
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier: wDAtQ81i8k4LDASuXyEvug8TgxnufzSzgQXzYJwoigc=
Subject key identifier: 14:18:25:F8:AF:9F:2A:8B:AA:07:D8:35:49:52:E5:FF:84:A9:0A:0B
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number: 01BF
Signing time: Sat 13 Jun 2026 03:54:00 +0000
Manifest this update: Sat 13 Jun 2026 03:53:59 +0000
Manifest next update: Sat 20 Jun 2026 03:53:59 +0000
Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: RMQywOd5iZEzgIfciYhFT7Cv6jgBQ5vKcUZ6sPD7h90=)
2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Validity
Not Before: Jun 13 03:53:59 2026 GMT
Not After : Jun 20 03:53:59 2026 GMT
Subject: CN=6a2cd457-151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:76:d7:1a:8b:b2:84:ea:f9:06:51:51:e6:
ad:4d:12:03:34:ee:6e:97:09:16:b7:14:a2:72:62:
d2:d5:49:b9:8f:40:d6:22:22:9f:10:d0:54:70:7e:
f7:15:68:b6:e9:c1:15:23:a8:32:5c:e1:ba:47:66:
22:d9:d5:57:7c:35:81:9e:1d:f2:8c:48:6e:ec:2c:
48:cc:5e:ca:c0:1a:11:75:26:5f:e2:c3:1e:72:59:
eb:29:01:81:b3:f5:bf:7c:73:0c:36:0c:23:6a:a2:
e5:c2:b9:35:66:ce:5b:1d:80:20:f5:99:28:e3:d9:
39:db:f6:db:76:fd:5c:6e:d5:b9:8a:a6:f8:5f:f7:
b3:ec:88:dc:22:55:e7:fb:76:c0:0e:79:0a:7c:ec:
55:01:d2:71:52:c8:33:9f:fc:e5:65:d7:39:02:ff:
2e:33:a8:c4:2d:32:00:2a:c3:db:0b:ed:3a:3d:f3:
42:76:fd:2e:b3:bf:3d:ba:18:31:d6:62:d7:b4:2a:
fa:fc:92:50:a8:ce:76:56:46:3c:6a:8b:96:73:20:
06:3b:48:bb:7f:9b:84:eb:05:4b:43:51:f9:66:98:
0e:33:80:d7:64:89:45:99:77:3d:00:e9:3e:a1:10:
9e:0d:67:e0:6d:55:33:17:d5:ae:69:ff:71:5a:11:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:25:F8:AF:9F:2A:8B:AA:07:D8:35:49:52:E5:FF:84:A9:0A:0B
X509v3 Authority Key Identifier:
keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:ae:88:5b:ed:c2:0b:2c:a0:39:d7:1d:88:5f:fc:2f:ac:
aa:ae:68:70:06:6f:f8:a1:97:0a:c4:56:15:0f:f5:1f:e8:58:
22:a6:49:5b:e8:68:30:9b:b1:05:d8:a7:7c:88:bc:7e:fd:cd:
0c:73:2b:e2:33:3f:69:1a:8a:2f:10:f0:a2:31:62:29:c2:dd:
d3:c7:74:c7:b5:93:0e:6e:4e:fa:31:3d:23:04:c2:65:aa:97:
d1:0b:b2:8e:01:ae:7f:13:02:76:89:2c:3f:db:cd:db:5e:a5:
f4:0d:8d:16:af:21:f7:d3:77:fb:b0:19:84:c7:ae:c9:4d:ba:
02:63:06:68:83:05:08:52:ae:6c:94:ef:5c:9a:73:86:8e:c1:
ca:c8:52:99:de:98:56:ed:7d:e8:8a:d4:66:60:9c:f1:a5:2b:
d7:7d:89:89:e8:7d:a7:3e:66:54:7a:e8:37:af:1d:3f:68:54:
40:a8:45:ac:01:85:5c:4a:ce:45:04:bf:68:eb:b4:2e:43:87:
72:30:f7:27:47:f6:7f:fc:68:8f:5f:b2:c6:29:23:07:fa:cb:
c9:fe:f1:fc:c9:e3:20:31:b7:f9:f0:9c:92:c6:9d:3d:40:b2:
ab:87:e9:fe:0d:77:f3:b3:1d:43:e6:39:69:0c:1c:82:6d:f5:
33:19:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:35 2026 by rpki-client