21:59 2026 GMT
Not After : Jun 18 09:21:59 2026 GMT
Subject: CN=6a2a7e38-3c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:99:a0:4c:62:d0:53:f0:4b:b0:b4:ac:3a:
c0:c1:58:4c:8a:d9:e8:e1:25:4e:5b:02:9b:ec:ed:
6f:b1:53:e5:54:f5:e7:fd:fb:53:50:e7:a6:8e:f6:
62:14:d5:ba:0c:4e:ab:e7:cb:95:9f:74:cb:98:31:
ab:f9:8b:ce:7f:2e:7c:b9:f8:01:6d:a0:88:cb:13:
d8:34:22:0b:a3:3d:b6:9f:fd:b1:c0:96:f6:14:4a:
0d:da:a5:8d:fd:dc:52:55:49:e4:57:e0:5e:f4:ea:
c4:2b:9f:d9:c6:1d:e3:4f:38:4d:e7:49:af:0c:81:
86:00:81:27:15:4d:93:65:10:bf:18:61:7b:24:45:
49:7d:da:76:7b:32:2a:b5:1b:f0:4e:9b:f6:48:05:
9d:f6:fc:97:99:f2:0c:47:e8:6e:a4:85:03:aa:4e:
52:6a:94:3f:bd:f4:bb:a7:28:3b:cf:67:16:b5:04:
d7:c1:9e:e4:54:42:10:43:ce:78:76:83:b6:80:b2:
4b:a5:e9:30:d6:d2:00:ec:41:8f:8d:17:d0:60:94:
a8:8f:3a:76:27:43:99:49:17:8c:87:eb:b4:75:cc:
2f:23:c3:eb:54:50:77:41:1c:d7:7d:74:0b:cb:5f:
53:16:7b:09:7c:eb:93:6e:9e:25:bf:7d:47:b9:a9:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:A0:B6:D5:02:63:BE:B3:A8:BD:E2:43:F9:A8:DC:9C:E7:5D:03
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:98:ff:b1:99:ea:15:fd:92:04:f6:c0:1a:40:e3:c4:6e:14:
f8:1e:78:19:f6:ac:42:37:08:44:d0:f0:64:b3:65:dd:f4:07:
0b:62:1f:a7:94:67:d1:b7:97:c0:fc:6b:a0:97:a4:43:1b:6a:
da:ee:e6:44:86:3f:76:71:9c:b9:ab:63:83:b3:23:8c:44:b8:
57:50:a2:65:c8:29:6c:78:85:b1:83:fd:fa:15:e4:7d:8a:fa:
65:22:75:5b:2f:60:25:dc:13:a6:df:9a:49:96:0d:d6:fb:d4:
27:d9:3d:6a:45:64:64:25:10:98:6d:52:2d:23:8f:f8:e4:e9:
1d:31:d5:de:93:6c:45:48:c4:02:51:a1:59:91:0b:39:6e:3d:
17:ba:f6:f3:bc:ba:70:17:e1:7a:1c:e9:64:90:d9:0a:c4:39:
38:32:89:8e:88:bb:16:9f:cf:85:37:7e:18:af:93:92:f0:27:
fb:64:73:83:d9:30:82:77:c6:53:3e:6c:56:2d:0a:7f:0d:5a:
60:c9:35:d8:30:37:99:ac:c7:58:2d:ff:63:02:8a:97:8d:9b:
58:5a:aa:4e:b4:e6:73:68:6c:62:a2:0b:dd:a4:a6:89:82:9a:
79:d3:2a:ac:e9:7b:32:06:10:d6:06:dd:1c:b4:eb:03:55:1b:
95:e0:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:53 2026 by rpki-client