
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File: U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier: jc13rUJbCQAi0PEDIltlY1KldPkAARgELTkdKgWdDNY=
Subject key identifier: 29:B8:92:55:32:6C:AA:77:1C:AA:EF:B1:D2:3F:83:9D:EC:1C:0C:33
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer: /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial: 0570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number: 0566
Signing time: Fri 12 Jun 2026 23:25:12 +0000
Manifest this update: Fri 12 Jun 2026 23:25:11 +0000
Manifest next update: Fri 19 Jun 2026 23:25:11 +0000
Files and hashes: 1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: l1FEI3qe4EN4TLRoXjVpdwE1hLEXQO2G1pDgnonXskg=)
2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: bR2E+gd+wrOJUwU1dHm00di9g4h4d99vt7PxzQB7b14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Validity
Not Before: Jun 12 23:25:11 2026 GMT
Not After : Jun 19 23:25:11 2026 GMT
Subject: CN=6a2c9557-8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:26:91:d5:f4:ec:fe:4f:b8:76:30:c7:cd:
2f:97:15:df:e6:af:c1:eb:05:d2:eb:3b:b4:8d:9b:
c3:dd:65:be:f7:ff:de:db:d4:b0:85:83:f6:10:22:
06:22:40:57:b6:87:ae:0c:e9:b5:93:58:1b:4c:97:
8d:20:36:71:77:29:e3:1a:4f:d6:68:83:7e:fb:2e:
a2:14:a5:c4:36:dd:49:28:50:9d:ca:fc:6c:fe:83:
72:0a:47:03:76:28:e8:86:15:1c:20:b0:4f:75:1c:
5c:b8:5a:24:7d:b4:4a:30:2b:46:36:c6:ff:32:79:
c7:7e:30:db:69:5c:fa:8e:71:92:ac:13:3a:06:6d:
e5:b8:41:4c:e4:18:4e:e3:20:2c:7f:75:55:2e:5d:
87:76:d2:41:45:5b:7b:f0:2c:6f:3d:f0:c9:9f:c9:
a6:cb:9d:01:b2:56:16:ec:4c:4c:61:9a:af:f6:35:
00:0d:54:17:9b:bb:b4:5d:58:72:7e:25:81:bf:df:
e3:ad:bd:90:ef:3f:65:00:b4:7a:74:54:24:01:42:
e4:15:96:4a:1c:58:93:0f:53:7e:df:5c:db:0b:ed:
2f:0e:76:d0:f8:85:97:0d:5a:c7:14:53:02:1f:36:
ee:6d:e3:10:51:11:00:99:00:b3:00:ed:29:7a:96:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:92:55:32:6C:AA:77:1C:AA:EF:B1:D2:3F:83:9D:EC:1C:0C:33
X509v3 Authority Key Identifier:
keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:87:a2:70:44:c5:9c:12:73:61:d7:d9:4d:09:da:39:f0:8f:
46:21:ca:3e:e5:47:1a:50:37:cb:b9:cd:30:37:4d:1d:23:76:
17:a6:24:87:3f:36:e3:a7:00:02:25:a2:11:e0:78:58:8c:b3:
d8:ac:a7:d0:e3:7f:45:2c:81:3c:44:d6:24:00:39:78:f6:5c:
39:57:9b:83:2a:f5:4a:de:a6:3c:fa:42:e1:75:84:0d:91:92:
60:ad:bc:b2:73:31:e6:3a:47:b6:57:2e:95:d8:27:fb:c0:79:
bc:b6:60:4a:ba:61:38:1d:44:68:8d:f8:56:b9:ef:19:cb:7a:
ec:2d:1f:d4:50:7f:41:bf:ad:6b:ff:e6:b2:83:1f:18:f5:d5:
1b:4b:c5:53:ab:2f:62:c1:6b:e8:b5:c9:72:96:cb:fe:62:e1:
3b:65:ec:8a:e4:81:a4:ae:09:5a:0e:44:0a:a5:c0:fa:ae:fe:
fd:f1:95:4f:c0:b8:f5:ed:5d:c5:d8:b1:bc:21:b6:f4:39:48:
1f:f5:6f:0b:b9:3b:7d:45:f1:1d:f1:a9:29:aa:7e:0a:a1:15:
bb:32:37:b2:44:b8:de:c4:a9:f2:fa:46:9c:88:9c:1a:e1:65:
ef:25:0a:a2:4e:3a:20:57:62:64:d7:3e:6d:13:5c:e0:42:e8:
e1:fc:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:01:33 2026 by rpki-client