
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: A/I0NE3rXY/LcON23aMQErLXjkG0lBZuIrnv5021zsQ=
Subject key identifier: B7:74:5E:C3:40:57:BF:9B:1E:C3:0F:8E:C9:72:76:A8:FD:C1:C9:E7
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 04E6
Signing time: Fri 12 Jun 2026 23:59:41 +0000
Manifest this update: Fri 12 Jun 2026 23:59:41 +0000
Manifest next update: Fri 19 Jun 2026 23:59:41 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: 4A39nihYBRCWaJkMjjTXdIS2lk9R3sT88LVkI9yGfvI=)
2: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
4: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
6: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
7: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
8: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
9: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
10: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Jun 12 23:59:41 2026 GMT
Not After : Jun 19 23:59:41 2026 GMT
Subject: CN=6a2c9d6d-3de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:6d:26:8c:14:ca:49:83:8c:3c:27:f9:50:
39:e6:90:92:a5:d6:d2:2b:dc:06:b7:f4:b8:6f:41:
f6:1e:70:0b:db:2b:8d:2e:3e:50:38:0f:1b:84:df:
0e:7a:9b:54:ea:06:c9:53:a4:cb:2a:fe:d6:60:32:
30:b9:82:d2:df:c0:fb:8c:ec:d7:55:64:63:73:b0:
d0:9f:73:3f:fe:18:a6:b3:9d:17:58:84:26:86:68:
93:f2:06:78:34:b8:ae:72:20:7c:f1:84:c8:4d:f7:
2a:bd:91:7c:e6:ba:7a:5a:44:85:8a:b5:f4:10:ff:
49:c7:60:13:df:b4:5d:38:c7:4d:38:d3:f8:60:3d:
1e:1d:c0:15:6d:49:c2:cb:53:c2:e5:8c:2f:33:ee:
26:21:a1:8a:65:0d:f8:db:8c:a7:99:63:65:57:63:
9d:01:56:22:1d:da:df:31:e9:13:fa:24:0e:27:63:
6c:47:6d:8d:cd:f9:3d:71:3e:33:1e:65:e9:66:bb:
25:c2:fc:af:7d:7b:0e:6b:f8:ce:c2:f0:6c:ea:e3:
50:2e:21:1a:5b:0c:02:02:29:3d:3f:60:e4:33:6e:
38:b1:dc:af:6b:89:c2:d0:6b:1a:d9:a2:6f:7b:25:
c7:b1:e6:de:e5:e3:87:9f:c0:3f:62:66:1b:9a:67:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:5E:C3:40:57:BF:9B:1E:C3:0F:8E:C9:72:76:A8:FD:C1:C9:E7
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:e0:d5:2b:02:f3:04:f1:a1:84:aa:75:7d:25:86:56:b9:
11:a2:06:d3:54:94:c5:ff:58:8e:33:d7:d7:2c:46:a5:81:16:
e8:e7:ae:65:77:59:b4:67:5d:ca:63:30:2c:b1:1e:f5:3c:09:
c6:83:dd:7b:7b:d6:69:36:59:f1:21:89:9b:d0:67:10:45:70:
ee:4f:30:39:94:91:00:a1:ac:6e:f8:43:1b:14:88:48:50:31:
52:2e:4b:b2:d8:3a:b7:ec:67:55:6f:d8:02:84:1c:cd:dd:c3:
70:fd:ee:ec:3f:8f:c1:0c:77:2a:f0:dd:88:7f:59:ab:b5:f9:
51:fb:dc:80:36:b6:37:fb:ed:81:e0:1b:7b:82:3b:c7:62:60:
a1:bf:6c:d6:c3:bc:6a:80:51:39:42:2c:a2:cc:8e:fc:aa:90:
69:f1:c2:f0:08:bf:4c:9d:98:ef:b1:9f:36:05:d0:96:95:1e:
cc:2d:95:e3:b6:ef:cd:b3:e5:21:29:cd:8c:3a:76:34:0b:31:
bd:f6:11:ee:12:5e:98:79:72:60:e8:a6:92:c9:31:d3:df:80:
d5:1d:9f:ac:fd:dc:92:cb:5b:47:cc:87:f6:26:b5:4d:0a:8d:
75:b4:67:ca:97:0f:d3:91:de:8f:47:2e:5d:be:50:ee:3d:83:
94:ff:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:21 2026 by rpki-client