
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier: xzSqk3K2EKBdHN/oLTjvbcDigKCTRY28zhw4knPJ2Uw=
Subject key identifier: EC:BC:C7:56:BA:31:0B:D4:F9:8A:95:6E:47:AB:B0:4C:ED:6E:EE:DA
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number: 0180
Signing time: Mon 01 Jun 2026 05:21:46 +0000
Manifest this update: Mon 01 Jun 2026 05:21:45 +0000
Manifest next update: Mon 08 Jun 2026 05:21:45 +0000
Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: PM2a9fI3HqHtzOxlL3h3eFXTQoqMsvSiitHqqNSQo6U=)
2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=)
3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: Jun 1 05:21:45 2026 GMT
Not After : Jun 8 05:21:45 2026 GMT
Subject: CN=6a1d16ea-1e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:9c:2a:8e:06:24:6c:c2:ee:37:7b:fa:cd:
88:0d:b2:d8:7b:9e:66:a4:e0:02:c4:ed:fb:42:db:
b0:3a:28:29:38:07:ec:c2:4b:18:f1:25:d0:22:3f:
69:dc:6d:4b:2e:38:c8:6c:e3:90:23:7d:d2:0b:37:
af:32:f5:3e:b1:0c:d0:1c:d8:ee:ce:c1:a6:31:94:
20:e4:ac:10:a5:ed:15:41:00:2e:fa:df:9f:77:16:
de:71:36:39:21:42:41:98:25:fa:a1:69:93:55:a8:
bd:40:97:83:5b:c3:f6:0c:8a:b1:37:d1:d6:82:54:
ed:2f:ff:d1:69:e2:a2:4b:42:b0:19:dd:d3:3d:51:
c8:b2:b8:0e:ba:04:c2:37:62:e8:1f:e7:a6:40:cf:
95:2c:39:68:76:e8:e3:0c:50:bc:07:1a:1a:ed:cb:
9f:81:17:2d:e8:79:8d:28:f5:15:4f:91:95:a1:79:
24:d0:15:28:33:b4:b1:ae:1f:b5:1d:62:74:f8:28:
a9:76:ef:4a:24:da:1d:4d:73:8d:4e:92:3f:fb:0a:
8b:80:78:2d:8a:02:56:c1:90:dc:00:7f:3e:b9:93:
01:73:90:ba:fb:1a:97:7c:1d:d0:da:ee:41:44:6b:
5d:25:8b:1f:63:79:c3:21:5d:89:32:41:ce:76:d5:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:C7:56:BA:31:0B:D4:F9:8A:95:6E:47:AB:B0:4C:ED:6E:EE:DA
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:1a:b3:3b:36:db:c0:1a:e6:92:d6:60:a2:1f:7e:1c:f9:17:
3e:ab:8b:5f:49:b9:8f:5f:30:17:8d:2f:1b:4e:67:50:90:36:
51:ac:94:13:af:6b:06:f1:7b:40:b6:50:6c:f9:8c:42:b0:ef:
3b:26:19:65:38:aa:0c:f9:cc:2a:93:26:a1:a2:3b:bf:ff:4d:
7c:0b:5a:ae:df:ce:21:1e:ee:a2:c5:26:6e:dc:79:68:97:b2:
f9:b5:f3:21:4f:ad:ba:16:6f:4d:9b:1a:d5:39:2e:5e:d1:5a:
66:0a:2e:fd:0f:6a:eb:ec:24:c7:08:79:08:94:b6:0f:77:f1:
6d:15:fd:4f:29:83:6f:48:69:59:cc:f5:d7:3c:aa:56:98:11:
33:9b:6b:6b:da:b2:6f:2a:87:65:67:fc:77:f6:ff:44:3c:73:
a0:6c:82:2d:cc:3f:f7:6d:ba:a4:25:2a:04:45:9b:d2:66:06:
ec:18:e8:b6:9f:7b:60:a4:c2:6e:f9:70:88:e3:21:a6:36:ee:
a6:fc:64:d1:3a:00:34:5c:07:c9:9f:ed:7a:40:6e:90:87:b1:
31:7f:6c:a0:cf:1c:44:74:66:e1:f5:b1:97:08:a8:43:df:97:
84:8a:a9:4e:45:0e:3e:7d:7c:be:dd:73:d8:2b:25:9d:91:2b:
3a:ba:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:02:12 2026 by rpki-client