
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier: QCaVxNIFHaLKfI2vvkvsObRQfX9sWWNaPDRMqiAVL4s=
Subject key identifier: BD:FF:64:9F:D3:C8:3A:34:22:59:FB:4F:F0:66:22:FE:55:97:A7:E7
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number: 0967
Signing time: Mon 22 Jun 2026 20:07:42 +0000
Manifest this update: Mon 22 Jun 2026 20:07:42 +0000
Manifest next update: Mon 29 Jun 2026 20:07:42 +0000
Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: kDI4+7MRXwJy6/n3UzRWUhBuiA0ZgmdAPOy6Rhe4H0A=)
2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: EaEIkoL8X3Bs8catDydmdxqS40jl2dudc0xm8Au52PE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Validity
Not Before: Jun 22 20:07:42 2026 GMT
Not After : Jun 29 20:07:42 2026 GMT
Subject: CN=6a39960e-c913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:f6:11:1a:18:85:40:84:52:43:56:96:71:
eb:bf:8f:31:84:71:f5:88:eb:ab:0a:89:01:4e:66:
4d:9d:d9:9f:33:a0:6c:40:c7:77:bc:b2:f0:60:e0:
62:0d:7d:1d:9a:d8:57:10:ad:62:0f:c0:4c:dd:77:
0f:07:5b:cf:2b:06:90:76:c3:7a:dd:22:53:80:65:
da:39:b1:08:5a:7e:90:06:57:3c:d8:a8:7a:34:ef:
84:2f:9e:a6:ae:a9:00:70:18:d5:01:2f:0e:e8:85:
65:0c:41:ec:0f:41:74:88:fe:83:64:c0:57:91:19:
d6:a2:a7:ca:a4:e2:4a:ba:6a:f4:e3:ae:2a:34:ca:
b8:a8:11:e5:6b:57:f0:42:96:77:84:43:72:49:80:
fc:fa:a7:a1:d8:16:36:5b:08:e0:38:91:60:cb:35:
09:fe:7f:70:1d:a9:ac:a5:1a:7b:ac:30:49:cd:db:
8a:7e:e8:3d:ce:7a:6e:4b:97:1d:02:ba:8d:28:c2:
d9:83:2f:2d:71:05:93:0a:18:9e:0d:65:c6:3b:33:
02:6c:45:58:b6:34:60:e7:ea:bf:6d:7f:45:83:cf:
e1:65:c0:2a:c6:f3:b3:c6:35:1a:7a:cf:fd:b8:4e:
1c:c2:ca:72:9a:66:8a:2d:e0:85:3b:8d:35:b0:70:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:64:9F:D3:C8:3A:34:22:59:FB:4F:F0:66:22:FE:55:97:A7:E7
X509v3 Authority Key Identifier:
keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:d2:61:2a:d9:71:68:fb:b7:91:6e:06:b1:eb:d2:22:c2:
22:0c:6b:a4:2d:16:d1:fd:a8:c4:5f:8d:23:a6:cd:a1:f2:3c:
d1:2f:af:06:4c:fd:bc:dc:3c:8e:76:94:a2:4d:a7:b0:88:2b:
d1:95:41:14:e8:8f:67:b1:c5:9d:55:e6:22:a6:d2:66:ec:41:
93:15:93:b8:9c:fb:f2:5e:f6:53:61:44:8a:f1:42:c8:86:6d:
43:9b:7c:e6:ea:b4:e8:aa:6f:cc:93:95:fa:3e:01:49:50:ee:
31:c2:f7:52:5c:9a:7c:2f:a4:19:a9:5d:20:34:32:b5:5e:8a:
3d:ac:95:2f:54:d7:e7:9f:0d:f8:a5:6e:64:74:6e:6a:e9:d5:
e8:6f:29:95:b8:24:6f:b5:4d:5c:bc:36:3a:72:2c:13:e6:76:
14:b8:50:e3:bd:0f:43:e7:b4:1c:7c:58:71:3e:63:43:fa:57:
b5:b2:c6:eb:ff:ae:b3:ff:6b:ac:30:02:2a:f4:ee:0a:4b:57:
ad:e9:f6:5d:2b:b4:fa:0b:6b:31:e7:06:2a:a6:c9:b3:01:da:
66:59:b0:e6:00:96:a5:5d:19:eb:48:7b:db:ce:ad:dd:df:92:
7d:69:57:05:04:8f:14:d7:68:9d:c7:98:b6:3e:09:fa:8f:a0:
51:38:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:11:07 2026 by rpki-client