
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier: 9+qGZTul4Fj2gi+UU7tgo66mF1Ducazbpur8JE+w8Yw=
Subject key identifier: 44:E9:8D:20:A0:C5:05:42:9C:10:3E:ED:67:FE:61:CC:58:46:28:37
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 0949
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number: 08EC
Signing time: Wed 10 Jun 2026 20:30:10 +0000
Manifest this update: Wed 10 Jun 2026 20:30:10 +0000
Manifest next update: Wed 17 Jun 2026 20:30:10 +0000
Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: 7q9UOtTniQPA+QY65gbxokGA1s3sdmKHUSwHxoUfjW4=)
2: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
3: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
4: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
6: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
7: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
8: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Jun 10 20:30:10 2026 GMT
Not After : Jun 17 20:30:10 2026 GMT
Subject: CN=6a29c952-42e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:fb:9f:d1:d3:9d:97:9c:f1:69:37:8c:e0:
69:11:bb:d3:bc:d5:e4:ba:63:32:24:c9:71:3b:ea:
0e:c5:53:f4:5f:4d:04:6c:81:c4:67:4d:d9:c9:14:
55:88:1c:1d:ff:2f:aa:08:cd:6d:a0:b2:fd:21:5b:
75:5d:03:f2:46:b6:49:48:49:e6:55:61:f3:7d:5f:
ea:f4:ce:25:53:c8:39:96:ea:9d:c8:6b:24:0a:39:
89:aa:63:3a:70:b5:c7:b2:9b:13:8f:d5:3a:fa:e8:
67:06:81:8a:0c:11:1e:69:f6:a5:74:89:e5:1c:10:
c3:cc:b4:e2:1c:49:9e:35:6d:50:8d:6c:aa:76:c7:
76:9f:a3:26:eb:df:6d:d1:22:f6:0f:cd:4a:d5:c6:
64:18:41:14:44:bc:41:42:76:e5:64:36:6f:f5:8b:
a1:3e:fd:1e:ae:32:5b:b1:69:92:39:fd:16:44:2e:
18:84:90:25:5d:cd:ad:8c:4c:03:c9:40:30:de:08:
5d:38:c5:f0:93:7d:7d:b5:bb:a5:cd:39:34:66:57:
3e:16:da:3f:90:b4:4c:10:65:b5:39:63:8e:b8:ff:
22:6e:d0:3b:88:c1:a1:73:f4:3d:34:45:67:48:b1:
cc:6d:4b:ba:5f:cc:8c:7d:93:cd:07:a6:b1:e9:68:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:8D:20:A0:C5:05:42:9C:10:3E:ED:67:FE:61:CC:58:46:28:37
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:0e:c8:c6:a4:0a:52:3a:c2:36:4f:b4:13:97:6b:01:df:
6c:dc:cf:86:86:06:23:e7:18:dc:d6:e3:6c:7a:19:1d:f3:92:
98:56:62:1b:27:ee:66:ef:02:c2:1c:c8:bc:8a:ff:e9:26:2a:
b2:d1:c7:55:96:f5:db:c1:f6:00:ec:93:d4:bc:ae:02:08:bd:
cf:e3:61:0a:23:1f:4c:c7:91:1c:a7:1b:1b:08:9d:ea:8a:cc:
fa:e1:db:f5:f0:1d:0b:d9:2f:80:35:f2:34:46:0c:f8:f6:13:
a1:04:0c:04:91:6a:04:93:30:a6:49:60:e0:49:33:25:d3:3e:
91:3a:e5:04:f5:c7:1e:b1:51:4e:74:a3:c0:1d:2b:9c:75:57:
03:94:44:14:10:a0:4a:fd:c4:b1:5b:ca:5a:e1:df:6a:ab:6f:
e6:49:6e:33:73:d5:17:50:4a:a5:53:11:e6:a6:5e:f8:00:ff:
2c:4a:86:bb:86:09:f1:18:f7:b8:c2:87:4e:fd:3d:de:c7:8d:
28:89:52:cd:29:3c:81:35:a7:a3:b8:78:e3:fb:fa:e7:9d:67:
35:d3:e9:db:7f:86:e8:ee:75:d2:a3:3b:88:b6:9c:62:19:a4:
4b:ce:57:df:dc:fb:1b:c7:4a:bf:24:2b:9f:4a:45:51:d5:32:
ea:53:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:49 2026 by rpki-client