
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier: E7+fX2ViPyiQo1SlT7KX5YvDEzaahgFPXIRopOsf3Ok=
Subject key identifier: 25:D7:C0:12:9C:89:5D:6A:AC:6A:8E:B4:41:FB:7F:AF:8E:B4:0D:F0
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 356C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number: 355E
Signing time: Mon 22 Jun 2026 14:58:35 +0000
Manifest this update: Mon 22 Jun 2026 14:58:35 +0000
Manifest next update: Mon 29 Jun 2026 14:58:35 +0000
Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: 5ELk9ggpb+nOJ+CTbuO3MAbzNki5ZU9M9xEVfxX0eeM=)
2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: Nn8FuzHCJ3Kb1KY54UhaGmsGZwgPU9BdYg6OfrPAV1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 14:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676 (0x356c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Jun 22 14:58:35 2026 GMT
Not After : Jun 29 14:58:35 2026 GMT
Subject: CN=6a394d9b-cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:bd:fc:f3:fb:99:37:a2:05:c4:77:4b:05:
f8:f8:6b:70:c6:10:98:9f:86:cd:2d:5b:fe:dd:e0:
cc:ba:97:15:98:28:9e:1e:40:59:3e:8e:a6:fe:f8:
9a:63:ff:b4:bf:13:f0:8d:03:93:61:f1:18:14:bb:
ee:2e:67:dc:20:02:65:b8:f5:6d:11:2c:f7:35:5c:
13:12:35:63:72:98:6b:15:f7:a9:66:c9:17:04:97:
a6:24:3d:44:95:5c:54:ef:76:2a:ba:77:f5:ac:e4:
e0:d5:94:aa:19:19:5d:63:45:4b:a5:45:38:7f:b7:
94:21:fa:70:c9:12:ea:9f:57:d7:b5:8b:7d:0e:f6:
e8:e1:5d:6f:6a:17:b0:ae:be:75:eb:3a:ce:4a:d8:
d3:f5:e7:cc:0a:9b:05:f3:82:2f:f1:83:74:d4:47:
2d:3e:c0:46:6c:de:d9:d3:36:10:a8:eb:d1:52:12:
f8:3b:53:90:f8:ea:bd:59:b7:78:be:c2:fe:d4:96:
f0:1a:61:69:ec:11:5e:84:05:dc:db:63:06:05:47:
8b:8c:7a:42:14:a5:07:ac:5d:2c:37:0e:12:0e:8a:
d8:89:db:7c:2b:21:71:42:db:4f:4e:3f:ca:9b:34:
65:9d:c7:e8:a6:47:b6:f2:98:e6:ab:4f:28:4a:72:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:C0:12:9C:89:5D:6A:AC:6A:8E:B4:41:FB:7F:AF:8E:B4:0D:F0
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:18:c6:91:4f:4b:7d:f1:09:46:fd:fe:2c:51:ac:d8:f4:
15:a3:03:28:77:73:d4:c7:c8:f2:24:ad:d0:aa:9e:21:4e:90:
44:fd:7a:ee:01:19:77:ad:b4:6a:33:47:9e:02:5e:17:28:b2:
ca:17:8f:c6:e7:18:90:2b:3e:b4:7c:28:50:8d:95:be:b2:a7:
54:8b:63:4c:86:e3:c2:02:7c:80:78:86:32:fd:41:6d:97:ba:
ab:b2:a0:fa:93:46:6d:7d:f6:5a:a8:04:d3:55:2e:98:bf:a7:
c0:49:50:50:85:96:db:89:0d:48:e8:de:cb:28:3d:2b:8f:24:
ce:83:86:79:aa:fd:d4:c2:ab:13:3d:1f:7b:d4:1a:f3:07:ea:
f0:ab:2f:c8:4d:2a:f4:df:ad:bf:7c:8a:03:c5:07:ec:09:7a:
9d:ad:e8:c0:41:d3:9c:bc:16:c7:d6:b6:9f:c3:91:70:99:4f:
78:28:45:88:bb:7a:a4:10:ae:48:28:0a:41:bc:63:d3:2e:c9:
2d:fe:c3:77:d0:a5:cd:82:de:19:41:ef:59:48:2f:11:e7:90:
54:28:9d:19:9c:bb:fb:d7:3f:42:0d:ed:4e:80:c9:ad:bd:68:
f8:a4:05:c3:f9:0a:10:e9:c5:f4:76:24:0f:f2:aa:82:6a:7b:
da:e1:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:48 2026 by rpki-client