
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier: kEnjqsPusFdf28cNsTq8/d/crdptt3oywKHvNWuvcE4=
Subject key identifier: A9:DA:92:36:11:0D:3C:7B:12:0E:95:7C:A6:DB:7A:87:36:39:6F:5F
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial: 0DE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number: 0DD3
Signing time: Fri 12 Jun 2026 17:52:06 +0000
Manifest this update: Fri 12 Jun 2026 17:52:06 +0000
Manifest next update: Fri 19 Jun 2026 17:52:06 +0000
Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: KSEA+wsOw3bWIRaBngvpYOaxiYtzVU0FB7lPpkQhDl8=)
2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: 6j7bxqHzx1dI1kYE2+5kVsCKoZs1p0M+vne2lqDu34U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Validity
Not Before: Jun 12 17:52:06 2026 GMT
Not After : Jun 19 17:52:06 2026 GMT
Subject: CN=6a2c4746-8127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:13:04:4d:87:7c:78:56:0b:b3:1d:53:13:
70:71:ce:a5:70:ec:cf:c2:94:ad:61:d4:1f:1e:f5:
58:99:7a:d2:e4:b6:19:8b:80:4c:29:ff:01:e8:98:
e7:06:ef:4b:99:bf:85:48:ec:a8:23:da:57:05:74:
94:e1:74:a0:28:77:46:0b:08:1b:f3:45:48:09:55:
ac:ec:48:e3:bf:91:bd:9e:0f:40:dc:3c:af:56:7d:
9e:c6:4f:ff:70:c5:54:02:d2:39:07:81:5a:0a:66:
82:52:a9:89:a1:23:c0:60:8c:fe:30:90:af:0f:f1:
21:35:dd:4e:ba:2e:11:f5:c0:1c:50:50:5b:bc:b0:
1e:3d:98:73:b1:b3:7e:72:53:1c:6b:b6:1b:d3:9c:
80:05:85:2b:51:b3:0b:19:26:fb:72:61:23:ba:8e:
ec:83:bc:20:ce:08:10:68:49:b2:15:61:36:02:46:
03:e9:08:6f:a4:25:89:cb:ae:37:6c:9f:5f:c9:92:
ae:8b:e5:47:2b:d2:15:20:f0:7e:9f:cc:71:40:5b:
b9:3b:d1:6a:5a:3e:0e:d4:09:e5:39:ef:3d:02:db:
5b:c7:cc:2f:c6:24:9d:e0:6d:f9:4b:a3:9c:45:6d:
7c:2f:c2:81:dc:ee:b8:63:2d:b0:0c:b2:54:6a:77:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:92:36:11:0D:3C:7B:12:0E:95:7C:A6:DB:7A:87:36:39:6F:5F
X509v3 Authority Key Identifier:
keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:e5:14:ad:17:9f:5c:a8:40:86:f0:ae:d4:d5:82:5e:d7:
6f:87:1f:96:7b:69:27:32:28:29:44:cb:c7:f2:10:67:8b:1b:
fb:37:b3:a9:b4:2c:85:39:bf:20:05:f9:b6:0e:ef:d6:d6:4a:
09:e3:c9:84:f2:f5:9c:53:a9:a2:6c:c4:72:e6:25:4e:25:f6:
72:ba:57:e0:7c:a4:dc:f1:51:af:00:5e:a5:1e:06:a2:5a:0e:
1a:38:57:98:ae:b4:a4:89:cf:48:4b:70:f0:41:d0:20:ab:cb:
d5:4c:ad:2f:2b:a7:da:60:bb:38:3a:16:85:82:de:5f:65:bd:
68:4e:b7:a6:cd:9f:1e:51:d5:c4:74:d7:f6:f7:36:31:42:d5:
6b:4d:78:4c:2d:11:44:54:10:27:54:2d:ba:0e:55:22:7b:87:
9d:b7:37:19:99:15:8c:63:71:ba:c2:2f:c4:a9:7b:c6:e8:b4:
7c:62:00:60:80:3a:7c:df:70:b4:78:f9:25:6f:9a:a6:3d:c2:
fa:f7:73:d8:01:f0:d6:d5:3b:4f:f6:60:57:3a:29:56:6e:45:
3d:1d:6b:22:3a:2c:ce:aa:25:24:7f:83:6d:8a:f0:89:cd:73:
fe:23:b6:71:35:3b:2f:65:06:63:4d:28:42:16:7e:a8:04:d8:
48:8b:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:06 2026 by rpki-client