
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: qNvcgCOm0OigMddtCmiXEtfrb1LX/CGRIQ6KF8vZ804=
Subject key identifier: 1A:AA:30:4A:FF:A1:6D:78:5B:CE:37:01:94:EC:7E:59:0C:28:D1:62
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 09DD
Signing time: Mon 08 Jun 2026 20:01:52 +0000
Manifest this update: Mon 08 Jun 2026 20:01:51 +0000
Manifest next update: Mon 15 Jun 2026 20:01:51 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: LJPMzJ5GQUtzkzapiYJMBkyyNcYlZ17OOrj8jRBz/zA=)
2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
3: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
4: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
5: A7961C32535A11F19C6355759A833773.roa (hash: o9bBPBMErBG/UPZ9+ZbmS/n7ZI5NM2zmwIt1dBIpc8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 20:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Jun 8 20:01:51 2026 GMT
Not After : Jun 15 20:01:51 2026 GMT
Subject: CN=6a271fb0-0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:41:67:71:59:d8:54:58:15:0e:f6:da:97:
ff:d4:11:8d:8e:1d:11:91:bc:9e:d1:57:4b:c8:ff:
8f:61:f6:9e:bc:12:ca:e4:7d:fc:17:6b:5a:9e:6a:
ff:9d:5f:14:07:c7:10:a0:cf:af:56:e5:b0:b0:29:
33:38:be:7b:b1:27:fa:fe:c1:36:55:6a:d4:08:91:
0d:6e:a9:38:dd:9d:44:16:67:33:57:6b:8c:a0:6c:
91:bf:20:eb:19:d9:8b:14:1c:b0:ca:8e:77:12:75:
93:88:40:b6:f3:25:47:8d:36:07:ac:39:76:ca:ef:
fb:92:a4:87:5f:c4:32:a9:06:49:b0:c6:f1:d6:44:
f2:55:e8:53:75:92:11:e7:77:d6:9c:0f:95:c7:f3:
87:a6:7a:70:ad:db:88:0f:e3:46:47:5d:a4:24:53:
c0:8b:91:0b:04:25:c0:94:e2:65:b5:f5:72:cf:e7:
a0:5e:28:bd:7d:61:09:c0:89:08:f3:aa:04:ee:e8:
87:a3:0e:20:d8:86:9c:b6:cd:35:b7:7b:9d:45:fe:
92:2e:53:d1:14:a3:41:d5:22:6f:f6:fc:42:a7:48:
bc:1a:d8:64:70:00:74:3a:4f:d3:8a:5a:cf:42:9f:
d0:b0:89:4f:4a:f0:25:aa:10:79:bb:1a:8a:a4:de:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AA:30:4A:FF:A1:6D:78:5B:CE:37:01:94:EC:7E:59:0C:28:D1:62
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:77:fa:b5:87:4c:6b:cd:e7:44:53:09:4f:68:9b:45:86:
60:b6:7c:a8:e2:5f:fd:39:51:22:8b:9a:ea:30:a6:56:c1:f6:
2e:11:5c:9f:4b:7f:bd:a7:a3:ff:df:82:ab:d3:fc:6e:b7:eb:
90:a1:c7:4e:d7:a4:18:08:35:b9:c8:ab:80:43:32:17:6a:bf:
65:12:aa:c2:08:dd:81:85:f8:75:2a:9e:99:13:e5:dc:a0:00:
99:b9:19:b0:87:29:be:81:e8:2c:59:85:f0:8c:8c:fe:20:40:
3f:fc:05:49:a2:67:cd:8c:ea:64:b5:36:82:ba:d6:30:c5:72:
d7:0a:54:e9:34:a6:8a:8c:db:f2:9f:db:b7:e6:42:ab:08:a1:
2d:ae:44:8f:87:15:3d:35:08:8f:5e:23:4a:3e:7d:f5:11:75:
ca:07:95:ec:0d:7d:7a:b6:61:ef:6e:88:23:84:ea:ea:80:a3:
04:d2:4f:22:a4:85:f1:5c:30:31:23:75:72:ce:94:24:44:19:
aa:00:ae:00:0d:34:2b:6d:e8:9b:aa:67:8d:fb:4c:7e:13:cc:
c3:77:0f:c3:42:35:c0:7b:c9:f8:7e:ec:70:53:03:65:47:fc:
f6:70:62:1f:f2:50:aa:2c:8b:ee:65:46:a8:e7:97:03:80:d6:
a0:35:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 14:12:39 2026 by rpki-client