
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: VRzyfI2LyBUQhfuzdyjom+mE7nv1KDHybvt4eCGcJvQ=
Subject key identifier: 0D:B8:68:D5:97:D9:68:08:94:E4:6C:4E:8C:FF:FA:EC:60:42:66:D9
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 0589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 0581
Signing time: Sun 14 Jun 2026 23:18:12 +0000
Manifest this update: Sun 14 Jun 2026 23:18:12 +0000
Manifest next update: Sun 21 Jun 2026 23:18:12 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: nkcmIap+flibl2oRAUvkVVP1K7HgKBgJGBWmTON+oUc=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 23:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Jun 14 23:18:12 2026 GMT
Not After : Jun 21 23:18:12 2026 GMT
Subject: CN=6a2f36b4-1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:23:d2:68:be:49:14:dc:87:87:50:a6:10:
f7:5b:82:25:46:5e:23:22:dd:cb:3e:45:73:4e:3c:
d1:6a:e0:6d:6f:24:01:89:c9:5c:ea:89:41:c4:ad:
35:db:23:69:35:0b:02:2a:57:a0:1b:83:98:4c:9d:
e6:fe:6b:e4:a2:40:e3:41:d6:98:3d:52:0d:53:79:
1a:99:19:f4:f7:bb:2e:61:e4:f3:dd:e9:46:06:57:
e4:6d:ab:9a:a0:69:55:a4:fd:88:64:0a:75:f2:df:
f5:fa:15:58:6a:f4:12:1c:9e:43:54:3f:2c:e0:3f:
63:45:25:f5:7f:b8:da:c6:10:30:1d:d9:c3:bd:11:
e2:d8:79:e5:0d:0a:e0:f3:d3:ce:42:79:d6:6f:bd:
27:12:b6:dc:15:11:11:9f:8f:3d:70:9d:b9:1c:dd:
c0:f2:ec:c5:68:ab:e7:bf:ff:cf:bd:d0:49:61:1c:
4c:81:f7:cd:db:ac:3c:28:6d:3f:c8:0d:e6:99:e2:
ac:57:34:05:57:2d:6d:eb:61:6d:57:57:23:5b:ac:
8a:8d:a6:ea:c9:fb:f9:39:4e:c5:28:b5:6f:61:4d:
74:d8:23:6e:3f:62:01:53:2a:7b:8e:0b:88:c5:53:
71:e7:5a:67:42:0c:bc:c9:6b:37:64:88:58:df:25:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:68:D5:97:D9:68:08:94:E4:6C:4E:8C:FF:FA:EC:60:42:66:D9
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:54:3c:38:da:8d:78:f0:ca:d4:ee:f6:6f:6f:a4:33:e3:
19:07:16:51:96:18:93:f5:77:b1:ce:47:e7:6c:b6:64:b6:13:
59:a1:e2:ae:4e:e6:f7:43:a4:4b:52:bf:e4:a9:a3:30:09:77:
cb:6a:5c:71:a6:09:b0:9c:3a:ec:60:e6:5d:16:da:5f:47:03:
30:b7:af:fe:4d:d7:f5:d3:02:dc:09:a4:5f:65:67:88:08:99:
89:9e:80:c8:66:58:48:29:38:12:c3:48:e9:a7:60:bd:e8:3e:
bf:9f:8c:97:c1:e5:86:e9:a0:ba:8f:aa:7c:fa:3e:f0:b2:34:
ce:cb:76:f7:e3:d1:01:54:3b:44:bf:ce:4a:06:58:27:96:89:
4c:a2:5c:19:60:91:b0:5b:15:5a:cf:1e:b6:a9:b8:26:c2:0a:
b9:39:77:fd:af:8b:79:73:38:b7:8b:5d:27:d9:20:f0:b0:e6:
c9:cf:84:dc:7c:1e:d2:03:e6:53:6b:a5:f4:44:41:a1:30:1d:
30:9c:47:01:67:c7:4f:26:0e:f6:92:1c:2f:c3:cd:0b:50:b8:
39:fd:8f:d3:fb:dc:a4:87:be:f3:af:4b:b6:2f:67:c3:ff:3b:
ae:bc:df:bb:e8:ca:fb:6d:8e:5a:4e:b6:20:7e:65:4b:a6:73:
08:25:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 09:28:48 2026 by rpki-client