
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: y09/CvlUasWAKNqN0wgVUOE4TcJcffzTJoILit6gJZo=
Subject key identifier: BF:69:2C:C4:76:85:0E:98:2F:7E:D2:BB:B2:42:D3:28:00:66:73:4F
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 0231
Signing time: Sat 13 Jun 2026 02:38:10 +0000
Manifest this update: Sat 13 Jun 2026 02:38:09 +0000
Manifest next update: Sat 20 Jun 2026 02:38:09 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: ZCnakO3u/RMq1HYSW1p1lRxLRQnmbSo9pRuSPHLbnlY=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /W0g7wRAuyXEotKxsKGa14VaFaP0rEyXWp6ttAdlMsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Jun 13 02:38:09 2026 GMT
Not After : Jun 20 02:38:09 2026 GMT
Subject: CN=6a2cc292-1f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f5:89:3d:dd:04:7f:8f:6a:45:b8:9b:94:42:
21:34:36:ed:2e:8c:f1:73:60:a8:a8:e9:1b:5c:29:
f2:76:57:82:f7:be:d6:b8:6a:d7:2f:55:d8:10:22:
23:e9:fc:8a:cb:b0:cd:98:b9:34:10:a2:ce:cf:ab:
7e:7f:28:98:c2:79:92:b4:73:4c:9a:c6:a3:8d:f6:
0e:d7:2c:46:f2:f2:f2:6f:bd:7c:24:fa:80:bf:95:
fd:5f:95:fb:69:96:25:a0:81:f1:fb:f7:88:00:79:
f4:28:71:a1:8a:0f:18:dd:a8:5b:c6:9d:bc:13:40:
11:80:07:ef:14:af:87:36:d9:d4:e4:70:09:94:67:
df:55:b1:a1:b1:bb:14:dd:c9:31:98:b9:d7:44:b3:
df:f8:0a:ba:bb:04:cf:b2:bf:f5:91:dd:5c:05:de:
bc:c2:a4:42:bc:50:e9:b9:2c:0d:64:32:0e:61:8d:
9d:32:b7:ac:b0:44:cc:7f:6e:e5:8c:68:71:39:fe:
bb:56:dd:67:4e:17:99:9b:7c:9f:72:04:13:71:01:
8f:80:6c:b7:31:cd:14:55:5f:7d:ed:2e:61:64:16:
2e:42:37:68:8b:44:8e:43:7c:28:c7:f8:76:a3:7f:
6a:d7:0d:6a:c0:eb:4e:eb:98:fe:2d:8c:5f:77:a1:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:2C:C4:76:85:0E:98:2F:7E:D2:BB:B2:42:D3:28:00:66:73:4F
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:b3:b6:a0:58:c0:cf:8f:1e:ef:6a:68:76:cb:50:e4:b8:
96:f1:58:d3:30:f6:f9:f8:fd:cc:21:1f:7d:1c:c1:99:ad:3c:
30:e4:04:3f:11:3a:3a:e4:de:41:7a:73:c0:ba:ef:04:22:8f:
b7:f4:82:a9:42:63:2b:47:fe:22:de:5c:22:07:38:2b:15:74:
24:7f:62:05:12:a3:22:6a:5f:5e:44:4e:c7:4f:74:8f:79:31:
50:d1:54:b3:7f:63:af:d5:0f:d8:f7:a6:7f:eb:34:62:52:4c:
e7:f2:4d:06:1f:29:3b:55:0e:46:f3:3e:0d:5f:76:87:44:31:
f0:42:06:6a:c3:2e:bd:0f:72:d3:7b:11:27:a2:9f:7d:2d:6b:
07:80:ac:35:67:f3:c2:29:1a:7b:1e:fa:3e:53:7e:73:22:2e:
85:ec:3b:a8:cb:0c:f2:b6:8c:59:9f:e8:70:f7:c4:1f:5f:91:
ea:1d:9d:70:f7:c0:51:7f:98:50:65:43:e8:b3:ec:b8:e1:02:
3c:1e:44:f2:1c:1b:ed:f4:3b:b2:81:97:5f:e9:3d:63:0f:bc:
ef:f2:05:44:84:27:64:04:e8:94:46:cd:04:88:9d:6d:61:a9:
ca:47:8e:8b:e1:56:cf:2c:45:92:9e:dc:bd:96:f2:fb:b6:2a:
48:2d:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:54 2026 by rpki-client