
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: x0/ho0FPZq3UMiA0K+P+7iUE+QOsByqo+JA2wLq+8V0=
Subject key identifier: FA:1E:50:7B:40:79:50:21:68:64:BF:1C:ED:D4:D1:FD:9B:EE:32:C4
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0EC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0EAD
Signing time: Fri 12 Jun 2026 17:41:23 +0000
Manifest this update: Fri 12 Jun 2026 17:41:22 +0000
Manifest next update: Fri 19 Jun 2026 17:41:22 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: KRfQxOgBeHZ82WuWNAVrmddUEsqyTK8i/7x07H6i94w=)
2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: oPPYxBYmiiy4enhiiy5O2BkIuc1yyliJlPvf0DwR6C8=)
3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: 4waDGGKnkJeLLa4QkYuztqh/mv8xS12LSc+ievo5tLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: Jun 12 17:41:22 2026 GMT
Not After : Jun 19 17:41:22 2026 GMT
Subject: CN=6a2c44c2-d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:97:d3:9f:95:54:67:60:55:03:07:4e:fd:11:
17:24:9d:7a:9e:92:9a:a0:23:73:22:ad:7c:87:d5:
c5:89:90:a1:e8:80:7f:af:1d:79:cb:c8:a1:12:45:
5a:27:83:90:b2:f9:f7:37:15:20:bb:02:a0:28:30:
9f:4a:4e:16:f0:ee:e1:d4:bc:b6:29:16:66:c1:53:
50:79:a8:1e:87:f3:dd:75:d4:69:3f:95:7f:0e:5f:
70:77:3b:a2:d4:bf:21:a4:be:b3:ae:87:31:73:42:
37:b5:b1:05:d9:9c:2b:18:84:37:b9:24:81:a8:e7:
d6:af:8d:95:56:06:ee:f5:30:93:e6:2e:38:50:d3:
72:da:1e:b7:bf:66:95:15:ab:de:4a:4e:09:6e:e2:
66:24:2a:d7:cd:97:88:e6:9e:11:c3:f2:41:32:8b:
88:4e:e9:e9:b0:4c:53:2b:01:94:24:ed:48:e9:6d:
79:a7:4d:9e:5a:1e:9e:38:29:5a:4f:c6:bc:3d:ae:
a8:42:99:9e:16:f3:0d:30:75:82:3e:19:47:ca:bd:
71:29:84:1b:e6:f7:90:67:f8:46:55:f7:7b:ea:0b:
b7:7f:cf:52:0f:2a:57:51:2a:0d:92:1e:a9:83:95:
56:c8:9e:09:cc:1d:08:90:7f:21:62:21:72:44:e9:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:50:7B:40:79:50:21:68:64:BF:1C:ED:D4:D1:FD:9B:EE:32:C4
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:3e:c8:0d:02:84:00:9f:15:c2:57:cd:54:73:46:dd:59:
2d:06:73:15:82:64:2e:01:36:99:0d:75:5d:74:51:d7:5b:cb:
09:ee:dd:27:b0:58:bd:30:31:9e:48:9a:a9:c7:f7:8d:a8:84:
66:fb:ed:0a:4f:22:d3:01:da:73:f6:53:ca:d1:ff:32:7c:76:
2c:b2:43:56:e2:9c:55:cb:66:e6:5c:c1:41:21:1a:4d:69:02:
b0:56:b8:f2:ee:02:bd:f5:2b:fd:f4:3f:36:c5:65:5d:3f:03:
d8:9b:24:d5:5a:26:27:75:bc:6c:ab:03:f3:07:4a:e7:30:01:
3e:58:d9:fe:c8:d9:d2:9e:13:97:c6:01:88:a5:a4:7b:38:57:
38:b7:41:1c:35:37:50:d6:c5:95:09:ea:f4:02:78:4c:9f:e0:
f0:ab:27:96:2c:44:a4:b1:4c:fe:71:88:6e:df:64:76:0a:62:
08:ed:69:db:b4:b7:40:19:a9:ca:2c:63:3a:2c:8e:ca:cf:62:
86:de:de:b7:2d:4d:f4:02:9d:38:72:69:04:b7:2e:3f:88:9a:
a1:a4:b3:84:7a:a5:91:f6:3c:a0:3f:b9:e1:d4:82:6f:41:98:
cc:58:28:80:65:ea:d7:45:1e:e6:d8:07:8e:a0:f1:03:d8:ae:
5c:86:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:23 2026 by rpki-client