
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json)
Hash identifier: o8JvNPdweiLg2z5VQEif+sSUPwMZzxr0A5L1z6aUF5c=
Subject key identifier: B6:81:87:5A:EC:E0:26:2C:81:F5:C6:AA:B7:EA:E3:3A:CC:2A:43:56
Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
Manifest number: 0119
Signing time: Mon 01 Jun 2026 06:44:23 +0000
Manifest this update: Mon 01 Jun 2026 06:44:23 +0000
Manifest next update: Mon 08 Jun 2026 06:44:23 +0000
Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: TS4Txj0IU33uoGfA1AS1FTdaEtTR8zokEAc1VOxQBTI=)
2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Validity
Not Before: Jun 1 06:44:23 2026 GMT
Not After : Jun 8 06:44:23 2026 GMT
Subject: CN=6a1d2a47-13ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:ea:9d:3e:4c:8c:bf:45:3f:ca:18:1e:69:
58:b0:f7:2a:fb:ea:6b:10:c9:09:50:dd:93:73:30:
6a:b7:07:a6:7c:a6:18:54:63:5e:bb:63:be:44:49:
60:87:8c:fc:5d:ed:fc:2a:44:e1:ef:cb:4d:45:5d:
7a:23:18:cb:bc:d2:84:92:1a:5c:23:e7:42:e3:9b:
fc:dc:ed:d4:a2:f3:41:b5:5c:1f:34:03:ba:f8:42:
49:83:8a:98:ed:24:98:8e:40:c3:96:a0:a1:ac:9b:
58:be:c3:9e:3e:e8:9f:62:69:44:1c:53:7d:40:b6:
46:3a:43:4e:6b:c2:02:0c:61:d8:5f:58:54:7a:98:
cb:33:11:12:f2:35:9a:49:d2:c0:d2:99:22:7d:a4:
99:47:fd:0b:ca:05:33:bd:f6:7b:11:3f:53:92:a5:
b6:30:f8:00:d3:62:86:30:06:45:d8:ed:99:8f:d2:
d4:17:d3:9c:b5:55:d0:79:aa:59:b3:ec:c8:fe:9d:
67:34:53:21:82:7a:af:a5:bf:2a:0b:c4:3b:d3:b6:
a5:f3:ed:cc:f2:85:79:db:d4:bf:70:42:e7:ff:3b:
14:c3:5f:70:b0:f5:09:2c:14:b2:fd:35:a1:c1:ef:
cd:95:8e:90:87:27:09:c8:a4:89:5d:42:d4:2e:ec:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:87:5A:EC:E0:26:2C:81:F5:C6:AA:B7:EA:E3:3A:CC:2A:43:56
X509v3 Authority Key Identifier:
keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:23:c2:d0:2e:26:94:21:ee:1f:ba:bc:62:bd:8c:ae:08:
a5:12:5e:19:ce:23:b6:0b:0f:1d:be:64:1b:04:a1:57:d5:72:
a3:8d:73:22:0b:89:37:9e:45:c6:01:f8:a4:25:66:24:dc:26:
2b:d3:b2:eb:d1:8b:01:bd:ee:f1:7e:8e:fb:bd:ef:0a:2b:e6:
49:4d:83:44:d7:39:c8:67:c9:da:74:73:67:56:9b:ee:ae:9a:
f1:60:99:35:7d:89:78:b0:3c:4c:f6:d2:10:69:f1:f0:19:8e:
d1:db:6c:06:13:65:a3:1e:7e:ed:62:bc:82:f5:33:8a:35:70:
17:42:d8:c2:9a:63:e5:74:81:c0:ef:8f:50:eb:c9:a7:d0:52:
63:61:c8:9a:c5:fe:16:a2:2b:73:bc:b8:59:cb:1c:a8:5d:d9:
0e:e9:81:19:f2:5b:65:17:0d:32:d3:28:d8:c6:02:cd:82:2d:
bb:07:f8:b9:20:18:54:ba:01:2d:33:95:2c:eb:60:79:26:d8:
f2:36:c1:4c:d9:d5:10:59:5a:13:22:5e:dd:7b:01:13:e6:20:
45:e3:02:8a:01:94:87:45:dd:38:be:90:b6:66:d8:8e:62:4a:
18:1b:4a:c7:73:e7:2c:de:35:81:a7:d1:79:11:5c:da:c5:c5:
96:c0:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:33 2026 by rpki-client