
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: 7SOmGsfd0YJEf9EBZBrM0NW9ihm846GKe23PZqR+7Wc=
Subject key identifier: D6:56:F7:97:7E:E5:13:0D:09:FD:D3:28:3B:DD:A0:27:41:90:C4:DF
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0DEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0DDD
Signing time: Mon 22 Jun 2026 17:51:42 +0000
Manifest this update: Mon 22 Jun 2026 17:51:41 +0000
Manifest next update: Mon 29 Jun 2026 17:51:41 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: /Tao+yMrDNnqyYuoSJTgB3Tvnxrgbah2C4Sc8EXNOx8=)
2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: 5UiluviLkvdmrPxj6Fg50iGwlauvTqLugtpFjTJWRPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3564 (0xdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: Jun 22 17:51:41 2026 GMT
Not After : Jun 29 17:51:41 2026 GMT
Subject: CN=6a39762e-d34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:36:f8:dc:63:89:85:05:43:2f:98:60:26:
97:43:46:07:ba:ee:b5:ae:96:39:e0:ec:0e:b7:1a:
9e:bf:9b:bc:b2:36:1f:2a:6c:92:73:e4:02:d9:b9:
82:bd:b2:92:e4:b1:f2:3e:fc:9f:16:9f:a4:02:b2:
72:38:5b:dc:12:2b:7b:47:b0:aa:f1:66:24:7a:0c:
a0:d9:34:21:10:38:eb:02:d9:4d:d8:de:aa:e2:de:
e0:9d:a1:95:6f:7d:2a:ee:f9:09:18:dd:b8:3a:8a:
b7:b9:0d:24:f4:96:70:dc:c3:38:1f:76:a3:e7:e9:
81:e7:74:18:1b:54:20:0e:86:48:e0:ee:71:01:8f:
91:0e:2e:49:dc:7d:ed:b3:58:52:8a:e7:6e:28:5a:
ec:e1:e3:d8:32:46:08:1a:10:d4:c9:12:4e:5b:c6:
e4:28:00:7a:58:54:5c:43:c5:2f:9d:a1:2e:ff:ff:
3a:7f:82:a9:3c:13:cf:91:d7:82:9e:42:29:fb:ed:
d2:c9:b0:0e:55:c3:c4:67:be:7c:3a:0f:4b:27:8e:
53:d3:df:45:c3:2c:43:ef:1d:24:b1:46:20:09:13:
4c:96:55:ed:dc:d1:4f:20:54:c4:76:ca:76:f4:5a:
b4:8d:df:12:9b:79:f2:33:f8:9f:a6:1e:12:06:0b:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:F7:97:7E:E5:13:0D:09:FD:D3:28:3B:DD:A0:27:41:90:C4:DF
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:00:95:ce:14:e7:dc:7e:fb:00:9e:87:d5:ef:7f:59:1b:
d3:62:4c:86:84:32:d2:31:1c:52:e6:33:4b:22:a8:92:4a:a1:
36:ba:29:cc:67:7e:e1:37:03:16:f7:7f:8c:8e:14:c3:9c:f3:
82:86:64:6f:ba:64:50:77:e0:4a:d8:8c:fd:b8:87:35:c4:95:
78:2f:ba:81:b6:4b:6a:da:8c:cd:65:69:49:21:4d:ec:f4:0d:
f3:ce:ac:bb:c9:b1:7b:9d:ab:d7:28:cb:89:af:1b:66:2b:bb:
df:de:ca:34:d3:5b:3c:8d:3a:18:ab:c4:da:15:49:ac:ca:b3:
bf:71:8e:ee:2a:df:15:85:e1:f8:34:f8:c8:b1:51:87:b0:42:
d2:55:2f:f6:85:c4:4c:78:1e:b6:80:b8:fd:f4:eb:92:30:89:
e7:31:8a:73:68:bd:87:43:cd:c3:d2:07:d8:45:59:7a:9d:b6:
87:fe:c5:08:2e:34:d7:c7:96:85:d2:46:67:7a:c4:8f:23:5a:
a8:92:6e:85:39:94:8a:62:67:08:20:a2:f4:1b:07:29:57:fe:
4a:e2:79:ee:ed:ae:e9:f8:ff:32:49:7b:7c:0c:96:7a:3d:73:
13:a9:2c:00:bd:10:0a:09:2e:c4:3b:f7:20:76:e8:eb:0e:20:
80:b2:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:51 2026 by rpki-client