
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier: 4Q7fEHgpEUHd8aKY2DG7YzIxNTlCkzXaamKqYCHbmUQ=
Subject key identifier: AC:1B:19:86:F0:09:D3:D1:DA:A8:EA:F7:D7:4B:65:DD:31:13:60:B2
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number: 0AB8
Signing time: Sun 14 Jun 2026 19:28:49 +0000
Manifest this update: Sun 14 Jun 2026 19:28:49 +0000
Manifest next update: Sun 21 Jun 2026 19:28:49 +0000
Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: fr4l+OS73PYjhByISF3W5kaVvO4lHscUyzkFB8JgmSU=)
2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: 4cAcI5ocqsy1hZe8HsYZTbIwmQxRPKHWv8/zl5w8ZJQ=)
3: 02BA60CCDADF11F08398647877D3641D.roa (hash: 1tpNHg5V2m7AJT6KzHxfBy6gB5PqDPo6eAkyeJw5XNY=)
4: 0166B48CDADF11F08398647877D3641D.roa (hash: ZJV2dmhu0JE10nRhjUYBdcTdypFTIKq4KfcDe8/doJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 19:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Jun 14 19:28:49 2026 GMT
Not After : Jun 21 19:28:49 2026 GMT
Subject: CN=6a2f00f1-dbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:a5:57:61:e6:cf:2f:62:6f:6f:dc:a0:bd:
15:de:5a:50:ac:39:ee:52:f8:06:a8:a9:fe:57:15:
4c:01:e7:de:f0:27:5d:dd:7e:c4:19:02:e3:8a:2d:
86:19:93:58:a9:6b:8d:4c:c5:b1:08:9a:e3:5a:76:
73:4c:43:c8:db:37:09:7a:61:f3:10:8a:a2:94:b9:
9e:11:2d:f0:99:92:37:87:89:17:8d:7a:79:84:42:
57:67:b4:33:fc:2c:b5:ea:e1:53:82:c4:4d:54:c3:
60:10:d3:19:9d:ed:47:92:35:48:fd:c1:76:22:09:
36:3c:72:34:ee:e8:f1:ba:2c:b8:2b:c1:20:2e:c0:
2d:20:64:40:c9:01:4a:23:1c:3c:21:7a:53:56:98:
b1:81:67:5b:ac:1d:e9:c9:af:b1:de:13:86:7a:95:
c6:03:c5:9d:0f:2c:c8:23:50:f9:1f:f7:5f:37:3f:
09:54:e6:24:78:ea:5a:63:bc:bd:55:3a:42:62:05:
74:4c:1a:00:39:74:2d:27:74:a8:a6:f3:e3:23:6e:
59:4e:47:9b:42:fd:76:9d:39:e5:dc:09:79:eb:18:
64:58:63:ec:cd:1c:f2:ef:f4:0c:7f:47:d7:46:21:
9a:f6:e0:ba:30:2d:a8:85:e6:b7:de:91:34:2a:74:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:19:86:F0:09:D3:D1:DA:A8:EA:F7:D7:4B:65:DD:31:13:60:B2
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d9:e6:75:3b:26:b8:7e:4c:70:46:47:c6:f3:a1:58:83:d7:
3d:d4:34:ea:19:a0:af:d7:7f:45:76:62:42:a1:0c:54:cf:de:
22:16:72:5a:31:90:5d:2a:30:a4:4b:83:f2:e7:0e:34:fc:64:
67:36:39:b7:c4:d2:6f:66:01:b3:53:4f:96:a2:34:ca:60:af:
86:77:64:64:5f:44:71:df:99:58:15:20:ff:e2:e1:66:a7:f8:
22:19:ef:d9:44:54:7c:ab:7d:02:8e:71:45:9a:2c:44:84:19:
f3:94:e4:09:39:aa:76:fc:51:d0:f3:b5:6c:36:09:21:a7:81:
92:76:64:61:f3:be:00:6b:db:f3:3f:30:ae:74:7f:b2:33:a0:
7f:5a:90:59:13:0e:f6:60:69:6e:a9:d6:60:ea:e1:8a:2a:b3:
3f:8f:90:98:7c:c5:46:56:b7:cc:dc:e6:36:44:2d:e3:79:0f:
f5:72:3c:6d:03:b8:21:18:1b:dc:38:87:ca:65:73:d8:07:e1:
8f:a9:67:e4:f1:b0:a0:81:a5:db:80:f5:a5:53:16:a5:55:cc:
58:63:fc:1a:bc:2d:80:17:ae:1c:37:19:d6:eb:0d:2d:6f:bd:
03:4d:0d:f0:c4:b1:f0:a1:f7:03:24:e5:c7:d9:b2:23:7b:eb:
0f:67:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:34:56 2026 by rpki-client