
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: o3/IvAqsV62QesQjaXks4ZpasjuOa/R+m4qRSdEdsT8=
Subject key identifier: E9:B3:52:E0:82:8A:19:F1:9A:B6:F4:2D:E6:49:C5:4E:AF:FC:1B:45
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 0129
Signing time: Mon 01 Jun 2026 06:25:26 +0000
Manifest this update: Mon 01 Jun 2026 06:25:25 +0000
Manifest next update: Mon 08 Jun 2026 06:25:25 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: 2T9lH/b2bVcCy9iNc2HZ9KarBkUp1pTtJ4ja69m66cE=)
2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Jun 1 06:25:25 2026 GMT
Not After : Jun 8 06:25:25 2026 GMT
Subject: CN=6a1d25d5-36a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:40:97:dd:bc:74:93:c6:a7:fd:0e:33:a0:
a6:39:34:bd:ea:89:56:52:59:e9:0e:83:8b:14:ed:
3f:37:84:a1:67:b9:07:c1:87:b3:e8:aa:ac:0c:60:
eb:1d:01:5d:94:91:92:24:5f:40:85:a9:5d:5b:ec:
34:7c:63:32:d1:c4:87:f3:e6:d3:c0:1b:a8:f7:43:
94:c6:b7:30:9a:97:eb:b0:1c:e4:aa:fa:d8:b1:0a:
9c:ee:eb:77:a7:7d:f4:e9:83:b2:ca:cb:5b:2b:1b:
9b:a9:a7:63:83:c5:69:c6:67:7b:48:31:21:45:17:
e6:fc:89:96:4d:0d:5a:90:c2:ed:d9:05:f0:bb:91:
1f:d6:bd:6d:b8:97:52:b2:56:2b:e5:d5:72:91:b1:
e6:3a:0e:22:b0:08:88:9e:b2:90:bd:f7:46:f8:5b:
10:83:af:09:60:eb:a9:64:ae:4b:d3:bf:f3:9d:c1:
47:78:0c:e0:2b:41:8d:f3:5a:8f:b3:30:af:7b:66:
56:3f:8e:7f:b1:61:a8:e0:cc:66:ac:a5:e3:1e:53:
3a:2c:95:b4:f2:c4:9a:51:31:1e:fa:35:30:97:11:
d2:5c:c5:29:6e:51:09:6a:0e:cd:c8:96:b1:8e:4f:
45:f4:a4:38:c8:e9:e7:da:da:5c:e9:94:d3:8f:11:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:52:E0:82:8A:19:F1:9A:B6:F4:2D:E6:49:C5:4E:AF:FC:1B:45
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4a:1b:92:6c:ac:48:f0:08:99:b8:1b:f6:30:56:56:df:22:
a2:97:9d:46:f1:f0:46:85:77:8e:8e:ca:26:34:ba:22:c2:1f:
0b:98:b7:82:df:ad:6d:b3:2d:d6:62:3d:51:42:c9:87:1d:b8:
f0:b5:cb:7a:bb:34:a3:f7:2c:05:37:74:63:57:f5:8c:4b:a9:
82:f5:ed:90:57:e4:44:d7:55:5b:75:0a:54:8c:92:93:bb:bf:
96:a5:09:cc:87:cd:8e:10:75:90:d2:c1:15:b9:8d:27:1b:25:
ba:f7:7a:16:46:3d:2d:cb:01:77:a1:b1:04:15:db:20:be:42:
29:9b:01:aa:d0:34:d2:9e:33:90:54:99:cd:fa:49:e7:78:5e:
62:e7:91:32:b1:f9:bc:be:94:5f:1c:6e:ec:c3:a6:d8:65:54:
2d:18:5b:47:eb:bc:83:cc:22:7f:bf:06:38:c4:3b:2e:fc:2a:
56:62:78:ba:41:54:47:24:30:3f:d7:eb:90:34:a6:2d:74:62:
74:72:9f:94:70:61:d6:6d:1e:bd:42:eb:84:d8:21:7b:fb:b4:
d9:68:2f:07:05:81:2f:78:f0:0a:2f:db:d1:b4:6c:8f:b1:3b:
1a:32:4e:25:77:d2:48:25:78:e5:32:a1:b0:d6:a2:1a:76:a7:
cc:b3:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:41:51 2026 by rpki-client