
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json)
Hash identifier: 1Ai3OENKgtuWM5ui6emNEdJvIY9IC/HM++LRys5CuUo=
Subject key identifier: A6:DE:17:E7:01:07:4B:29:25:89:65:D1:44:34:72:26:28:E6:C5:4B
Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
Manifest number: 40
Signing time: Sat 13 Jun 2026 08:35:13 +0000
Manifest this update: Sat 13 Jun 2026 08:35:12 +0000
Manifest next update: Sat 20 Jun 2026 08:35:12 +0000
Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: IOfHHdJN3Jh0KsuxjTlgZy+iyVcravjy+DCN5d34IXw=)
2: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: kqV3oKn3iSJ05FgfTJc78t84aqKB7m6Xr2Ot/p1Zm1k=)
3: 55C25D260BD911F1B73B6397303D8C67.roa (hash: EKXgM16EsTst1A1QTtcnCCqDbQBrcCZuzsJr1SJRdww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Validity
Not Before: Jun 13 08:35:12 2026 GMT
Not After : Jun 20 08:35:12 2026 GMT
Subject: CN=6a2d1641-593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:19:97:80:f9:35:58:be:6f:e0:d8:42:3a:
d7:4d:4c:cc:0d:8b:22:cf:45:60:9e:21:7a:15:08:
eb:4e:5e:77:11:cd:90:76:28:57:1e:a0:46:d3:c1:
8c:28:60:92:e4:be:ec:b0:48:a1:d8:a0:4c:91:57:
be:8e:6f:f0:85:7d:2f:e4:0b:d1:2d:6a:65:e6:c4:
04:26:a6:85:6b:71:30:bf:1c:98:6c:78:ed:28:72:
81:47:89:df:e3:0f:6f:f5:84:b7:35:6a:3b:60:4f:
27:90:fe:d9:44:55:70:3d:c0:aa:35:6e:e3:46:03:
cf:d1:f2:7d:f0:0b:a1:90:10:39:9f:41:c4:1f:f6:
5e:db:ec:5a:ca:33:02:5c:ca:0b:49:9c:90:bd:96:
9d:04:fa:10:a3:7d:1d:b5:72:a3:fc:e2:e7:71:9f:
9f:38:aa:f1:35:c8:28:4a:bf:56:91:6a:da:8f:e7:
e9:89:41:ca:c2:d4:81:cc:16:94:d7:20:ca:6c:66:
be:1a:e7:a4:9d:5e:fd:12:ff:7f:21:3d:16:4c:ca:
2f:5e:f3:55:37:a9:67:5a:ea:07:42:c0:68:ae:e3:
2a:9e:c0:06:07:bb:bc:c7:42:b2:17:c4:aa:91:b6:
f7:1d:8f:be:19:a3:2a:41:a7:d4:14:eb:22:f7:e1:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:17:E7:01:07:4B:29:25:89:65:D1:44:34:72:26:28:E6:C5:4B
X509v3 Authority Key Identifier:
keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:f7:54:37:8a:76:a3:c8:72:1d:a7:c0:3a:ac:1f:9d:48:
52:e1:d9:93:97:40:b5:d4:e9:68:90:de:0f:f5:b9:26:27:20:
9e:2d:70:e8:74:f3:6a:24:1f:c6:6d:c9:81:a1:7a:94:b7:7c:
c5:84:ee:42:46:ce:b8:7b:2f:ec:8b:e7:4d:72:49:f4:a8:01:
ac:f0:f7:41:83:c7:6b:15:af:69:5f:16:1c:c2:61:80:24:e7:
60:4b:6b:a2:2b:e4:e2:44:9b:9c:52:db:f3:9e:ab:55:99:fc:
25:17:40:78:a8:66:7e:3d:f4:f1:73:b4:00:55:c7:6a:fe:15:
92:57:ec:aa:aa:ae:de:c9:6d:51:f1:f5:74:1b:69:84:4e:3d:
81:db:ea:f8:bd:a6:db:cd:1e:7a:f4:b8:a7:38:a7:98:fa:9b:
c8:65:5d:c9:15:92:4b:0f:42:b1:2f:60:b2:87:46:ea:de:3b:
e6:22:7f:5d:2a:b7:7d:b0:8c:1d:5d:d4:29:2e:10:5f:74:aa:
94:f3:24:34:3f:5c:0e:da:fc:a7:4d:65:81:34:c1:f9:8e:91:
d7:fc:70:e3:3a:ff:1e:b7:e3:5a:c1:41:05:6f:48:51:96:47:
06:77:21:03:40:be:fa:26:d8:52:33:d2:2a:40:9e:89:b3:33:
eb:9b:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:14:52 2026 by rpki-client