
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier: MQY6Tp5fW/mDf0L/DNnLluzzeD43uiESFssO4KoJx00=
Subject key identifier: 1E:BC:C7:23:5B:81:4F:E9:52:D0:28:6C:71:81:A0:C9:69:DF:63:A8
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial: 1A44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number: 1A21
Signing time: Fri 12 Jun 2026 16:18:28 +0000
Manifest this update: Fri 12 Jun 2026 16:18:28 +0000
Manifest next update: Fri 19 Jun 2026 16:18:28 +0000
Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: T/Q/77YY7RJklh3fkfzUqSZcfC2D9mlKvnZh++YB6lo=)
2: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
4: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6724 (0x1a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Validity
Not Before: Jun 12 16:18:28 2026 GMT
Not After : Jun 19 16:18:28 2026 GMT
Subject: CN=6a2c3154-6666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:b4:c9:fd:c9:00:f8:78:e2:46:18:87:f4:
e9:5f:18:c4:18:d1:c8:0c:d9:45:5e:05:2d:53:d7:
d7:47:16:a4:3a:68:2f:eb:5d:36:31:69:b6:b1:1f:
0d:61:3a:26:90:5e:c3:d1:94:e0:b1:03:93:44:fd:
55:3e:04:7f:e8:8a:23:26:1b:2f:61:cc:88:86:a0:
cb:ab:61:51:28:4e:ff:de:d2:31:73:98:56:63:24:
73:3f:2b:b5:cf:51:30:af:18:bb:b0:5b:d0:c1:ee:
bf:ab:f7:e1:9e:39:3b:5e:4c:6e:e3:3f:fe:f4:48:
38:0a:18:4f:5e:54:e2:46:47:7c:9d:d6:75:37:a4:
17:2a:f9:4b:b7:71:6a:3e:24:c3:c1:df:b2:38:d1:
1d:fe:9d:48:90:16:ab:32:3f:39:d4:c3:5d:d0:f2:
83:4f:28:a9:17:32:42:40:f4:6b:33:f4:c6:18:c4:
d1:f2:59:5c:db:9e:97:2c:0a:8c:8c:6d:70:9b:39:
8d:44:7b:96:1f:14:08:75:29:2c:09:d5:67:3b:8d:
8c:17:4c:8b:4b:c2:dd:0e:3e:0f:f7:69:8d:6c:2e:
dd:24:92:68:c2:d9:36:08:89:64:7e:49:0d:9c:e1:
7b:62:58:1a:cf:4c:57:13:a2:bd:24:94:46:cf:81:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:C7:23:5B:81:4F:E9:52:D0:28:6C:71:81:A0:C9:69:DF:63:A8
X509v3 Authority Key Identifier:
keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c4:82:80:bd:f4:8b:25:1b:be:0a:f7:da:ac:f2:d5:fb:b3:
7c:22:5a:7f:2d:07:2b:3e:c1:88:67:27:3d:6a:cf:6e:2e:4b:
43:4b:92:72:e9:99:c0:04:df:25:91:df:91:3d:74:ee:27:bf:
3f:6d:91:b6:1f:27:d0:f0:eb:b8:cf:63:90:10:16:02:d3:e7:
2b:58:f2:13:c7:39:5c:c7:57:e7:78:3c:09:ba:a1:36:e6:f6:
89:e8:40:83:fc:d1:54:9f:8d:b7:51:b9:75:f6:1b:91:03:f1:
a2:07:0d:20:27:b1:b5:b9:6a:17:b9:f0:8a:f4:6a:e3:d0:26:
9b:54:d0:f8:10:23:e2:73:52:91:18:84:0f:59:c6:47:90:11:
7e:44:11:4c:0e:44:4d:2e:58:f9:f1:7e:38:78:73:f5:83:91:
7c:4d:7b:8e:da:8a:5c:98:1e:5c:10:28:88:0d:38:28:e1:7e:
5a:88:c4:5c:6a:49:b2:e0:63:e1:0b:e3:02:d1:ac:e9:85:1e:
70:08:49:67:b4:81:d3:9c:04:cb:21:53:12:fc:71:85:9f:97:
1e:11:e9:31:10:2b:e3:ec:48:a9:fc:b2:ae:eb:43:ed:7f:be:
c4:4a:bd:05:5c:ae:5d:8a:15:0d:68:df:f3:a5:95:16:24:0b:
c2:6f:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:09 2026 by rpki-client