
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier: 8HqSd5bYcX3lt5pO9WthrFSQlFzj8HsiGyU+mmddNsE=
Subject key identifier: 04:72:77:90:15:61:AE:0A:C8:A4:D4:D2:07:73:5B:89:9B:F2:5C:7A
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial: 05E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number: 05DA
Signing time: Fri 12 Jun 2026 23:04:55 +0000
Manifest this update: Fri 12 Jun 2026 23:04:54 +0000
Manifest next update: Fri 19 Jun 2026 23:04:54 +0000
Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: IRLXBMlkVBvyVF08tQpADKT00dSaEwizYYEXcTiUTIM=)
2: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
3: 0DA7E9A84E5E11F18A6201F7A4833773.roa (hash: RfB9xkFiIdCV5oVAdDDP61O6abiPBSL2qkBmqr65dgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510 (0x5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Validity
Not Before: Jun 12 23:04:54 2026 GMT
Not After : Jun 19 23:04:54 2026 GMT
Subject: CN=6a2c9097-c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:c7:a3:22:62:ea:41:14:53:5d:d9:e5:eb:
48:e0:eb:60:84:e5:36:9f:37:34:d9:fe:f3:cd:ce:
8a:11:f9:a3:38:85:51:6b:78:2f:c0:f6:9a:bc:cc:
1a:c5:93:be:63:c2:47:6b:34:c0:1e:00:5b:7d:b0:
be:06:51:cb:f8:e1:69:f1:b0:11:96:ce:86:25:e4:
a7:77:f2:ed:ef:a9:be:ef:7c:18:b8:b2:f9:12:e2:
5f:92:ef:6a:1e:e4:e2:65:5c:a3:6d:f5:af:ca:6a:
be:4c:78:b7:56:06:c5:98:c3:38:3a:ce:43:36:21:
96:41:d2:8d:f7:bd:cd:74:a8:52:0b:32:a3:69:a9:
2c:b9:1b:0b:87:b0:4f:c7:e7:eb:c9:9f:61:57:73:
95:85:4e:25:cb:6d:a3:24:79:cf:cf:29:0b:71:58:
2b:12:f5:36:d6:6e:4c:0d:e1:18:a0:a1:8c:1b:7a:
7e:6f:52:35:8c:16:b5:78:bb:5f:dd:20:37:d6:74:
95:4d:ad:0c:49:7f:0c:a4:6d:6a:36:b7:a1:f4:a2:
57:07:e7:de:bd:c2:09:84:9e:8b:00:5a:77:99:51:
3a:c4:ae:6f:3a:ed:a3:c3:6f:d3:7d:8d:f2:6c:67:
56:ca:99:13:d5:4f:db:99:22:62:06:0e:31:5e:13:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:77:90:15:61:AE:0A:C8:A4:D4:D2:07:73:5B:89:9B:F2:5C:7A
X509v3 Authority Key Identifier:
keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:92:35:52:bf:0c:37:c9:05:b0:04:40:e1:5b:46:d8:87:
64:cf:1b:49:a8:6f:86:e2:37:43:29:8a:78:6c:c7:fe:94:de:
dd:e5:08:b4:c3:af:27:5c:7f:88:4c:28:61:19:89:5c:3b:fe:
d6:0b:c1:b7:d9:d3:33:7d:a1:0e:c0:22:38:2b:45:75:e5:ff:
6c:58:e7:31:67:ef:1c:82:74:1a:ed:57:3d:2f:27:55:bb:5c:
47:18:25:db:28:4f:ea:d2:29:24:9d:dc:d0:98:f0:68:65:b0:
4d:ff:04:cf:c8:47:2c:7e:d6:06:4d:65:c5:b4:8a:d3:1b:57:
67:3f:b5:9b:da:ec:d2:29:12:db:4e:f1:10:e9:ff:71:e8:82:
9a:53:fd:28:c2:56:39:72:79:9b:b3:fa:cb:ff:ca:bf:11:16:
f5:76:51:1b:5f:59:88:51:74:02:21:95:4e:c0:ce:ec:dd:8a:
c3:48:71:27:cb:07:ab:fe:d3:99:23:d1:2e:bb:67:09:eb:d9:
0a:27:d2:e3:a6:e4:46:60:9c:fc:68:49:2b:ca:e7:85:7d:36:
85:86:18:5e:97:ff:d9:c8:6e:fe:84:6f:06:99:8d:7d:2b:df:
78:d7:e5:1b:c9:66:9a:36:c4:55:76:18:e9:85:57:4d:cd:4e:
77:59:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:41 2026 by rpki-client