
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier: c9huY0s8kDzQteqBTMrkq7WrovwYRZkRRhq+XTH5IrY=
Subject key identifier: 5A:C3:4D:72:2C:2F:F0:CF:65:62:87:B8:81:8C:DF:5D:D0:57:16:12
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial: 1CBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number: 1CA4
Signing time: Sun 14 Jun 2026 16:08:38 +0000
Manifest this update: Sun 14 Jun 2026 16:08:38 +0000
Manifest next update: Sun 21 Jun 2026 16:08:38 +0000
Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: dNYkA2VAcGQ3WBFjAySsB+QofxYxWpwBQ4JhkQRDlR8=)
2: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=)
3: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 16:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7354 (0x1cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Validity
Not Before: Jun 14 16:08:38 2026 GMT
Not After : Jun 21 16:08:38 2026 GMT
Subject: CN=6a2ed206-20d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:b5:cb:23:14:1f:4c:5a:31:0a:f3:d3:49:
ac:5a:a7:6c:d4:ac:af:e9:b4:e9:92:a5:12:94:75:
1f:91:03:f0:50:99:c1:38:a0:b7:3a:9a:3e:c8:0e:
0b:e1:ee:c3:ed:5a:8f:ec:d9:70:cc:48:b2:d9:af:
70:a2:e7:37:66:01:04:51:eb:8f:84:d0:e9:16:4e:
ac:a7:40:30:bb:4e:6f:0a:6a:fa:94:2e:f3:fc:1b:
15:db:94:62:9b:f6:24:74:75:0f:79:37:c2:fb:d2:
7c:49:4f:7e:4a:46:b7:c2:0c:98:f1:b6:4b:2e:18:
17:61:31:8e:f9:fb:3e:34:f8:4a:1d:eb:82:5c:d3:
6f:d6:af:af:1b:f6:c8:33:c0:32:80:b5:e3:2a:f5:
ec:6e:f7:47:62:42:fb:99:78:fa:05:b6:9f:ab:4d:
e1:e8:f3:1f:b0:62:e6:e1:22:37:9d:52:a7:e6:f6:
ae:ed:b2:1a:01:3e:79:59:26:88:5b:2c:9f:f3:3e:
92:30:be:ed:9b:4a:10:6f:9a:f8:d3:cb:f9:3c:7e:
34:a2:e1:e1:13:0a:28:13:5c:ac:85:87:0c:27:6c:
49:6e:2d:8b:1c:66:c3:e5:69:01:2b:1e:89:bf:0f:
92:4b:5f:4b:f6:a7:5d:79:61:61:b8:12:3a:f1:62:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C3:4D:72:2C:2F:F0:CF:65:62:87:B8:81:8C:DF:5D:D0:57:16:12
X509v3 Authority Key Identifier:
keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:3a:26:83:5a:33:3e:d8:9f:9c:74:81:96:bf:f3:63:94:
67:23:33:04:db:63:aa:cf:88:bc:b6:39:15:55:83:55:81:ba:
d0:0f:5f:3f:d7:61:47:89:a7:8d:c2:da:16:90:34:2f:d0:ea:
fe:37:64:98:47:a2:ae:e0:34:bf:3c:1a:12:03:c1:a3:93:f1:
e2:04:dd:ce:e9:08:eb:9b:72:69:8a:68:af:0c:e0:34:59:44:
4c:e1:c0:a1:57:42:9a:8c:98:ff:9a:f2:86:69:06:e1:61:07:
bf:6f:4e:88:9e:33:f5:0d:35:18:91:3b:1a:df:89:13:45:2f:
d6:82:47:a6:db:aa:58:f4:28:91:08:ed:00:a9:c2:fb:13:3b:
c6:17:f7:db:1f:1e:1f:9d:51:b1:ce:c0:ca:f3:ee:b2:d7:7a:
5b:1e:b3:1d:10:eb:de:3e:81:0e:ae:78:51:0b:d9:5d:30:d1:
d9:dc:10:64:0c:70:12:18:93:98:45:5c:4e:f5:75:5e:16:6c:
c2:b0:06:31:ab:2c:eb:04:d1:35:80:04:81:58:7f:f0:e5:8e:
93:05:85:08:26:ee:b4:4c:4e:3f:6b:1e:90:96:31:66:ae:3d:
9a:4d:ea:ae:80:7d:77:e6:48:6b:b7:b2:9a:8f:42:d6:84:7e:
1d:8f:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 09:51:39 2026 by rpki-client