
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json)
Hash identifier: VA2AXcdtt/uU2OLrEyljt7wWUaBg70HN+uDgTDMUg0E=
Subject key identifier: 5E:79:15:08:DF:D6:9E:01:71:1B:AD:66:22:41:EA:4D:5F:80:A9:78
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
Manifest number: 025E
Signing time: Sat 13 Jun 2026 02:17:06 +0000
Manifest this update: Sat 13 Jun 2026 02:17:05 +0000
Manifest next update: Sat 20 Jun 2026 02:17:05 +0000
Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: bMMAvvBBtdsnvnlsCWowm8ZKNcybQnQcRlVVS6JihQk=)
2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: 6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=)
3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: zawi/wlEpNQoVrlgeNzoGXkUSXbiRvgZkdxKTLUCpcw=)
4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: kxn0Dg877a3vfvZmxRWSok8mv3qj9xPRSNnHx7tUEbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Jun 13 02:17:05 2026 GMT
Not After : Jun 20 02:17:05 2026 GMT
Subject: CN=6a2cbda2-19fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:30:26:de:27:0a:29:9a:63:6a:51:c4:3e:
96:58:68:89:b6:52:81:b0:dc:ef:6f:b5:7f:18:15:
1c:16:82:55:1f:f7:4c:75:c6:18:c3:27:46:d5:5d:
7d:48:71:02:60:2d:97:c0:e1:00:cc:8d:c0:d8:e3:
e8:0a:da:1b:09:0a:55:41:b8:66:a5:55:91:63:11:
18:da:a3:c5:14:e7:57:a3:2f:92:c7:1e:9f:51:9e:
ca:b9:85:ae:73:46:3d:be:c8:59:dd:ef:68:26:52:
d2:07:18:88:02:cc:34:0b:dc:4f:7d:cc:fb:11:f9:
3d:41:7b:f8:cc:81:b1:0f:31:9d:3a:ce:a4:87:b6:
f0:3d:57:65:30:59:81:35:99:1d:ac:34:e0:08:15:
46:3e:9a:ad:4c:e9:78:4b:e1:66:e4:cd:e7:f9:b5:
e4:62:ca:8d:84:86:93:a4:fe:3f:7e:33:77:06:83:
9a:70:f8:b0:1c:be:e4:14:93:bc:6f:24:d7:94:68:
5a:d9:a0:e7:4c:98:78:72:9d:be:8e:c2:8c:d3:a9:
7e:dd:55:00:6e:96:4c:66:da:51:04:e7:fb:bf:ed:
9c:68:c5:8f:41:7e:51:cd:72:3a:df:9a:18:f0:0e:
9f:fc:03:3b:f8:da:1e:fa:60:49:1f:7a:f6:b5:93:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:15:08:DF:D6:9E:01:71:1B:AD:66:22:41:EA:4D:5F:80:A9:78
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:da:e3:bc:01:99:00:df:7c:d9:50:df:02:48:96:b9:59:fd:
35:56:f1:a3:40:5c:21:8b:06:d3:66:14:4f:6d:a1:0d:9b:71:
7a:48:f9:45:6a:d7:5b:3e:5b:7e:78:c8:04:59:ab:db:8c:1e:
43:d0:91:49:d3:9e:fb:43:4a:50:d4:0d:68:06:cf:41:66:8a:
5a:92:02:84:7a:f7:6e:bf:4a:ab:15:9a:90:f9:29:2b:42:50:
33:1d:03:1c:5c:b3:d6:12:41:7d:39:8d:c7:34:e4:f6:cb:ea:
1e:a4:8e:aa:01:c3:5d:12:09:79:e0:4f:2e:37:ed:6c:2f:4a:
98:38:03:a5:cc:8a:ad:cc:75:0b:29:75:a9:e6:73:42:27:b0:
07:2e:ca:32:7d:d4:78:e7:8d:7d:ef:0c:4d:a0:4b:66:78:a1:
c8:61:83:89:d5:7e:74:a3:af:55:89:48:95:de:4d:4f:3f:46:
bb:38:5e:bb:54:13:27:9f:15:55:6c:e8:56:bc:08:2c:b4:38:
e8:d4:45:d3:31:51:fc:58:d3:89:14:79:d5:ac:4e:fa:26:fa:
a6:08:dd:8d:7a:c7:c8:80:fd:d7:11:c1:36:30:02:8e:dc:5c:
09:f6:b3:7b:f1:92:0b:99:2d:66:be:92:b0:e4:b4:98:ad:9c:
10:a6:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:20 2026 by rpki-client