
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File: _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier: kym7n6CfI/eQbbluJlLn9kX3v4EZZFWL99e8yGzOH8U=
Subject key identifier: 81:76:85:A3:35:C3:56:38:EE:29:C5:B9:A8:C7:22:81:B2:1F:64:D8
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer: /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number: 025C
Signing time: Sat 13 Jun 2026 02:51:22 +0000
Manifest this update: Sat 13 Jun 2026 02:51:21 +0000
Manifest next update: Sat 20 Jun 2026 02:51:21 +0000
Files and hashes: 1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: Cip8Cl7b4/EoDuYk9hhfmLDeqQ0XbLwD6lBH7VoEwgE=)
2: 2BB01CE0276711F1A27699BFC0833773.roa (hash: Oxy2vKZrTf1XlrdBowSVsy5MCvRUGaCeQ6J4bpGvONc=)
3: C724415E35F911EE9F140449C4F9AE02.roa (hash: 1QPFfKPtxnZyzoIhQPujaiv9QOfwMAK/nR5JlwDQYrw=)
4: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: h9+rV5KTh8hiz/Mh+8LSh/6EazAt2Pe7IWwQzS6Asp8=)
5: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: 2/oEhNKw4A8hCV5h32sgGlhduxEgDsT8LW5cn4d4U6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Validity
Not Before: Jun 13 02:51:21 2026 GMT
Not After : Jun 20 02:51:21 2026 GMT
Subject: CN=6a2cc5aa-b90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:3b:ad:00:88:c5:75:23:ea:7d:73:7d:e7:
e9:ff:7e:cf:47:1b:e9:8c:33:0f:f0:10:e2:d0:86:
b5:a9:ba:6c:fc:c2:fc:4c:c8:45:13:37:e2:7f:50:
17:38:fc:27:5e:d7:4b:0a:b3:a5:4e:a1:14:de:7d:
60:1e:e8:84:b0:c3:e2:cb:de:7d:7d:ac:d5:28:e6:
62:20:ea:14:87:42:fd:07:51:57:e5:16:53:05:83:
99:ea:df:c7:d0:3f:97:c4:91:6c:c1:26:8c:eb:42:
2b:6d:48:71:65:ac:1d:9f:dc:1d:12:d3:ca:45:13:
e9:92:47:e1:5c:d8:58:cd:30:63:6c:c3:9c:91:60:
13:9f:26:61:8f:2d:b8:a0:82:0b:8e:20:ee:63:7c:
62:2d:14:f8:3b:37:71:63:fe:78:bc:9a:06:b1:cb:
f3:da:13:5c:3b:ae:3d:f8:c6:35:df:0e:02:eb:03:
e4:9d:d6:73:f0:7e:78:76:42:47:6f:72:49:26:53:
29:7f:72:e6:3d:55:b1:78:4d:e1:92:b6:59:1c:6f:
49:87:9e:e0:81:e6:35:e1:34:4b:4b:92:af:23:b7:
f2:24:48:01:aa:22:ef:b2:f5:01:4e:f4:22:39:50:
6e:de:d0:aa:3c:f5:d4:31:93:52:d0:fd:6c:dc:d7:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:85:A3:35:C3:56:38:EE:29:C5:B9:A8:C7:22:81:B2:1F:64:D8
X509v3 Authority Key Identifier:
keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:82:f1:c0:dc:97:40:22:98:48:86:16:dd:74:52:e7:6a:
e5:07:89:2b:79:c1:ee:4e:40:fc:be:a7:83:5c:31:35:bb:5c:
84:58:b4:28:94:86:ae:2b:57:82:be:7b:b8:f8:80:0c:17:58:
8d:e3:4e:e2:b7:a0:2c:bb:82:8b:66:1d:b9:cd:f4:18:d1:b1:
b9:4c:1c:99:db:2d:3d:92:c4:7c:ea:e6:14:a4:27:cb:75:73:
eb:70:0c:4d:6a:6f:1d:cb:db:26:c7:df:dd:a0:38:17:6b:6b:
6c:e5:67:44:fa:55:b4:da:d5:95:3b:e6:23:7e:d5:1e:fb:62:
dc:f1:81:2c:74:e5:09:5e:49:57:3a:fb:30:79:de:e6:55:3a:
55:ff:b8:1a:6f:31:ab:51:49:b1:52:91:46:bd:c8:23:61:e7:
35:81:d2:fc:b8:42:b8:d4:ec:d0:59:30:2a:62:93:82:eb:db:
9a:87:46:94:ac:68:36:a3:7d:f5:33:22:10:87:6e:7b:10:4b:
c3:a6:4d:2d:5c:32:94:41:b7:53:d8:13:e1:56:69:56:40:31:
af:77:9c:63:76:f2:17:0e:d4:3b:af:5f:aa:a0:36:c4:63:69:
35:99:fd:52:05:0f:f5:d5:bb:d6:07:18:01:b3:fe:26:4e:75:
56:a8:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:37 2026 by rpki-client