
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: NeED3QoISFZGsJvCdc/bB0kg5zPj21eTU1yOOYM4kc4=
Subject key identifier: 7C:CD:63:17:20:4F:E9:6A:87:8D:BA:3A:76:25:FB:4D:DB:4D:55:1F
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 0346
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 032F
Signing time: Thu 11 Jun 2026 08:30:17 +0000
Manifest this update: Thu 11 Jun 2026 08:30:16 +0000
Manifest next update: Thu 18 Jun 2026 08:30:16 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: DfEIeKImT40a7uciW4d47QUW8M8sa3MxcQjGgJ6iQlE=)
2: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: 7sE/4U476Hc/mgcr6agMQHrBpEwfsvBVQ9XVXdE0iPw=)
3: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: wevBG0wx/RR5cJLa7ldnPoK/rlGc4xXyBB/69btBp6o=)
4: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: XbDlXjkT6B/0pKZNJe/T0DRFMQ69K8sgLZCTuOzQfWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Jun 11 08:30:16 2026 GMT
Not After : Jun 18 08:30:16 2026 GMT
Subject: CN=6a2a7219-34f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:a5:36:51:d6:3d:b6:07:1d:09:1c:df:46:
1a:de:4d:b6:41:6b:8a:40:8f:64:0b:e9:c0:0d:d2:
ac:2e:9b:58:34:da:49:d2:56:ae:26:14:a4:52:c1:
90:23:75:8c:36:7d:e7:1f:c8:1a:c5:86:18:ca:57:
4e:b6:f0:49:54:c8:e6:ef:c2:bb:3c:42:91:bf:00:
c6:de:f2:5b:99:79:4e:97:e3:f4:6c:6f:bf:c0:52:
ef:2d:8d:12:cb:38:65:25:53:7c:68:f9:28:3b:78:
36:9f:cb:1b:bd:74:64:0c:5d:27:26:ce:9e:d1:b8:
df:6b:2d:60:03:9b:e7:44:e2:ab:a0:af:4a:a3:bb:
3f:42:67:09:eb:f6:b5:29:7d:4a:7d:e4:58:3b:56:
6a:33:19:e0:29:a0:fc:ff:56:cb:30:70:ac:16:ef:
3c:d6:8a:8c:9a:a1:e3:05:47:de:d5:a5:9a:9f:ff:
4f:d8:11:e2:27:05:d3:79:d4:89:3e:16:90:fb:e0:
5a:14:30:0e:66:69:81:49:fd:5c:5a:42:82:14:18:
3c:07:1a:a4:96:4c:80:8f:7a:0a:fe:40:4e:13:b7:
c0:fd:30:f7:3c:fe:84:91:cc:27:a6:d7:af:fa:7d:
fb:3c:3c:ab:b0:0f:b5:dc:e4:67:9d:a7:8c:37:36:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:63:17:20:4F:E9:6A:87:8D:BA:3A:76:25:FB:4D:DB:4D:55:1F
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0a:9e:07:57:5f:7a:24:6d:0f:59:bd:0c:37:ba:cc:e9:e3:
da:af:de:4a:2a:9f:ad:7e:38:6f:4f:c1:06:76:7c:ae:18:4c:
c0:c1:3d:02:52:31:85:2e:31:bc:44:b9:73:a4:fa:9d:80:12:
91:a9:a8:72:2f:ce:f3:80:cc:5a:93:61:7c:01:9c:e2:46:95:
03:2d:6e:04:fd:03:3b:a9:b1:a6:14:9c:20:5a:d1:c8:f9:7b:
89:71:68:30:cb:b9:93:c1:12:17:1d:f5:8e:b6:0f:a2:35:fd:
f8:5b:27:d1:07:a5:81:56:47:dc:8f:b4:8d:f1:ef:68:ca:fd:
13:ee:24:75:4d:9e:15:19:02:e7:07:4d:0f:9a:a2:8f:75:ab:
a7:67:67:1a:11:76:db:f3:d5:26:31:0e:68:97:db:a1:de:7a:
c2:5d:2f:b9:34:fd:2d:48:0a:87:f0:48:03:86:05:c8:1c:c4:
75:5a:d1:05:3c:f3:b4:71:10:b9:47:a2:60:63:1f:49:36:e9:
30:79:7b:2f:32:44:30:36:7e:46:86:2a:6f:37:e4:7a:cc:56:
f8:c9:e3:64:85:e5:a6:9e:ec:90:44:b6:97:ab:f3:22:ec:17:
1e:38:52:fb:81:61:4a:0b:14:66:f1:54:59:ae:8e:ec:70:9b:
6a:9e:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:06:44 2026 by rpki-client