
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier: kUzrd7wFdgmgNb6HJjGENLPFUM2XlTXa4u+sCZX2dLQ=
Subject key identifier: EC:F3:C6:17:80:CB:75:9D:85:87:1E:44:3F:59:89:57:28:E8:EB:D2
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 0909
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number: 08F1
Signing time: Fri 12 Jun 2026 20:21:43 +0000
Manifest this update: Fri 12 Jun 2026 20:21:43 +0000
Manifest next update: Fri 19 Jun 2026 20:21:43 +0000
Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: QojDF7AggOF1RoX0xLu3ZmbE2sNCA+LtDEI1oH+dKSg=)
2: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=)
3: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=)
4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Jun 12 20:21:43 2026 GMT
Not After : Jun 19 20:21:43 2026 GMT
Subject: CN=6a2c6a57-d3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:39:9d:9d:ca:da:2b:31:da:6a:6f:54:39:
16:ca:cc:88:60:d4:79:39:8e:dc:3f:48:2a:af:21:
d7:ed:d3:20:9f:37:79:55:10:6e:7e:22:15:a0:15:
b6:bd:49:d2:07:5e:ee:e2:c9:c9:be:94:f9:6f:a6:
85:75:b2:32:b3:da:d8:17:d0:3c:1d:02:f9:9c:ea:
b4:25:84:79:33:51:95:f4:a1:fe:02:9e:47:d0:cb:
ce:0d:3a:f1:7c:85:ed:83:28:13:bf:5e:65:74:5e:
4b:a3:de:60:1b:5b:d9:70:7b:56:78:1f:80:d6:da:
fa:f4:e8:9f:e7:95:d2:9e:99:21:e9:93:7b:29:01:
8f:2f:95:95:f4:1b:92:3e:63:e3:b2:fb:b3:1d:6a:
93:fc:52:6d:fa:37:73:85:44:82:b5:aa:c9:17:3d:
e0:d7:f4:f7:d0:c5:a7:a2:93:2b:17:11:3c:8b:ef:
78:26:dc:45:a9:08:f5:4d:62:99:31:0f:78:1d:ed:
9b:16:cb:2a:16:3b:d0:a9:4e:60:bd:de:7e:e1:3c:
b1:be:70:82:d0:c6:d1:3e:29:aa:8d:e1:2f:a6:5c:
22:ee:25:6c:dc:0f:13:01:f8:34:56:95:d2:8f:9b:
50:e4:53:d8:51:4a:5e:c1:5c:40:fb:35:88:43:92:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:C6:17:80:CB:75:9D:85:87:1E:44:3F:59:89:57:28:E8:EB:D2
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:3e:50:be:a2:1e:47:5c:41:0c:cf:85:25:9f:13:e0:48:b5:
72:ab:11:75:00:80:f6:05:33:f4:70:71:1c:1c:2d:18:3e:5f:
f4:94:88:ae:86:7f:e0:c6:bf:e0:76:4a:a5:40:6e:57:37:c7:
ec:d1:2e:a5:63:41:42:a5:fd:fd:10:30:e8:b9:0b:62:af:d7:
4f:f5:cf:50:2a:0e:d1:2d:d0:33:90:a3:87:15:d5:ff:74:c1:
62:9e:cc:99:a0:a5:32:78:6e:55:da:84:b0:3e:1e:d0:21:b8:
32:1d:3a:6b:3b:2d:b4:92:2d:4f:32:31:9d:4f:a5:e2:3f:08:
fc:67:36:21:9e:53:f0:0c:d4:a2:54:81:39:29:cf:c5:e6:77:
18:f8:62:94:e8:e8:83:46:b8:47:91:f5:fa:5d:39:a0:f4:73:
de:0f:1e:61:94:ce:76:8f:17:a1:19:7a:54:28:e5:7c:0c:d0:
9f:d1:7a:c2:6e:c8:f0:e9:36:cf:64:4c:ba:85:2c:a5:3c:59:
e2:70:d1:06:48:09:20:24:8f:67:af:c6:73:6c:d6:b4:45:50:
5f:d9:37:0f:d7:a3:70:d6:cd:b7:be:d5:2a:2f:cf:ad:d0:72:
ca:e9:50:d2:cd:a6:87:be:51:8e:22:81:58:b1:63:1a:f5:82:
86:57:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:49 2026 by rpki-client