
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: vKn3TQfTU6ffxmhQAnv09sPSF+2bq/2E56KZRrY9/Nc=
Subject key identifier: D7:2D:0A:61:23:90:AF:C2:45:21:13:A8:4A:55:26:CC:6F:F9:7E:16
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 0296
Signing time: Sat 13 Jun 2026 01:40:51 +0000
Manifest this update: Sat 13 Jun 2026 01:40:50 +0000
Manifest next update: Sat 20 Jun 2026 01:40:50 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: QH3NLAS7+RcKmx1MmEoG9jAppovbZUuydEU0/m/vJiE=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: Jun 13 01:40:50 2026 GMT
Not After : Jun 20 01:40:50 2026 GMT
Subject: CN=6a2cb523-5431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:79:10:82:74:88:98:b1:84:a6:08:2c:2f:
f9:a6:d0:bb:9a:ee:8f:92:ae:2f:ee:23:5e:88:a2:
9d:b0:4a:a6:ac:67:b0:50:ee:89:fc:52:82:14:c6:
99:7f:db:68:2c:94:88:41:13:76:30:6a:26:49:83:
f6:f7:ac:1d:9d:ef:3c:a0:34:c8:aa:96:cb:f6:55:
08:84:17:d5:28:45:3b:7e:90:e0:cc:52:96:9b:89:
22:09:41:af:83:9c:09:35:95:74:06:79:42:e4:af:
18:2c:d2:fc:96:93:e1:ed:a7:78:62:80:93:6a:6c:
30:fe:f4:04:ed:f2:89:bd:4c:a3:61:8d:0c:f2:11:
a0:1d:2e:1c:54:a1:78:19:75:1a:03:82:26:f7:40:
41:91:c0:a4:b3:e0:a2:c7:4a:91:5c:54:52:8a:76:
59:6f:5e:76:ee:3a:a4:af:bf:df:d3:8c:56:65:d3:
95:af:29:4d:2f:25:07:2e:b2:9d:98:15:41:0f:5c:
eb:f3:35:c5:ee:cb:2c:58:33:04:7b:7c:ec:1a:0a:
77:fa:d1:a9:89:ff:36:4f:f3:72:27:fc:01:78:71:
8a:9e:7d:86:d1:f1:eb:94:18:fb:4e:ea:3c:8e:07:
5a:38:95:22:ea:b5:c8:18:6d:2d:bc:0a:70:82:6e:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:0A:61:23:90:AF:C2:45:21:13:A8:4A:55:26:CC:6F:F9:7E:16
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bd:d3:d8:00:9f:e9:17:0e:36:93:9d:db:c2:00:45:27:ab:
36:2a:ea:3e:c3:98:f3:9e:61:f3:c4:33:e0:75:d9:74:12:17:
f0:ff:0b:9c:9c:b0:c2:75:74:69:1b:91:cc:27:a9:cf:13:8b:
36:86:17:94:44:9a:ea:9e:fb:79:6f:a4:96:03:dc:d9:5a:bb:
07:01:03:dd:4f:dd:36:34:22:e8:5d:e4:2f:34:e8:4f:92:7c:
8e:5f:a5:d7:78:a2:b9:ae:68:55:6a:d4:ad:ff:a1:43:9b:8c:
b8:85:61:b1:e6:1e:00:8a:75:a3:f0:14:50:b8:86:0b:b6:8b:
eb:14:0f:e7:ee:32:28:ee:a9:e0:54:10:a4:49:82:0c:7a:3c:
27:cf:5f:f7:84:ee:25:f6:dc:62:b8:a3:41:f0:62:1d:bf:fe:
c7:4b:47:5b:cc:8e:4d:9f:a6:49:f4:15:9f:54:39:7e:74:38:
3b:5c:cc:3e:4a:79:3d:99:eb:8e:46:49:a6:9c:ed:da:0f:a2:
81:06:55:06:d4:48:5e:79:c9:87:64:94:30:cf:1c:51:99:49:
dd:42:86:83:4e:13:6b:90:c6:80:d0:dc:4e:ca:7e:08:15:44:
4c:41:d4:8a:f4:2a:20:98:33:e7:14:67:7d:03:2b:ea:5f:89:
bc:43:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:13 2026 by rpki-client