
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json)
Hash identifier: pyy89sl73qqTCDBnEeZGxQf7JCd1o/0TE7CGRHwg0cE=
Subject key identifier: 5C:46:A3:9B:77:3E:10:9A:0C:07:C8:98:7F:A7:FE:9D:4C:F7:83:B2
Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
Manifest number: 021D
Signing time: Sat 13 Jun 2026 02:48:33 +0000
Manifest this update: Sat 13 Jun 2026 02:48:33 +0000
Manifest next update: Sat 20 Jun 2026 02:48:33 +0000
Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: p2YUzyl1Tefb0Bz8E4y6CuSztkPYtGkuZ8Sc5/+Wg9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Validity
Not Before: Jun 13 02:48:33 2026 GMT
Not After : Jun 20 02:48:33 2026 GMT
Subject: CN=6a2cc501-9968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:f1:4c:ff:7d:29:f1:2e:ac:d6:36:b1:00:
7b:c1:f3:8f:52:ec:9b:70:e7:d7:ab:a5:94:f4:2d:
25:3a:62:ec:c0:83:84:00:c7:ea:01:89:4e:53:4d:
86:5f:7f:dc:1d:76:81:26:bd:6d:e1:31:d2:de:f1:
f2:bc:78:c3:d0:f9:0d:d2:a6:60:4e:a0:78:52:16:
60:0a:64:b5:35:dd:75:40:bf:5d:a3:4f:f8:bb:85:
a7:68:8f:15:dd:a4:f5:21:57:c3:6c:f1:28:81:24:
14:54:33:72:70:dc:b9:76:16:42:86:58:b9:56:e2:
ef:bf:b1:e3:ed:42:3d:9f:1b:c8:dd:9e:2f:a0:2c:
51:25:1f:ea:4b:bb:58:5c:61:72:c7:24:ff:1b:05:
35:72:d5:62:a1:19:e9:2c:ae:59:79:4d:5e:23:17:
6d:f4:ff:41:cd:6a:f5:d0:1d:ab:91:86:56:0b:bd:
80:43:2b:26:68:54:11:71:5a:cb:b2:0e:e4:49:4e:
c0:c4:64:48:ff:e1:0f:ca:ff:d2:48:72:d8:53:57:
cc:57:b7:3d:1b:68:6f:96:0f:70:1d:b2:5b:fe:39:
83:ce:2b:80:db:a3:f9:9f:66:97:3a:42:0a:46:6c:
15:59:7c:44:eb:21:b2:dd:71:d9:5a:71:da:81:6b:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:A3:9B:77:3E:10:9A:0C:07:C8:98:7F:A7:FE:9D:4C:F7:83:B2
X509v3 Authority Key Identifier:
keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:60:35:2d:29:3e:a6:0c:4e:b4:ac:59:cb:e7:9f:62:d2:8c:
2a:39:51:e9:3e:ae:ff:47:8e:d8:35:79:9a:28:7e:86:ad:fb:
1b:4e:16:59:15:e1:2b:8b:e6:85:fc:e0:6f:6d:d0:29:88:ef:
a1:88:fa:1e:58:33:3a:7f:f1:27:bb:58:82:2d:79:68:eb:d7:
1e:2f:02:69:7c:fe:48:d7:6b:05:07:91:21:e0:13:18:db:17:
72:49:ee:e5:7a:af:48:17:a1:3c:47:79:b1:5c:98:d1:bc:85:
ac:c7:b4:26:cb:bb:21:be:29:66:34:e4:8a:dc:2f:27:40:ad:
58:76:b8:9e:dc:01:ef:bd:e6:0c:cd:08:c9:63:e8:61:7a:f9:
8c:a5:9d:aa:38:4b:b6:2e:1d:f9:18:95:2f:5a:dc:b6:70:33:
3f:3f:42:ea:13:79:ae:16:28:0e:6b:7a:5f:17:81:d7:3d:e3:
79:c1:71:fa:fa:1c:63:2f:b1:d9:f6:9d:5a:dc:fa:ec:54:ce:
96:75:6a:5b:94:3f:a8:c1:9c:41:14:54:89:58:2f:67:04:a8:
e2:a3:59:02:51:74:32:bb:8d:20:97:78:3f:a7:88:b4:1c:71:
5d:fb:f0:53:5a:b8:c0:79:a3:a2:06:c2:fa:f2:95:a0:bf:76:
6d:02:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:59 2026 by rpki-client