
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json)
Hash identifier: i2EZ9wjsYFiT3sJR/qvXEEuu5J4EbW8815yzrazde3c=
Subject key identifier: 8C:2B:FD:EC:D7:64:57:F0:1F:93:7A:6A:0E:39:43:B1:47:2F:43:28
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
Manifest number: 53
Signing time: Sat 13 Jun 2026 08:21:09 +0000
Manifest this update: Sat 13 Jun 2026 08:21:09 +0000
Manifest next update: Sat 20 Jun 2026 08:21:09 +0000
Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: gq/y7bA6r9yy67MdIbLuA2JjPrdIGM25KPdJ9nikHts=)
2: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=)
3: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Validity
Not Before: Jun 13 08:21:09 2026 GMT
Not After : Jun 20 08:21:09 2026 GMT
Subject: CN=6a2d12f5-2e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:e1:2b:a2:1a:22:68:8c:0b:98:a8:e0:46:
18:c6:eb:27:60:78:69:28:8d:63:b9:7a:5e:f9:fb:
c0:f3:76:0e:a1:81:74:91:81:96:74:d7:cb:3e:3d:
de:58:c7:9d:9e:6d:80:df:59:a5:8d:7a:42:90:30:
57:69:0e:64:e3:8f:aa:05:d7:ab:35:9a:8d:e2:d9:
b1:88:0d:6d:e6:3d:17:73:f7:25:d1:92:82:d3:85:
48:2f:d5:6e:80:bb:64:bc:3b:40:ec:46:88:67:25:
8a:84:88:ed:44:8d:b9:11:39:6d:b1:16:cf:9a:95:
b9:31:48:24:00:b5:61:4f:5f:5e:55:e7:16:ea:64:
34:ae:8a:5c:99:d2:22:c1:c6:6d:ad:66:3a:1b:db:
78:68:a1:7a:cb:72:79:4b:45:36:0f:a1:4e:b0:17:
17:0f:14:56:0a:ef:49:1c:af:f8:9e:33:89:8d:b2:
da:ba:89:28:a6:29:55:f6:82:2f:87:50:21:9f:1a:
49:22:54:da:30:dc:89:e7:63:72:df:9b:0f:bc:9e:
b3:be:4e:6a:e4:89:4c:75:eb:ac:c7:46:8e:53:73:
2e:8c:64:67:97:4a:52:e7:89:71:f3:eb:01:66:d7:
54:f9:e5:dd:f3:5e:25:af:10:dc:e5:51:bb:89:31:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:FD:EC:D7:64:57:F0:1F:93:7A:6A:0E:39:43:B1:47:2F:43:28
X509v3 Authority Key Identifier:
keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b7:8a:91:dd:2a:46:d2:e3:c5:90:84:88:55:ca:ca:f4:9e:
7b:4a:62:b6:f5:52:be:93:ba:ce:09:d6:e9:d6:39:d1:2c:0e:
70:ef:94:d6:06:b4:94:08:a0:39:a4:87:ae:f7:33:ac:48:76:
d2:ac:bc:9a:ce:fa:55:17:6d:ce:06:6d:3a:1d:0e:76:dc:6e:
c6:f8:df:c7:06:b4:87:18:51:26:aa:94:74:eb:e6:06:99:b9:
53:7d:df:03:b0:ee:3d:f8:08:f1:7e:55:e0:9d:0e:0f:1c:37:
d3:b7:67:81:f9:94:ee:22:43:dc:4c:cd:29:24:66:d0:12:e3:
1d:76:88:d1:73:04:5f:a8:95:f6:2c:07:02:84:33:43:93:2b:
52:a2:dc:a6:bb:fe:4c:80:4a:91:ce:fd:b8:5b:8c:38:ba:a3:
fc:3b:70:e9:02:ae:75:8b:c4:69:3c:e5:b2:57:e5:69:43:59:
5c:92:60:86:9d:8a:8d:e7:fb:ee:b6:9b:99:79:6c:07:54:9a:
77:da:08:1e:21:05:de:77:b4:31:98:24:6c:b0:78:19:86:4d:
4e:95:98:ca:22:34:6f:a1:5b:2c:81:bb:ef:bd:75:d2:12:bd:
d6:8f:b0:16:ae:6e:56:d4:63:45:6a:d8:2b:7f:6c:21:be:82:
a5:6e:e1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:34 2026 by rpki-client