
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json)
Hash identifier: D5R9VMnzaADlTF/949t57MdPI/DsTzV8LHPOT1iFydI=
Subject key identifier: 29:70:9B:05:BF:E4:EE:DD:0E:2A:A4:6F:2C:87:6A:CB:20:B6:8A:52
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial: 0924
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
Manifest number: 091B
Signing time: Tue 16 Jun 2026 20:18:26 +0000
Manifest this update: Tue 16 Jun 2026 20:18:25 +0000
Manifest next update: Tue 23 Jun 2026 20:18:25 +0000
Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: nosVSgq9o09yudlUqidvf6iVnE6pE2ahZ3C4jXQ7n2o=)
2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: rgcQn0IdN1G4X2mCbx+TQwSEQO4ecdv1pRq56PdhirY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Validity
Not Before: Jun 16 20:18:25 2026 GMT
Not After : Jun 23 20:18:25 2026 GMT
Subject: CN=6a31af91-27de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:03:7c:1d:38:c1:fc:86:5b:6c:48:38:28:
cf:ce:33:6b:63:b4:42:ac:25:38:19:32:d3:2f:ef:
27:c2:ed:26:06:22:7e:fc:40:ba:e2:f8:ef:85:4a:
7d:56:ad:77:2a:27:1c:9a:2a:d6:ec:55:46:c3:02:
e2:93:16:0a:86:6b:64:a2:aa:02:5e:cd:ec:cf:dc:
56:d8:f7:75:1a:98:65:1b:35:88:11:dc:a5:cd:f7:
88:77:33:15:f1:a3:90:98:9e:b7:b6:a5:06:e7:da:
de:e1:6b:62:96:eb:67:f9:84:63:93:1b:e6:30:56:
11:43:2d:a0:43:9a:6a:e1:5a:31:af:7c:18:b0:62:
c8:33:9c:c7:86:52:b4:92:91:4d:c5:d8:90:df:cd:
5b:99:6e:ab:db:7e:7e:fa:63:b8:80:8a:5f:dd:19:
70:65:be:7c:3e:d0:6d:a2:0b:e9:a7:ae:13:fb:93:
62:7c:c0:ea:e8:fa:41:ed:ae:8f:a2:d2:0b:a7:b0:
ac:ba:52:11:a4:bb:cd:65:54:a4:b8:e7:56:73:a5:
85:d3:fe:a9:85:64:b7:93:2d:8f:ca:f6:fc:76:c0:
ba:c2:b2:40:d1:fd:30:f4:68:94:5b:7a:81:6b:79:
09:ec:30:b4:ce:7b:54:2c:59:05:17:59:a6:af:e9:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:9B:05:BF:E4:EE:DD:0E:2A:A4:6F:2C:87:6A:CB:20:B6:8A:52
X509v3 Authority Key Identifier:
keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:28:e2:e8:25:06:e8:56:8f:cd:77:8f:93:f4:8a:d3:ff:
d9:7c:d6:8a:4a:d0:0a:09:80:c1:fc:e8:15:ca:fb:50:1f:2b:
93:2a:09:40:70:df:80:e6:e1:1b:b9:8d:13:c8:f9:7d:57:ac:
2b:67:39:5a:88:20:06:81:01:7f:8d:7f:fa:b8:c1:7d:9b:7d:
d0:43:55:c2:0e:9d:b1:e6:17:e6:2c:cd:59:39:a9:65:a1:d5:
7e:11:67:a6:b7:63:64:96:95:20:51:14:8e:24:46:e3:7d:29:
c0:ff:08:cc:a5:71:03:b4:a8:92:fb:87:ac:e1:08:dc:15:e6:
1c:62:ce:7f:6a:c3:e0:40:cc:ed:e6:e2:36:37:d4:81:5b:66:
d9:d0:8d:13:90:a7:ce:fe:17:79:59:21:60:32:c5:68:c4:0d:
6d:74:90:94:d8:76:ad:aa:cf:43:20:e7:c9:3b:1b:78:de:02:
b6:ac:94:23:09:0e:7a:df:b5:81:13:82:96:4a:9e:a5:b4:33:
f3:1d:04:0d:ac:3d:f9:cc:a1:fb:16:ba:39:bf:08:97:6d:f9:
26:15:53:31:2b:57:cd:47:ad:41:4e:f9:c4:35:47:32:34:ae:
1e:45:9d:a0:63:a6:94:03:a1:68:df:be:53:bf:99:88:1f:01:
90:f8:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:14 2026 by rpki-client