
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: DR5PUVQZe0DOJsrCgC/E8j0xZxIRKBYr70dVVJTbGgE=
Subject key identifier: 5F:D5:76:AF:65:92:96:DD:02:74:19:B4:E3:07:3A:53:D4:0B:97:44
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0512
Signing time: Fri 12 Jun 2026 23:43:19 +0000
Manifest this update: Fri 12 Jun 2026 23:43:18 +0000
Manifest next update: Fri 19 Jun 2026 23:43:18 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: HDPrekBmb2XbqfK7JN6BZqdrvD34EpJwTQKjT+vD0Rw=)
2: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
3: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jun 12 23:43:18 2026 GMT
Not After : Jun 19 23:43:18 2026 GMT
Subject: CN=6a2c9996-cc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:83:11:c8:86:85:ca:22:b1:49:8a:ee:11:
64:2f:dc:0d:de:a0:34:34:38:60:77:d1:71:b1:5e:
65:5c:58:aa:9c:ec:cf:04:ad:aa:d6:31:fd:18:7d:
6c:8d:82:9f:30:af:80:07:b3:df:4e:25:20:84:02:
4f:63:7f:53:3c:ca:e8:1e:d3:81:bd:6c:cc:7d:5c:
ec:d2:ff:af:7e:96:9f:41:dd:a1:6e:d1:34:dd:f2:
9f:c5:d2:61:33:a8:26:ef:95:0b:08:74:b7:98:9c:
df:43:b4:73:80:27:ef:2f:2f:72:20:d9:5a:66:78:
b4:b5:89:dd:4f:0c:0d:62:a7:a4:52:be:38:a8:2e:
c2:4c:5c:a0:f5:29:5c:78:e3:11:a6:60:83:b7:c5:
59:28:21:51:e2:4c:51:56:43:c8:de:fd:18:00:c4:
ff:62:13:93:7d:ea:1d:d3:04:87:91:e5:10:fa:30:
de:2c:0d:1c:1a:57:f5:14:f0:2f:a5:ac:b6:e9:ae:
0a:dd:a2:1a:12:41:e1:6d:b7:7f:28:97:6f:4f:f5:
23:6a:4d:8c:fc:6f:db:0c:d4:e2:6c:58:c0:10:09:
99:cd:2a:db:46:64:5a:2b:07:59:23:5c:28:f6:e5:
92:2b:18:29:8c:f9:cf:a7:c9:25:14:99:90:02:18:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:76:AF:65:92:96:DD:02:74:19:B4:E3:07:3A:53:D4:0B:97:44
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e1:ea:17:c6:66:c7:04:86:56:0c:14:0f:2d:5b:8f:09:10:
0c:72:4f:ba:49:1a:84:f4:de:75:3f:3e:16:e7:72:9d:e9:01:
1b:e1:f7:c7:4b:49:74:18:c3:e6:5a:ff:c7:0c:cb:81:4c:64:
c7:b6:20:b7:88:12:7e:c2:90:b3:93:79:cf:af:62:90:b7:36:
6f:24:dc:d3:fc:85:dd:d4:4f:23:41:7a:2d:e0:ca:b1:3a:ba:
a5:8a:2d:4f:12:aa:92:01:f2:ef:a7:a1:6d:44:d1:df:b7:0c:
ce:5b:4a:88:cd:a9:77:f9:a5:a5:8f:fd:3c:5b:06:01:f0:db:
e7:5d:67:5d:0b:1f:a5:11:96:02:cc:18:b5:c0:29:88:aa:a1:
08:ac:58:66:c0:94:92:fd:fc:81:38:e7:8a:cd:86:4e:ef:74:
0a:d9:bd:2e:bf:6b:16:d7:de:14:ee:ab:f5:00:2d:e0:a3:64:
07:78:96:74:76:b6:63:e8:93:23:a6:cd:cd:52:0c:9d:6d:c5:
3a:11:b1:1c:5b:fd:3d:de:d7:12:1b:d0:4a:37:62:d2:e0:ab:
d9:ad:fe:f7:c9:ec:d2:27:fd:0d:7b:7c:e6:f3:0b:82:02:df:
44:e2:f1:76:5d:69:bc:fb:b0:f0:75:6a:e8:10:0d:04:7e:08:
32:b7:5c:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0
OEUxQUZCNDkwHhcNMjYwNjEyMjM0MzE4WhcNMjYwNjE5MjM0MzE4WjAYMRYwFAYD
VQQDEw02YTJjOTk5Ni1jYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9ODEciGhcoisUmK7hFkL9wN3qA0NDhgd9FxsV5lXFiqnOzPBK2q1jH9GH1s
jYKfMK+AB7PfTiUghAJPY39TPMroHtOBvWzMfVzs0v+vfpafQd2hbtE03fKfxdJh
M6gm75ULCHS3mJzfQ7RzgCfvLy9yINlaZni0tYndTwwNYqekUr44qC7CTFyg9Slc
eOMRpmCDt8VZKCFR4kxRVkPI3v0YAMT/YhOTfeod0wSHkeUQ+jDeLA0cGlf1FPAv
pay26a4K3aIaEkHhbbd/KJdvT/Ujak2M/G/bDNTibFjAEAmZzSrbRmRaKwdZI1wo
9uWSKxgpjPnPp8klFJmQAhhjHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/Vdq9l
kpbdAnQZtOMHOlPUC5dEMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD
QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243
ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ+HqF8ZmxwSGVgwUDy1bjwkQDHJPukkahPTedT8+FudynekBG+H3x0tJdBjD
5lr/xwzLgUxkx7Ygt4gSfsKQs5N5z69ikLc2byTc0/yF3dRPI0F6LeDKsTq6pYot
TxKqkgHy76ehbUTR37cMzltKiM2pd/mlpY/9PFsGAfDb511nXQsfpRGWAswYtcAp
iKqhCKxYZsCUkv38gTjnis2GTu90Ctm9Lr9rFtfeFO6r9QAt4KNkB3iWdHa2Y+iT
I6bNzVIMnW3FOhGxHFv9Pd7XEhvQSjdi0uCr2a3+98ns0if9DXt85vMLggLfROLx
dl1pvPuw8HVq6BANBH4IMrdcMw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:28 2026 by rpki-client