
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier: Jw61FON7g81Ytqgg/Kf1dvfojzhQ4vIMqsdgXxPIFHM=
Subject key identifier: 11:27:D7:65:AC:26:6C:77:41:5A:82:C9:60:A6:DF:0B:BE:87:3D:8D
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial: 3552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number: 3552
Signing time: Fri 12 Jun 2026 14:40:25 +0000
Manifest this update: Fri 12 Jun 2026 14:40:25 +0000
Manifest next update: Fri 19 Jun 2026 14:40:25 +0000
Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 1BqL8pLweKIZTiliMI5f7lgcO6+878Eo4ikb8o/fswY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13650 (0x3552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Validity
Not Before: Jun 12 14:40:25 2026 GMT
Not After : Jun 19 14:40:25 2026 GMT
Subject: CN=6a2c1a59-8f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:6f:af:f8:ef:bf:e0:13:15:18:6f:50:41:
81:8f:3e:64:35:26:e9:29:62:55:cf:e3:69:76:63:
a2:c4:c0:06:5d:12:bf:8a:cf:9a:29:30:7e:9c:b7:
18:c1:78:0f:91:1c:90:99:dc:ed:08:dd:9c:01:af:
07:87:9e:4b:e6:d3:04:23:b6:ed:00:82:8f:fe:e2:
8d:2f:f9:af:96:cb:48:c4:3a:ad:a7:89:a2:45:5d:
92:20:7d:f6:19:68:47:4e:b1:17:6c:af:ba:3d:6a:
1b:33:d0:19:0c:bd:b3:e8:6d:16:da:80:ee:3f:38:
2a:91:7e:85:71:32:8e:75:00:66:1a:14:70:6f:23:
4d:dc:1d:69:af:f8:f8:61:41:f4:41:14:9c:ad:17:
2c:70:fc:16:3c:72:2c:d2:9d:91:db:b8:b4:9d:7a:
fe:1a:82:1b:69:80:6f:aa:f5:09:0c:0d:b1:40:99:
0f:ab:a4:85:75:e7:6b:e8:f3:77:f4:4e:e1:0e:8f:
8b:c2:3e:0f:69:5a:06:f1:b1:30:af:17:00:5b:24:
f6:72:3b:2d:2a:c0:64:94:94:ac:bb:44:e4:65:dc:
05:77:0b:f3:2c:ab:fa:4f:3d:87:99:47:2e:7a:46:
ca:9e:27:3b:eb:5a:ad:54:85:19:41:78:b7:f0:7d:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:D7:65:AC:26:6C:77:41:5A:82:C9:60:A6:DF:0B:BE:87:3D:8D
X509v3 Authority Key Identifier:
keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:9f:b4:f8:07:62:10:43:92:96:26:ad:55:1b:a3:c9:0f:
71:e3:ae:b0:07:47:3e:15:4c:b0:e6:3d:81:53:ee:14:27:a5:
c9:47:5a:e1:07:17:f8:cf:cc:39:2f:f2:13:c8:d9:08:a0:55:
ba:bc:82:60:ee:50:9d:3b:4f:53:03:ee:8f:bf:e7:ea:e2:1d:
00:31:b4:74:91:b7:d3:94:f8:b7:0c:9a:0f:52:c0:2e:17:e5:
9e:69:d8:8f:f6:60:0a:63:67:2d:36:3e:92:05:9c:7e:e7:43:
df:c7:de:64:6d:1c:13:a0:42:90:ce:b1:bf:45:54:37:bd:f6:
d0:4a:e0:8e:8d:54:11:df:6e:b4:86:31:0c:7f:63:6a:b8:ff:
c8:38:9c:d0:ac:1a:74:21:f0:7e:2c:5e:ab:c3:16:28:1e:49:
4c:b5:4a:8f:e0:8a:b8:cb:eb:2f:ed:5a:45:f1:c2:12:23:b0:
85:6e:54:2a:d5:d8:be:b4:c7:7d:af:b1:8d:6d:2e:ea:bd:ac:
7b:ac:be:87:ac:ec:b6:43:02:1e:f9:76:18:1b:b1:83:bf:cb:
11:5a:48:f3:3c:97:a5:c9:38:2a:a2:3c:e9:db:a0:88:31:c7:
fe:0b:af:90:45:20:4c:46:bc:7f:90:46:bc:16:a7:d4:e9:7e:
9b:66:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:30 2026 by rpki-client