
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: KQHJ4/poNp0PTu4JFqT56EPBthcbZqfnFpvyC4S6v1U=
Subject key identifier: 24:28:2E:13:4F:4B:C8:9E:47:CF:C4:90:8D:85:05:C2:24:B3:2D:C0
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 0223
Signing time: Sat 13 Jun 2026 02:47:25 +0000
Manifest this update: Sat 13 Jun 2026 02:47:24 +0000
Manifest next update: Sat 20 Jun 2026 02:47:24 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: zi1uoTXUSv9D41muiBt0JfpVOvyh3PfXP9ojfQqLyBY=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Jun 13 02:47:24 2026 GMT
Not After : Jun 20 02:47:24 2026 GMT
Subject: CN=6a2cc4bd-6ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:90:9d:ec:22:f5:cf:f7:b9:bc:fe:03:d8:
f1:23:c8:d9:16:32:71:46:75:e1:41:59:4b:a7:5a:
3f:7b:4f:dc:64:6d:9a:ae:93:67:f0:ef:d4:5f:0f:
43:c5:79:86:66:50:09:ea:00:23:d3:8e:35:6d:3e:
e9:f0:4c:4c:7d:d3:57:36:4c:56:96:b9:8a:b6:fb:
20:8d:b2:cb:74:01:40:f0:e9:fb:3e:e3:c4:5c:63:
e5:f2:e2:76:3f:c1:62:72:43:6d:b8:53:75:c6:98:
0d:f8:57:96:b5:f5:29:83:5f:69:cf:f2:37:59:47:
cd:57:6d:f8:05:ef:f6:71:9d:a8:8c:f6:15:c9:c5:
10:f4:42:60:95:49:91:03:10:8a:7b:f1:1b:10:19:
f4:47:fa:35:75:13:a9:90:a0:8a:61:32:57:1a:d4:
76:cf:8e:df:18:c5:e0:ec:ce:e1:09:25:d2:e9:45:
03:fc:3e:86:03:e5:97:fc:d0:6e:b9:2f:f4:1d:38:
d1:dd:ee:86:77:d1:bb:98:32:86:c8:f6:a0:b1:58:
f7:bf:c5:47:6f:51:52:08:97:2e:38:53:e8:e0:88:
71:c9:6d:a8:b7:2d:82:8c:4e:6c:31:f9:aa:28:43:
21:a7:87:d1:ca:fb:a2:14:5a:a0:79:67:b2:4f:10:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:2E:13:4F:4B:C8:9E:47:CF:C4:90:8D:85:05:C2:24:B3:2D:C0
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:78:7d:2e:a8:bb:7f:cc:f3:e8:c1:ec:ae:96:85:a4:b5:e2:
6e:d2:d1:18:40:ab:36:e2:60:13:b3:45:b3:80:20:14:cf:70:
e8:c1:e8:14:fb:4e:19:41:ae:c6:30:68:00:9a:5f:3b:ea:dd:
94:cc:8f:cc:1b:fd:63:5c:f3:68:79:05:3e:0c:20:ba:e5:4e:
e6:f9:a6:38:ab:62:6e:f5:9e:80:2f:39:fc:a0:9a:44:6b:bf:
0e:54:b7:2e:a5:0c:58:5b:16:c7:c6:71:70:38:db:01:47:a4:
05:97:a2:a7:b0:ab:63:ab:bf:d0:57:c9:18:23:ba:40:e5:f7:
cd:f6:f7:a4:2b:a6:c6:79:99:32:01:2b:77:5a:2f:da:be:20:
67:93:26:b8:8f:e1:86:68:f5:28:9c:37:db:d6:f6:ab:11:00:
a0:12:3e:b6:bd:b9:bd:9b:28:5b:e1:43:1a:2c:ee:e1:ec:45:
7a:05:27:fe:30:31:7f:74:95:a0:90:c3:d8:31:0e:76:de:49:
ab:ad:1a:b8:44:43:2b:e0:1e:d3:29:5c:14:09:c8:ce:89:8c:
13:50:d7:2b:82:96:89:6e:82:97:a2:b3:bf:9e:1f:97:48:77:
5d:09:62:60:3b:57:c9:9c:1b:52:d5:a7:8f:c9:d3:71:e3:82:
56:2b:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:24 2026 by rpki-client