
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier: E3KaSf9fyWx89cgOfgT7yEovtCmV2lRfsHI2pOWCuls=
Subject key identifier: 00:4A:8C:8A:B4:3B:21:FA:3A:97:32:3E:31:C8:B3:6C:64:ED:98:B6
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number: 0105
Signing time: Mon 01 Jun 2026 06:54:48 +0000
Manifest this update: Mon 01 Jun 2026 06:54:47 +0000
Manifest next update: Mon 08 Jun 2026 06:54:47 +0000
Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: UwSWdacruTIzSZgEDjx9UhDKD9/0MwytCLvRaN0hEUM=)
2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: 8qLxul8XuxEVwOeqRrW614nwBywey9BFtI58Up/eWgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: Jun 1 06:54:47 2026 GMT
Not After : Jun 8 06:54:47 2026 GMT
Subject: CN=6a1d2cb8-7b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:b4:76:ff:06:55:ef:9e:0b:ed:68:8d:f9:
df:2f:c1:cd:1d:2a:70:23:e0:b2:6d:db:2e:bd:cb:
85:90:e3:01:43:5f:0c:aa:fe:4d:aa:91:56:db:ad:
bd:bf:c6:7b:ea:bc:ba:f7:1b:a0:46:17:03:60:e2:
80:93:2a:5a:62:a5:29:b4:f8:47:59:de:95:9f:68:
1a:58:7d:ab:42:54:7d:9e:a7:f4:4d:a6:8d:d6:f6:
cb:f9:59:13:47:95:ac:69:aa:46:e1:2b:ea:bd:19:
8b:15:5e:7f:ba:ad:56:8a:a1:50:a8:c1:60:ce:f3:
4b:a7:31:5a:50:00:56:c1:ea:8d:f6:ad:fb:a4:50:
54:20:23:53:c4:d4:3c:5f:7a:b3:8d:b4:32:be:68:
84:4b:a0:96:2f:a7:4c:82:22:b0:2e:d1:a9:31:48:
87:92:80:91:22:96:8d:0a:68:42:2c:a3:04:30:b2:
57:dc:79:36:49:d5:98:b3:b4:8a:46:86:93:01:bc:
2b:84:06:95:09:cb:25:bc:a5:2c:08:da:b7:bb:68:
1f:e6:b6:87:f2:7b:27:29:ca:97:d9:da:bc:85:ff:
7d:d8:42:2e:a8:fa:0d:ba:30:32:16:4f:65:6d:e8:
f5:76:03:13:a1:ef:d7:ad:be:c9:97:0c:82:cb:6d:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:8C:8A:B4:3B:21:FA:3A:97:32:3E:31:C8:B3:6C:64:ED:98:B6
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:60:a6:8c:1e:40:fb:da:9b:8a:23:a7:64:a8:eb:cd:45:8f:
9b:f1:97:ce:64:8a:2b:a6:be:a7:41:b0:80:03:32:ae:44:9d:
8f:0e:39:12:98:76:62:ab:30:8c:94:77:ea:49:b3:c0:29:87:
33:d9:d6:12:5a:94:79:a4:f5:e5:a5:a7:44:d2:e2:45:b4:ac:
68:d0:62:f7:8e:65:03:f4:0b:31:b0:51:04:47:1c:3a:60:8c:
d4:0d:d6:a1:f4:c4:1c:87:b4:1b:f7:e4:6d:7c:41:18:e6:0a:
a9:94:3d:af:5b:18:12:41:ee:cc:3d:7d:3d:da:03:d6:06:a0:
97:0a:b4:b6:17:8e:dc:6d:e5:fb:6d:9f:60:41:21:11:37:d4:
c4:de:e3:fb:3b:a2:26:e0:c5:2b:56:e9:7d:c2:90:51:b0:bf:
3c:15:74:f1:80:25:9f:9d:fd:a2:14:a4:fd:cd:30:8e:d7:23:
89:52:16:29:c4:4f:d6:61:27:e5:14:9d:19:62:19:c4:03:3c:
2b:63:c9:d4:4f:45:ff:c5:d2:6e:eb:13:7d:ee:58:02:75:6d:
5f:8a:1b:15:82:fc:06:ba:d3:3e:04:e5:32:4b:fb:f3:6f:25:
ef:e5:40:03:d5:18:2e:ee:19:5b:c1:32:6b:bf:fb:e3:c8:87:
0e:3f:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:29 2026 by rpki-client