
$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier: xhMzfMePLZaS/wzXNhloyAQLPPYTE4jHB0Xk8VRVEIk=
Subject key identifier: 73:C6:37:FD:95:D8:8D:5D:EC:63:51:2C:36:B4:EB:E6:73:D7:B9:5C
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number: 0108
Signing time: Sat 13 Jun 2026 06:11:38 +0000
Manifest this update: Sat 13 Jun 2026 06:11:38 +0000
Manifest next update: Sat 20 Jun 2026 06:11:38 +0000
Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: oNnvFb+UxTW2Ui0UTJlmas/rd0a44Uh5+N2ZkCBBUU8=)
2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Validity
Not Before: Jun 13 06:11:38 2026 GMT
Not After : Jun 20 06:11:38 2026 GMT
Subject: CN=6a2cf49a-d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:91:f2:63:cc:7b:41:88:a2:d1:13:e4:05:
08:ba:84:47:ab:b4:ab:f3:d1:86:54:c7:c1:bd:19:
52:a0:0c:b8:63:11:d6:a1:76:5d:e0:0e:a5:48:2c:
97:4e:12:7e:c0:64:be:5e:e9:3e:1c:58:73:ba:33:
0a:41:e5:cb:ce:7a:5b:a6:c7:d5:10:1d:21:5e:dc:
4d:38:96:09:3e:6f:ec:2e:ba:7a:7e:df:95:64:57:
9c:d9:27:6b:79:ef:4d:be:7f:f9:ea:8d:99:3c:d3:
86:a5:2e:b7:a7:51:c0:b4:54:5e:b4:4d:40:3e:ce:
80:a1:31:b9:3a:d3:e2:04:ee:63:56:56:fb:ac:da:
32:19:2c:04:1c:95:2c:e4:f1:f8:e4:cb:1f:46:b0:
6e:1d:cf:45:5e:a2:8b:28:66:12:dd:af:d1:59:a2:
0d:3a:23:67:b1:44:4c:59:14:cb:b0:ba:b0:5b:75:
c5:a7:84:23:e1:95:c7:10:72:6e:1a:44:81:49:54:
c0:47:6b:4c:48:82:5f:4a:4a:f5:3e:ba:cc:63:29:
08:8a:f1:52:bc:61:13:ec:fc:4e:eb:42:96:32:03:
56:38:60:8a:3c:b4:d8:6a:24:bd:0c:5d:8c:3f:d5:
17:c4:38:72:43:6a:b5:a8:60:7a:f5:12:e5:af:2a:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:37:FD:95:D8:8D:5D:EC:63:51:2C:36:B4:EB:E6:73:D7:B9:5C
X509v3 Authority Key Identifier:
keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:93:7b:70:1d:ff:4d:d8:40:79:8f:6a:fa:7e:20:47:ca:63:
c0:31:4c:94:f4:03:56:f4:bc:25:b8:17:e6:ae:7f:a4:95:d9:
88:6e:66:14:c6:4d:59:a8:0d:7a:ff:50:10:89:27:c7:d6:65:
18:b0:c4:54:03:07:4b:2b:4c:df:95:ca:2d:5d:df:01:c3:da:
36:4c:27:39:73:49:4c:7b:33:0e:22:13:e9:09:43:59:2b:8d:
1b:05:17:e4:d4:16:3c:ce:a0:d2:0d:b4:cf:74:92:7d:f9:c7:
82:70:30:06:4d:44:8c:99:dd:ce:92:e1:2e:f5:44:d4:1c:11:
97:6b:c6:36:93:e6:7a:5f:15:24:4f:a1:12:1e:d0:79:7d:09:
36:a2:f6:57:9a:72:1d:ae:2a:02:53:36:a5:da:d3:e0:7a:a2:
25:4d:28:03:8f:20:96:65:bd:63:a0:24:32:42:2d:36:a8:e9:
45:0d:f6:1a:20:94:31:43:3f:e0:18:6d:65:b5:7e:86:2c:0e:
fe:e5:6f:88:4b:55:28:b3:f0:d5:90:4d:0d:d8:01:9f:e5:6b:
61:cb:00:7b:dc:23:78:23:e9:2f:d4:72:db:4d:64:d7:af:f2:
27:1e:45:9c:a1:75:78:e1:1a:55:3c:a5:ad:20:9f:f3:d1:19:
ac:ef:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:27 2026 by rpki-client