
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier: OVxFg332zQ+FoyGdG7WbvGWL8ySPCpkUE7CZRkfl7II=
Subject key identifier: CB:A0:E3:1A:09:24:81:14:01:A1:86:E9:56:A1:AA:EE:ED:2C:29:D9
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number: 0230
Signing time: Sat 13 Jun 2026 02:40:09 +0000
Manifest this update: Sat 13 Jun 2026 02:40:09 +0000
Manifest next update: Sat 20 Jun 2026 02:40:09 +0000
Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: h2kL7zYOnrpEqLOC0aiwMFGuxyENxRPckue5dcO4dzY=)
2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: ZLFetUISCazTri6FrtDTduL4atfJrtp2vrG15M5wXe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Validity
Not Before: Jun 13 02:40:09 2026 GMT
Not After : Jun 20 02:40:09 2026 GMT
Subject: CN=6a2cc309-fc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:cb:86:05:0c:27:db:4f:8c:ed:58:26:d2:
44:a8:1b:72:f5:57:9a:c1:50:e1:65:83:24:ca:0a:
90:0c:ba:ea:79:18:40:50:58:af:c8:3e:5b:50:a7:
e7:cd:62:07:ba:97:2c:77:4a:f9:ac:e3:63:82:fc:
06:51:4a:25:e5:53:27:b5:2b:e9:42:28:9b:a3:69:
28:30:2b:d5:8d:cf:6b:b6:2d:a7:47:5d:0d:e1:06:
31:72:c0:fd:7b:1e:e5:49:06:d9:ee:c7:b4:fb:c2:
14:d4:e5:16:eb:30:c1:8d:b5:87:06:c3:de:86:01:
d4:a6:cd:5c:37:dd:0c:04:71:12:91:62:68:b8:8a:
83:8c:e4:80:03:fa:17:63:f9:af:d4:97:d7:be:a0:
b3:57:ca:b3:17:34:7c:e3:20:10:1c:4c:8e:f7:2a:
55:91:a6:1d:70:98:98:a0:fc:b0:bc:fb:ee:fe:56:
0d:e3:b6:8f:61:0c:30:b2:ea:47:f7:d7:f4:69:06:
86:d0:49:31:d6:b7:4e:14:99:c8:8f:09:76:20:52:
05:bf:f6:71:c1:fd:e7:32:95:5a:b7:08:7d:67:36:
36:e8:2e:cd:a5:4b:fc:35:e0:d4:78:0a:83:fe:5f:
08:9a:15:89:21:62:50:94:c0:f2:2f:c1:39:95:ed:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:E3:1A:09:24:81:14:01:A1:86:E9:56:A1:AA:EE:ED:2C:29:D9
X509v3 Authority Key Identifier:
keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:f6:49:26:85:a1:17:03:be:96:1c:cb:cc:08:21:9d:e6:
a6:cd:d9:82:dd:7c:a7:0b:b9:d5:cd:2a:bd:7d:7a:2e:af:59:
4a:86:b1:57:e1:95:fd:a7:56:b0:5d:ad:92:33:48:02:90:ae:
cb:bd:94:45:49:25:d6:84:f0:c0:41:f6:47:ca:c7:c7:0a:2c:
bb:a4:f0:65:bc:27:43:c2:1a:6a:bf:f0:f0:ac:3b:2b:9d:af:
47:2c:06:d7:c2:26:10:41:b2:ed:41:b6:a2:9b:37:b9:9a:a9:
ef:a2:08:94:3a:6b:7a:98:43:a4:0b:e3:58:84:b0:6c:01:76:
4b:0a:b1:b0:69:16:96:0e:a0:94:43:38:16:f5:45:7d:84:16:
58:02:34:be:2c:7f:84:41:8f:93:29:c9:64:c5:0f:e3:b0:62:
15:38:50:97:bc:24:24:06:a9:4d:98:20:fa:99:33:c3:76:96:
18:79:9e:3b:d9:63:55:73:25:5e:06:55:a3:87:48:7d:73:69:
54:c9:74:24:e6:21:97:9b:0b:20:c0:a7:0d:32:c3:da:c9:32:
e9:5a:58:47:75:0a:e5:29:99:06:75:59:68:38:f8:55:39:c3:
84:0d:02:d1:1d:4d:0a:d0:96:95:49:6e:f9:d1:89:ac:0e:97:
c0:6c:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:45 2026 by rpki-client