
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier: V6yTzwZjlferW2214+LfEQXlDM8PmYmxIU54ocZVses=
Subject key identifier: 28:DD:54:B6:7D:45:12:EF:23:76:7F:97:0E:1F:DB:FE:7D:A3:66:88
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number: 0DEA
Signing time: Fri 12 Jun 2026 17:54:00 +0000
Manifest this update: Fri 12 Jun 2026 17:53:59 +0000
Manifest next update: Fri 19 Jun 2026 17:53:59 +0000
Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: sSL8LdHTwHrzfSIULPTXSceSidHKFOkdVxWrTTZtyMA=)
2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=)
3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: ystXqmcXsJu+zcIezcCOloYKjrlcgYih0bHHJpAVghU=)
4: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: H2PKNA7ln5Tm1QO2PuY9P2UE8JnCTTe09zyZ/hYdcgw=)
5: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: RuLZBRWd/+t6mmzM5XIVRxFhH72vtVTpt1H02OxGyCU=)
6: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: xIQORAl53eQLWRRXQOIoiissQk7N3FpNzgw3AMp5Aho=)
7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 1banGzm3MHHPGNLwGEl4a4TqEDqIBnphlYgtOeIrAtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jun 12 17:53:59 2026 GMT
Not After : Jun 19 17:53:59 2026 GMT
Subject: CN=6a2c47b8-fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:1c:cc:26:e3:18:ca:ef:3a:d7:ff:9c:4a:
02:6d:a7:04:6e:38:0a:1c:bf:23:d5:14:33:84:f2:
2a:0b:ff:03:cb:c3:e0:e4:03:ea:15:74:19:fe:a0:
dd:12:77:c1:9a:e8:47:ad:6f:f5:99:e4:18:8c:b3:
f7:14:9c:03:ec:c7:27:cc:69:2f:f6:f6:b5:76:60:
b9:0e:08:67:68:2e:70:e5:8c:0b:a6:1e:96:5b:05:
a0:be:59:f6:04:26:55:e2:20:d8:ef:14:e5:bc:ff:
99:8c:9a:68:b2:e9:cf:d6:43:cb:8e:0a:5f:69:c3:
29:db:1a:91:1a:be:94:da:25:fb:2b:e9:b4:61:03:
26:d5:f9:dd:89:aa:d2:25:0d:02:f3:a0:cc:91:0f:
8d:64:d1:53:07:b7:88:46:78:c2:14:0e:21:8b:4e:
5d:08:1f:a1:68:67:ff:73:7d:5c:8e:72:59:bf:10:
4d:b2:45:1f:25:c6:9d:6b:72:e2:f6:85:e8:f7:8b:
39:c7:0a:ee:ed:49:a0:76:50:b9:ec:63:05:06:97:
ac:b8:1c:67:1c:0f:94:bb:5d:e0:a3:83:2d:e7:6f:
a2:7f:cf:15:3e:f6:ee:5b:de:8f:c4:e1:66:af:2b:
7e:b6:b9:8c:a5:4a:9f:e0:09:33:42:b2:0a:ee:37:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:54:B6:7D:45:12:EF:23:76:7F:97:0E:1F:DB:FE:7D:A3:66:88
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:5b:c0:9a:f6:9c:de:40:a9:28:29:da:d5:68:35:6c:d8:
76:72:24:48:46:86:0a:f2:a7:1b:f1:5b:bd:60:06:33:07:21:
91:24:14:38:72:f0:03:d9:ee:39:22:ac:e3:7a:fb:76:7f:f8:
af:20:f0:bd:ca:bc:1d:96:a9:84:f6:af:e1:d4:d9:ff:7e:42:
c6:c6:ca:f8:fd:da:e3:e9:9b:30:b3:d8:45:65:14:aa:7f:38:
67:bf:01:58:c7:53:6d:3c:31:49:cf:58:e7:c9:26:19:a5:17:
c6:36:67:97:b7:ca:a7:2a:dc:70:91:36:4d:05:e0:df:79:64:
f5:33:46:63:99:d4:37:4c:af:ac:a1:1b:5f:e8:e6:75:02:29:
92:ee:7d:2d:9d:02:13:43:73:d2:21:3d:5a:72:75:79:30:d1:
6f:73:e8:8a:9b:61:05:64:5c:74:19:eb:aa:15:5c:52:a4:cc:
8e:32:dc:e6:3f:16:f5:8c:9d:a8:db:c7:0e:e8:14:32:da:62:
21:b1:69:27:dc:75:3f:f1:4e:21:18:42:45:b4:f9:cb:a8:95:
dd:7b:29:5b:0e:a1:e1:42:e1:f5:2c:1d:22:60:85:1e:75:3b:
41:fc:7a:86:3a:ef:cb:38:a0:10:40:7c:01:df:0d:53:a8:eb:
ff:64:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:52 2026 by rpki-client