
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier: qi8UBgPgysBPFWpC6c1iISIqRtL8DZEQD+BYaYpe4eA=
Subject key identifier: 7A:8B:44:21:7A:5D:66:CF:C9:25:F8:26:51:11:07:CE:DB:3A:D9:38
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number: DD
Signing time: Sat 13 Jun 2026 06:44:01 +0000
Manifest this update: Sat 13 Jun 2026 06:44:00 +0000
Manifest next update: Sat 20 Jun 2026 06:44:00 +0000
Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: ijTwShHde/VasWTPXCibFTzPJwqXqfimA4ihbC5UgO8=)
2: 136834E05FA411F189336C2D6447A888.roa (hash: jaSZMPt/7qEgI70+BaRDVpbnOmgZ4JyLB8v5C8xqApk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Validity
Not Before: Jun 13 06:44:00 2026 GMT
Not After : Jun 20 06:44:00 2026 GMT
Subject: CN=6a2cfc31-3f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:1b:28:b9:91:c6:10:fb:96:44:22:de:cc:
83:7a:5e:ff:a3:ae:c3:87:c3:3b:8a:b5:f5:2c:3e:
4b:f9:ef:6c:bc:de:ed:68:6e:83:73:e3:14:a3:21:
da:a3:e2:24:42:21:f1:e0:a2:6b:03:89:79:28:df:
75:58:21:73:42:4b:7a:a9:1c:4a:e2:c5:48:e2:f6:
e1:4c:67:51:ff:1b:f9:e7:08:fd:bd:e3:c5:8e:92:
72:26:6e:08:2a:79:d0:43:3a:6f:05:dc:67:f8:b1:
7e:17:c2:5e:ac:7b:97:8d:d1:07:97:cc:77:92:46:
f7:05:56:b1:1c:66:fb:14:41:da:b1:23:d1:56:06:
c3:67:71:3c:dc:f3:24:c3:d4:20:1c:b0:42:7a:af:
b6:94:c9:c1:38:d1:a6:eb:bb:5d:a8:3c:20:f2:1f:
f4:cb:74:7b:a6:38:3e:99:5d:0f:e1:d5:43:15:57:
fc:12:d4:f8:c7:4d:82:c2:6d:aa:d4:fd:7e:ae:19:
b5:24:bf:5a:6b:50:e1:ba:2c:54:e2:c8:80:ed:21:
37:4e:4a:83:94:3f:bf:86:2d:11:83:8e:40:f8:ef:
9f:3d:ec:9a:f4:1c:8d:2b:62:0a:26:35:61:e1:58:
2e:2e:53:5c:0a:c9:3c:3c:33:f7:c3:ed:67:38:20:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:44:21:7A:5D:66:CF:C9:25:F8:26:51:11:07:CE:DB:3A:D9:38
X509v3 Authority Key Identifier:
keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:55:eb:f5:c7:4d:2d:c5:43:5d:19:4a:9a:c7:ec:46:e6:
49:97:3c:2d:4a:f2:21:f6:ce:1d:e8:dc:eb:5f:57:94:0f:bb:
2c:ed:7a:86:0a:56:34:ef:72:55:19:f5:08:55:5b:dd:67:cd:
22:54:bf:6e:4e:56:15:2a:0d:0d:14:e6:6a:4a:b6:6b:cd:8d:
0c:24:68:e4:10:49:a2:c9:b2:35:8e:48:35:cb:ea:6a:4f:fb:
ba:24:c4:69:92:60:f2:b3:41:b7:88:84:45:74:67:95:95:5c:
1a:48:fc:3c:8b:ff:e0:50:b8:a5:5e:fd:96:ad:df:44:2e:98:
44:e0:cc:6f:3d:d2:3e:79:85:4e:f3:d8:42:34:db:c2:d4:36:
1f:7c:f2:47:30:30:a8:40:64:37:41:0d:04:43:ac:ff:82:e8:
8b:7a:c0:89:96:ee:27:66:bc:7a:12:d8:5d:a1:21:76:9f:00:
f1:bc:fc:ae:6f:f3:67:19:0d:63:df:da:7e:12:91:b7:50:26:
93:7c:5a:6e:45:9c:eb:78:d6:58:d9:0e:2d:2e:e2:96:29:f9:
3d:28:60:59:58:77:e3:fb:07:46:02:09:6e:b0:72:6c:56:4a:
c9:bc:9a:03:3b:59:96:c7:1b:65:51:dd:47:d0:1f:ca:40:ff:
8c:43:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:17 2026 by rpki-client