
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json)
Hash identifier: RTdQqp/nVnZfdaIKyjNaMrtaBULNGZ7DK/0iA27UlrM=
Subject key identifier: 97:0B:8A:3A:0E:17:2D:6B:DE:17:2A:B1:43:CB:A4:2B:71:79:7E:2C
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial: 2E5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
Manifest number: 2E37
Signing time: Fri 12 Jun 2026 15:28:21 +0000
Manifest this update: Fri 12 Jun 2026 15:28:20 +0000
Manifest next update: Fri 19 Jun 2026 15:28:20 +0000
Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: pZnIfN2oFz5QLki0TrZ2X9ZBBNHPRAjFLdYYlp7CtVc=)
2: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: N17i/Vo6qq4GynkhbHnkWbsIC9qgwD2VSBbjxJt5D3I=)
3: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: /EIrPIM51/gSZuhZi7PXLaV6H0Mn6QzhbGDSyj34JEc=)
4: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11868 (0x2e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Validity
Not Before: Jun 12 15:28:20 2026 GMT
Not After : Jun 19 15:28:20 2026 GMT
Subject: CN=6a2c2595-3d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:65:91:15:54:10:8f:cf:29:c0:f7:6b:94:
c8:35:d1:b7:ec:fd:c7:37:86:b0:75:7c:2f:1c:53:
85:37:48:3f:a9:4b:d4:ba:cf:96:3a:6c:7b:ad:5c:
11:18:5f:24:30:96:fc:15:b7:ed:7b:b5:af:0d:b5:
de:0f:ab:06:2c:0f:b0:77:20:a6:5a:20:89:2b:43:
00:a7:3a:92:63:cb:19:37:ac:5a:91:62:27:3a:40:
d5:91:d6:be:59:f7:62:b8:ca:6a:96:02:01:a3:26:
bc:86:08:f8:97:57:63:33:74:c5:cc:3f:f5:2a:2f:
5c:18:fb:35:0a:4c:b5:79:31:73:86:35:aa:bb:60:
f6:af:38:0d:e0:b9:7f:59:05:d5:ff:21:41:91:31:
80:16:e1:e1:1e:e2:34:1b:23:05:00:99:47:8b:8b:
9d:35:ae:e6:18:c8:a2:2f:97:9d:6f:0b:ca:d2:de:
3b:54:cb:8e:7f:ca:b1:d2:11:a8:8b:3d:6e:13:15:
b2:95:db:3e:39:d4:a7:05:55:43:d4:45:d0:a4:8c:
d9:b1:1a:02:1b:a2:4f:1b:ed:78:a0:b2:c2:52:a0:
f3:36:c4:ab:e0:16:8b:dc:2d:c4:7a:66:18:a0:34:
20:6f:d6:59:1f:cf:26:55:ac:20:4e:6c:91:6a:a6:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:8A:3A:0E:17:2D:6B:DE:17:2A:B1:43:CB:A4:2B:71:79:7E:2C
X509v3 Authority Key Identifier:
keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9e:3c:5c:57:00:02:9d:a5:a5:b3:47:9c:4a:bd:17:e4:2b:
78:0b:43:90:1f:d9:64:90:31:e0:f4:f9:fc:50:2c:2d:91:4a:
ca:c7:bf:34:67:b9:b9:37:ab:07:44:65:c8:68:a3:cd:c7:4c:
6b:1c:bf:fb:2a:ed:42:ad:dc:52:e7:bd:9b:4e:d7:b6:a7:0c:
04:4c:bd:9f:4f:32:1f:79:e4:b6:b2:52:10:6e:9f:a0:da:a4:
aa:ab:e8:a6:e7:c3:f1:8b:27:56:1b:36:7d:c4:cd:14:fb:95:
71:10:fd:c1:e1:c9:5c:01:ab:8e:43:a1:76:07:c6:ba:c6:1d:
1f:7e:78:af:a6:57:15:2a:d3:ac:7b:54:0c:5f:35:b2:b7:05:
13:fe:82:99:7c:5a:07:b2:8b:7d:db:20:82:e4:53:0f:9e:70:
b8:30:2d:72:10:dd:82:35:eb:89:ad:d6:89:1f:6e:fa:d8:36:
3d:7b:be:8f:e9:b4:fc:4a:99:9a:f6:e1:76:de:3c:7d:9c:6e:
48:3a:64:9e:16:0a:7d:96:b0:22:70:2e:21:fd:a9:1a:68:bf:
a7:9c:5d:bb:3b:48:c2:d3:8c:5e:d2:d6:19:74:e7:ed:7f:24:
86:0d:36:38:ef:75:9a:d6:b1:e8:d1:4b:15:c7:b0:de:5c:8f:
41:9e:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:05 2026 by rpki-client