
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json)
Hash identifier: iUdJhEJjCmlL+uNfcUnTdD1JnzHdIBbkDQDYIZZ2QG8=
Subject key identifier: 4E:DB:96:CA:D6:24:98:37:A0:6A:14:51:54:C1:E5:F9:38:F2:5B:27
Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
Manifest number: 02CF
Signing time: Tue 23 Jun 2026 01:25:32 +0000
Manifest this update: Tue 23 Jun 2026 01:25:31 +0000
Manifest next update: Tue 30 Jun 2026 01:25:31 +0000
Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: 37tApCue2peMUnXpPrH67O0soB7FDW2YXlZjB5RVXGI=)
2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Validity
Not Before: Jun 23 01:25:31 2026 GMT
Not After : Jun 30 01:25:31 2026 GMT
Subject: CN=6a39e08c-5fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:f1:e4:8a:35:d5:65:b0:e9:2b:8c:0a:0e:
40:cb:35:b0:b8:f1:a3:d5:8f:b8:73:d2:05:34:d4:
f3:99:5d:ba:c6:85:9f:12:a2:23:af:80:f2:f5:4f:
99:61:c4:3f:f8:54:e5:78:8d:61:b0:67:ab:9c:72:
86:ca:12:86:51:ca:3c:b2:1d:a6:60:25:f6:be:86:
30:9e:27:66:7e:03:78:f2:98:77:c0:78:f8:d2:20:
9a:54:86:de:3b:e8:47:d5:d5:0a:80:d3:cb:c3:7f:
c6:64:0c:ed:b5:73:df:28:7f:62:70:c4:1b:f7:52:
8f:77:0c:11:d2:72:65:19:8b:75:e8:45:02:44:9f:
ae:c9:54:6d:0b:59:01:17:6f:a3:40:4c:db:63:90:
c3:11:2b:38:53:c8:eb:c6:ca:d2:75:19:57:31:9c:
85:20:0f:80:09:1a:91:b7:0e:31:d6:cc:15:42:87:
88:63:a6:0d:9e:b4:f8:40:09:a0:c7:9a:01:3b:29:
17:ce:6c:c5:fc:ee:bd:55:0e:90:5b:79:5d:e6:87:
f0:2e:fa:49:c6:18:cc:be:b9:bd:07:fc:16:aa:30:
98:16:36:1c:c6:8f:49:1b:38:ee:e2:e4:a2:e7:ab:
48:a5:aa:18:ed:7b:b0:55:11:5b:85:22:96:c8:c1:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:96:CA:D6:24:98:37:A0:6A:14:51:54:C1:E5:F9:38:F2:5B:27
X509v3 Authority Key Identifier:
keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:3d:68:da:91:fa:7f:bd:e1:a2:c8:bb:e8:b0:8b:b6:f3:a2:
c1:4a:52:5a:28:2d:bd:8d:73:fd:ab:58:49:c9:f8:db:3b:42:
76:3e:79:a4:f5:9a:69:00:52:25:c7:e7:42:14:92:b3:6e:b3:
17:c9:36:7e:83:d6:c7:86:25:b1:73:db:34:95:db:f5:62:06:
8c:57:7c:6d:e5:c5:bd:9f:ac:2b:d7:43:2e:90:e4:a0:6a:eb:
f5:36:04:f0:2a:12:58:90:08:e0:f4:fd:46:86:2f:f5:c2:ff:
a1:c2:26:a5:74:48:66:7f:1d:36:80:53:5f:16:0f:f4:d3:39:
4d:5b:63:b9:7e:e4:9e:ef:25:9d:e7:65:c1:fb:85:0d:0e:44:
da:7d:3f:9f:71:09:d4:82:47:f5:df:66:6f:a7:ee:42:43:83:
02:5d:cc:87:de:58:f5:c1:ab:50:c7:e2:5e:93:fc:21:8a:61:
8d:32:53:a1:ce:29:ee:15:57:64:f6:74:57:f8:92:cf:3c:9a:
65:47:97:fd:e7:65:50:4e:62:76:bf:01:9f:6c:df:54:d4:9f:
08:3b:27:8e:54:36:94:ec:2c:ff:fe:b0:43:f4:b9:dc:01:37:
fe:87:4f:e5:56:a2:0b:8b:6b:5e:4a:5b:a0:45:ba:b6:e9:98:
37:3e:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:38 2026 by rpki-client