
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json)
Hash identifier: hf+Dyi3xMk9R9xUTYilIbX6b5MYOyQJCvu40VO0oAx4=
Subject key identifier: 4D:F2:15:5C:81:4C:76:DB:BC:40:B8:1E:2D:65:6F:51:5F:57:D0:FF
Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Certificate serial: 0C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
Manifest number: 0C65
Signing time: Fri 12 Jun 2026 18:43:00 +0000
Manifest this update: Fri 12 Jun 2026 18:42:59 +0000
Manifest next update: Fri 19 Jun 2026 18:42:59 +0000
Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: HTu8M81tJX4nPPQukAzpAJVyV1NUjU94Q6E+f3ya7lI=)
2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: XTpbQflqD7TFkHQJp5BXjyAKD1uJrQHdMU7baBo5Omg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Validity
Not Before: Jun 12 18:42:59 2026 GMT
Not After : Jun 19 18:42:59 2026 GMT
Subject: CN=6a2c5334-a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:fc:96:3d:e5:dc:a3:85:4d:15:4d:a9:cd:
ee:78:72:40:52:d2:8c:ae:25:75:e7:58:41:b6:63:
87:25:51:95:09:71:f9:43:2a:2f:aa:9a:3a:f9:1d:
d9:7d:4c:7a:9e:0f:0e:a3:1c:9b:a6:dc:af:84:43:
7a:fd:c3:33:71:c5:0a:a7:5e:af:8e:56:2e:6c:cf:
fe:08:b0:ae:82:e6:0a:ed:ae:68:70:e1:cc:25:3a:
13:01:77:f7:40:4c:1a:b0:be:a5:cc:e6:2e:92:89:
c2:fa:a6:e5:2a:60:07:c1:af:7a:c2:d2:79:5d:80:
af:9d:79:01:a8:be:fe:23:15:a5:05:12:90:e0:0d:
89:1e:c3:e5:70:d2:32:27:51:98:d8:6c:ca:6c:1d:
50:e5:e1:df:1a:e3:df:2f:33:89:f2:91:f0:dd:ff:
d9:df:bf:9a:0f:da:c9:8e:e4:78:35:53:c3:05:cd:
b0:51:cc:77:36:f8:77:5e:27:f6:2e:8d:30:f8:4e:
06:20:f5:3e:da:d8:63:41:96:5b:8b:80:6a:04:9d:
5f:cf:8d:68:c9:44:1c:97:50:55:45:51:30:1f:62:
97:50:dd:e5:b7:1f:83:93:da:dd:f5:d2:ba:24:f0:
87:d2:d6:7d:18:ee:e1:1f:b1:7d:61:98:c9:07:a6:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:15:5C:81:4C:76:DB:BC:40:B8:1E:2D:65:6F:51:5F:57:D0:FF
X509v3 Authority Key Identifier:
keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:69:58:e8:e2:71:4b:61:5e:fa:32:6a:71:fb:c4:e1:08:
e5:d5:53:47:e6:6c:12:65:98:11:2c:a4:c1:64:d3:69:44:1f:
27:7e:61:3e:d2:2d:50:5f:0c:dc:ad:16:61:0f:a5:d6:27:a2:
1f:5c:1f:de:27:d6:55:eb:da:58:d6:9d:30:c1:4f:b9:1d:a6:
f7:02:e8:d3:64:58:12:cb:bc:62:0c:28:7e:2b:7a:11:35:7a:
9c:b2:1e:17:b8:e9:d8:b2:45:3e:5c:be:91:42:57:26:05:2a:
47:9f:37:fd:28:a2:64:1e:a0:c5:68:82:d9:1f:4c:dd:f9:97:
99:f2:0f:5a:48:b2:5d:d4:7a:eb:d1:14:53:ff:22:a7:7a:40:
36:6e:85:56:00:90:75:32:91:96:fd:08:af:28:53:f1:3b:f9:
19:e7:db:58:e7:75:f5:0a:6d:0d:0e:60:2a:f3:eb:07:9b:14:
d5:1a:47:16:7a:0d:c9:96:90:79:69:f3:84:d7:9f:90:58:74:
88:c5:f8:2a:aa:61:3c:a9:a6:8e:30:17:8f:6c:2f:3c:7c:be:
09:6f:05:fe:2e:72:2d:a7:4d:fd:61:2d:38:16:f0:37:3e:5a:
d9:a9:33:11:08:ba:59:ae:50:a1:c2:ac:1b:13:3b:39:57:23:
c4:68:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:18 2026 by rpki-client