
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier: k/vSoRdTf/C5qwTJyzfkGDmBHREVmJ5c+SvCRHDR+IU=
Subject key identifier: 18:22:ED:92:32:85:20:F1:B5:34:DD:46:52:C2:B4:F2:89:E7:F3:1F
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number: E3
Signing time: Sat 13 Jun 2026 06:38:58 +0000
Manifest this update: Sat 13 Jun 2026 06:38:57 +0000
Manifest next update: Sat 20 Jun 2026 06:38:57 +0000
Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: VqiMcFEAVvl4UxMMbfk/SpJMJlgquJmdK/h40yxqT0M=)
2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: 09psz8wD6VQRY3lNubXSJ0qySYqq1I9NwqwomYkBSy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Validity
Not Before: Jun 13 06:38:57 2026 GMT
Not After : Jun 20 06:38:57 2026 GMT
Subject: CN=6a2cfb02-0afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:2a:58:d3:17:7b:61:8c:30:32:4f:d2:e7:
73:f8:05:5e:a5:84:01:e1:fd:0c:b7:e0:6e:5d:22:
fa:a2:05:b7:e1:29:04:81:19:de:9e:e4:a0:75:be:
d5:f4:d2:b9:95:5c:43:35:a5:29:9a:e5:1a:2d:67:
5c:16:61:3c:4d:08:13:a1:23:43:5f:e2:92:fc:94:
61:c7:c0:f8:d8:b7:f6:f6:e0:d6:1d:f8:01:46:b9:
cd:ab:2a:a8:d0:b5:41:d9:cd:67:0b:e6:81:4d:39:
a8:4b:20:f2:f6:e9:bb:c5:10:f0:2d:81:41:48:e0:
fe:d3:5c:61:ef:7b:84:68:a5:8e:70:e9:a0:3a:a2:
17:36:c5:a7:b5:39:7b:0c:31:5d:73:d0:0a:df:f2:
31:6e:2c:e0:02:2b:3e:43:7e:a1:8e:20:13:37:30:
36:9c:a6:9f:78:a3:93:75:6b:1e:e6:3a:47:96:43:
3a:2c:18:b5:8c:25:6b:7f:3c:48:93:ad:7f:58:35:
62:4b:37:28:d4:43:2c:b9:d9:4a:5d:53:9e:8a:2f:
14:2e:3b:b4:8c:41:54:7f:4e:c0:d1:a2:c6:77:86:
a8:26:57:88:b6:3b:95:2e:e1:ef:e6:34:21:e4:45:
a7:e6:f0:e3:c3:a4:dd:75:45:6d:fb:38:3e:c3:d0:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:ED:92:32:85:20:F1:B5:34:DD:46:52:C2:B4:F2:89:E7:F3:1F
X509v3 Authority Key Identifier:
keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:da:4b:b1:26:a4:2f:8c:f8:05:6f:97:31:27:3e:c4:63:
4e:34:01:f2:e5:f0:7e:81:cd:93:df:0b:f0:fb:c1:57:cd:9f:
4b:a2:6b:95:b8:4e:f6:6f:07:d0:ad:b0:55:95:49:6a:34:7b:
50:da:ec:70:d4:7c:56:26:3e:f4:b4:75:73:62:4c:a6:cd:2e:
1c:ad:d7:b3:3d:95:3e:bc:62:d0:65:3d:f1:f5:87:74:e9:e7:
cb:84:c9:e6:38:6e:6c:9b:05:fa:e1:80:8c:63:c7:3e:11:45:
f3:6e:ca:c3:05:a2:81:9d:1e:d4:21:88:32:af:19:7a:b8:be:
c9:89:3d:fe:01:4b:b9:e9:e3:05:cc:ba:75:33:e7:1b:28:2b:
38:39:69:2c:19:5d:b2:cc:3b:fb:c5:b1:ea:43:9e:48:e6:aa:
1e:2c:e3:7b:0c:76:e2:77:ff:1a:c3:cd:70:30:e9:a0:bb:b3:
9e:28:3a:1e:90:fd:8a:47:09:de:33:8a:fb:0a:b8:a2:ad:a3:
75:8a:60:48:7b:17:f5:b3:b4:b6:79:40:c0:3b:a5:39:21:b0:
43:56:39:44:80:60:2e:6f:56:bd:95:59:79:e3:c1:c2:71:97:
12:c7:84:3b:ea:f8:89:fb:94:5f:a1:03:1c:d6:f8:44:9b:0a:
b1:6e:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:28 2026 by rpki-client