
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: 2MjLLpJCXuhYBOtW/dq70JhELmkfsT4j3FD64JB5YAs=
Subject key identifier: 21:18:F8:40:15:9C:32:ED:A1:58:CE:6C:4D:CB:04:C1:69:AF:DE:83
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1F0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1EE5
Signing time: Mon 22 Jun 2026 16:01:14 +0000
Manifest this update: Mon 22 Jun 2026 16:01:13 +0000
Manifest next update: Mon 29 Jun 2026 16:01:13 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: VkUPffkHJLfQK/t0LC5JlHB/Th/NMXvDaYl3EcQSfu0=)
2: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: n9OEIi5D0MMrsYRQLCAAp//0ZBA0omE88k2orZdv2K4=)
3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: VMJkk/VVPV9Iy+puWdZ7776oUW7EEdM96gkspmEQArY=)
4: BD314CEA619711EE81211277C4F9AE02.roa (hash: 5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7949 (0x1f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Jun 22 16:01:13 2026 GMT
Not After : Jun 29 16:01:13 2026 GMT
Subject: CN=6a395c49-ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:ac:90:c3:d7:63:db:8b:62:b6:e9:ab:82:
5d:27:a7:b2:cd:41:7a:13:b9:47:61:6e:58:83:55:
eb:f4:3b:48:74:ee:b2:a0:f3:09:fe:19:52:f8:7f:
f8:98:d6:03:75:55:bc:7b:48:26:8b:65:5a:e9:9d:
42:34:3d:8f:73:99:20:ce:cf:be:3d:af:2e:26:e5:
55:c9:8f:88:ae:f1:4b:64:ba:28:24:3d:9c:dc:ff:
92:ed:24:eb:42:b9:aa:ad:7a:e7:59:a1:b8:9c:6f:
33:bb:7e:ef:e4:a7:bd:4f:1e:ea:4f:76:97:f1:c1:
c2:2b:fd:1f:8b:44:27:a1:be:96:ad:a1:a5:17:bc:
0f:e7:80:91:94:5c:f8:05:b0:49:9b:2b:08:34:d0:
99:a2:bc:34:f2:eb:6d:1c:20:d6:4e:2e:fb:c4:70:
ab:64:a0:2c:e4:e4:a2:b5:aa:db:e9:2e:bf:79:b1:
f6:fa:0e:0b:47:ce:39:ab:28:1b:ac:1b:ec:11:a7:
c0:d5:56:64:32:f7:8d:37:71:a2:98:26:c0:8f:ba:
b2:8c:39:93:b4:02:b0:1e:f4:92:10:b3:23:2f:e9:
bd:dd:57:c3:f8:59:63:c0:b0:ba:4c:f5:58:3e:bc:
4f:df:88:fb:a5:96:b2:21:fb:af:4b:c8:6b:85:6f:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:F8:40:15:9C:32:ED:A1:58:CE:6C:4D:CB:04:C1:69:AF:DE:83
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:7c:c1:c9:2c:5a:3f:28:ae:e1:fd:a4:59:e8:64:b0:60:19:
0a:82:67:ea:79:db:60:94:43:b6:78:3f:0f:99:f9:c6:b8:0b:
41:49:f8:8c:ef:a1:b0:79:20:cd:67:89:21:ba:f4:bc:de:5e:
8f:08:51:f3:9c:4c:66:d5:8a:5e:bc:9d:f2:71:2d:2d:8e:b8:
dc:bf:57:3e:85:3c:b8:8a:b9:e7:59:cd:bb:03:66:04:36:16:
f8:97:55:28:48:cf:6b:0c:c7:18:44:1e:53:ec:a8:5b:d3:f1:
13:31:1d:3d:c4:cf:27:58:70:bd:42:e5:2a:29:8f:d1:45:c9:
d5:2c:02:d1:34:87:13:f6:b5:ae:28:c8:b5:99:cd:e9:2d:b4:
05:3c:cd:2b:27:8d:50:42:4c:b7:07:38:88:3d:df:c4:e7:d1:
8d:37:fe:d7:ea:36:60:5e:99:19:8f:03:ae:ca:fe:af:bf:c3:
a8:3d:a9:d5:f9:b6:19:b8:c2:1f:4d:7d:5b:fc:5c:cc:24:9e:
a2:02:37:9f:09:8b:51:a7:71:ef:df:af:d3:21:21:ff:c0:af:
bc:ad:5e:3f:b2:5c:17:74:9f:3d:2c:e6:49:02:37:aa:de:8b:
0e:ee:e1:e1:a9:7f:18:7f:a5:6e:b0:dc:17:b3:fe:5c:33:4c:
27:22:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:06:35 2026 by rpki-client