
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier: bFYLFkcINUXHbatJAFFnOEbFCOY3bDEPiCIKupfockg=
Subject key identifier: 03:98:88:AA:23:AA:C9:D6:07:5D:47:96:45:8B:4B:D2:AD:22:14:D0
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 358F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number: 356F
Signing time: Fri 12 Jun 2026 14:42:48 +0000
Manifest this update: Fri 12 Jun 2026 14:42:47 +0000
Manifest next update: Fri 19 Jun 2026 14:42:47 +0000
Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: +tTJbWVp9B05dSNGc7LSqDPoyNZ2VFJtvY9qubrm9yA=)
2: BBDA65F6479111F1892030F49D833773.roa (hash: t3MKX0SQ0l2/O3Cn8Pta+/GR5x74uHYlPAkfD5y3Nzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13711 (0x358f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: Jun 12 14:42:47 2026 GMT
Not After : Jun 19 14:42:47 2026 GMT
Subject: CN=6a2c1ae7-8508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:7e:fe:8b:3c:7e:21:8f:92:4c:13:b1:5b:
8e:5d:b6:e0:56:bb:55:28:b7:40:41:76:79:a2:9f:
5e:ff:fc:4f:7d:21:01:fe:46:9f:bc:59:1e:3a:01:
81:a3:a6:71:5d:3a:ea:8d:6d:02:14:af:0a:0c:82:
69:45:07:bf:ea:c4:9b:78:c3:bb:5c:04:02:9b:a9:
3b:a7:1f:99:02:81:05:74:b7:3e:38:0e:a9:08:cd:
62:e6:4d:fb:b4:2b:0b:da:d8:71:cb:73:84:ba:d3:
a9:75:22:b4:ef:6b:3b:4a:2c:26:c6:1a:09:1b:cc:
6f:a6:4d:b2:45:16:12:7e:3a:74:fe:1f:5e:7f:d4:
db:a8:83:98:19:81:6d:74:7d:51:d4:bb:6b:af:32:
d7:4e:aa:e2:b6:fe:af:2c:22:b5:4e:13:4a:ce:e6:
bb:78:cd:36:92:33:8c:68:28:fe:d1:2f:32:eb:09:
19:3e:fb:9b:c8:01:61:83:59:f9:91:53:ed:31:bb:
ff:46:e0:a5:9b:2f:a0:35:d5:9f:ce:14:9e:de:5d:
e4:44:3d:55:f9:d9:70:9b:68:ab:e6:53:d5:49:cb:
7e:8f:6d:31:9b:aa:84:a2:4b:f3:21:79:41:40:d7:
b4:42:24:6a:d3:e5:87:7a:33:83:ad:c3:c4:d7:e7:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:88:AA:23:AA:C9:D6:07:5D:47:96:45:8B:4B:D2:AD:22:14:D0
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:8a:dd:d4:bc:89:d5:09:00:df:11:fc:bd:85:6b:af:db:fd:
02:84:0f:9f:70:d9:ad:c5:f9:35:b2:6d:bb:a2:a7:d6:13:74:
ad:1f:a5:18:ad:ae:e5:7b:1b:1e:8e:6d:fa:67:3c:19:7f:b5:
98:22:72:24:fc:2e:6a:21:98:f0:00:dd:6b:da:96:8a:9e:bf:
db:92:be:b6:4a:68:44:76:2a:6e:26:66:fb:ce:06:c0:45:71:
5e:d4:64:48:71:9b:b4:e7:6c:f4:3f:55:17:f5:be:f5:40:23:
42:01:93:04:ec:98:8d:57:e2:de:50:83:d6:14:3a:55:fb:7c:
13:90:16:0a:f8:55:12:57:9b:16:f4:22:94:75:30:fe:22:fb:
5a:06:86:8e:59:58:87:c7:2c:0a:de:c8:ae:4f:f2:d8:3d:0c:
ae:6a:b3:aa:58:ff:3a:10:5e:a9:85:49:30:37:a0:4f:b5:4c:
af:c8:fa:42:5c:41:2d:df:17:03:93:2f:4f:9f:a9:b5:83:65:
53:55:56:56:83:ed:cb:61:48:51:76:04:70:14:4e:0f:f8:70:
9d:a0:47:f2:f1:92:dd:24:05:53:e6:8d:3b:4f:32:dc:1d:52:
c8:8e:ed:0a:a7:94:1d:4e:0f:80:4a:33:80:49:a4:41:77:0d:
ee:81:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:50 2026 by rpki-client