
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json)
Hash identifier: 6H8hg2eF7TLFb3pmXwoNZC7d8vwlltxbrlFtv/mxaRY=
Subject key identifier: 10:8D:56:FB:63:B0:3B:56:0C:ED:D8:3C:B7:D3:DB:B7:09:4F:2B:3F
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial: 08DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
Manifest number: 08D2
Signing time: Fri 12 Jun 2026 20:24:02 +0000
Manifest this update: Fri 12 Jun 2026 20:24:02 +0000
Manifest next update: Fri 19 Jun 2026 20:24:02 +0000
Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: ErvRjfMEV6tMo7pC75cUgzNTnjHDJJVHwIj97DrnnKU=)
2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: D05It9UAiO51r8ILKVDfdiFJE2qz6LfsL6XWmNrhCuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Validity
Not Before: Jun 12 20:24:02 2026 GMT
Not After : Jun 19 20:24:02 2026 GMT
Subject: CN=6a2c6ae2-dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:73:92:87:50:4d:58:c4:63:fc:35:59:a9:
f0:64:0e:6f:f1:52:a6:a0:9b:93:15:51:49:70:2b:
81:fc:60:43:4d:fb:60:ba:2b:76:ec:52:59:46:49:
d0:41:ad:ab:10:b6:29:36:19:f0:82:c7:7f:36:26:
d3:cd:6b:33:90:2f:bf:4b:47:c7:51:32:85:66:51:
93:86:d4:26:a3:31:3d:05:6f:7b:f6:25:4d:13:c2:
8b:66:84:58:e0:39:15:24:d5:db:c3:de:52:70:7b:
6b:8e:d0:21:30:8e:25:26:26:96:88:2e:fb:a3:aa:
3d:8d:d2:55:57:d7:e6:64:76:fa:2b:42:ee:7c:61:
40:44:5d:bc:79:6f:3f:76:ec:e4:88:59:34:33:35:
aa:d6:54:33:7d:47:c3:0e:a8:d4:1c:13:aa:1a:aa:
37:3b:ea:4f:38:b4:9e:42:76:0d:e7:f1:fb:61:59:
41:85:e9:58:73:c2:cf:54:4b:7e:1b:95:89:e4:71:
dc:1c:07:38:a5:15:30:f3:e2:9e:b3:2f:90:ca:0b:
f7:08:dd:a2:f6:20:cd:43:28:7e:96:6e:79:21:2e:
e0:7b:9d:1d:1f:93:02:14:c3:4d:ac:ab:65:bc:f0:
e6:78:81:e7:c9:38:3d:26:72:9e:2b:79:dd:af:81:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8D:56:FB:63:B0:3B:56:0C:ED:D8:3C:B7:D3:DB:B7:09:4F:2B:3F
X509v3 Authority Key Identifier:
keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:90:fd:fb:63:59:a8:71:28:57:82:f7:d8:ca:eb:c3:d3:14:
4a:0a:b3:83:70:71:b0:7e:9e:23:9a:71:9d:46:a7:80:21:6d:
14:74:73:34:dd:b7:9e:bf:1b:ba:b0:1a:77:d9:f8:43:6a:db:
bf:21:c9:f4:24:c8:14:97:14:35:d4:47:83:5f:fa:db:41:ba:
f7:27:9c:69:0d:7a:d9:23:c2:15:6b:79:5a:d4:36:78:76:a9:
d9:d5:20:47:52:c2:27:1f:5a:22:82:d4:e2:16:17:63:9f:62:
1f:76:71:e2:42:0b:97:1c:5d:9d:34:53:dd:39:06:69:0e:84:
b3:f9:47:14:70:2f:d4:51:af:55:ba:f4:5f:3f:84:26:81:78:
3e:9a:86:81:1a:a1:52:b7:c3:73:cf:79:76:8b:0c:08:51:af:
cb:2c:59:fc:66:b3:e6:ea:8c:06:47:12:b3:25:61:3a:51:c8:
c5:ac:6d:18:23:c4:a7:91:c1:a2:9f:28:f2:95:da:8e:41:af:
da:a7:17:de:85:cd:64:e7:29:e3:9c:a0:5e:05:66:44:7b:8e:
bd:82:a6:05:c6:e4:58:de:9f:47:7c:46:d2:e6:dd:68:93:89:
c1:d0:71:8f:5c:5f:09:bc:18:6b:ff:4b:11:85:76:d1:bf:ab:
05:56:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:45 2026 by rpki-client