
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json)
Hash identifier: hXb9R4QqNm8RsCZJ2k6+sr2fV/4KvtO0LxEysza41ZA=
Subject key identifier: 4A:A2:7D:26:D0:A2:FF:BF:C2:5F:78:81:B7:1C:81:59:D1:43:DC:67
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0D92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
Manifest number: 0D71
Signing time: Fri 12 Jun 2026 17:59:02 +0000
Manifest this update: Fri 12 Jun 2026 17:59:01 +0000
Manifest next update: Fri 19 Jun 2026 17:59:01 +0000
Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: a6XV+rF3ZICONtij6naOuvhNdRs40uUdXKS3eOWK+fw=)
2: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=)
3: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Validity
Not Before: Jun 12 17:59:01 2026 GMT
Not After : Jun 19 17:59:01 2026 GMT
Subject: CN=6a2c48e6-084e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:ba:7b:19:91:0a:87:27:ee:e9:db:24:e3:
b4:d2:e9:2e:e3:c8:33:f5:f1:0e:83:ee:23:aa:ae:
0e:be:31:1e:7b:b4:fa:3a:fd:ff:8b:bf:d1:f6:e0:
e0:ea:22:f3:fa:bd:5e:ae:8c:f4:d6:79:43:7a:7e:
62:da:b7:e6:6b:30:a0:94:5c:89:11:e5:c5:9f:c5:
2c:88:d9:b9:fc:20:6f:83:79:95:6f:7e:d7:bf:fa:
82:3e:64:76:ee:3f:9a:76:e3:25:10:f7:72:73:96:
57:2e:c1:d6:7e:dd:a7:21:7a:7c:63:bc:e1:24:0a:
18:85:19:50:d1:1a:fa:8c:91:86:a2:22:d0:59:8d:
66:27:b1:24:bc:e3:3d:c6:43:85:ec:f6:d4:f2:9f:
81:f4:1a:55:cb:d3:86:b8:44:ec:ea:75:e5:6b:dd:
d4:ef:be:f0:ee:73:33:c3:25:d6:14:f5:e7:6f:92:
58:04:ce:ff:6c:ee:90:8e:0d:e8:3a:f5:54:75:d6:
dd:16:e0:28:28:86:04:ad:61:8a:f5:af:9d:06:1d:
62:08:70:1e:86:09:8d:01:d2:74:9c:60:41:c0:dd:
db:f1:67:22:b3:ec:1d:b7:15:73:88:fa:e9:3f:be:
bc:ff:a6:5d:a9:2c:f1:cf:b6:6a:10:32:ae:a4:c5:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:7D:26:D0:A2:FF:BF:C2:5F:78:81:B7:1C:81:59:D1:43:DC:67
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:0c:fc:de:fc:be:62:92:cd:4f:d7:da:19:51:5a:2e:e4:
34:ab:a0:5f:4d:2a:ec:e4:5b:72:e8:74:5c:3a:fa:37:b2:8c:
83:84:dc:d5:dc:e5:80:07:fc:28:bc:7e:33:aa:d6:d1:33:ac:
11:4c:b9:c4:7e:d2:4e:c6:e6:1e:8c:2f:a7:9a:14:91:ff:c7:
d3:10:2b:c5:43:5c:8a:6f:a9:38:33:df:5f:a8:06:d2:af:ac:
51:5c:34:b9:99:a3:75:b4:6f:9f:01:1d:af:74:ba:cf:ba:9f:
fe:30:84:bf:66:4a:0a:43:43:48:a5:3d:ec:3a:58:08:e9:f1:
e0:24:33:b1:f1:3f:c5:4a:3e:ba:b0:8d:3f:f0:14:40:7b:bb:
a2:92:07:00:2d:13:26:b4:8a:01:73:4a:46:a9:d6:f0:e7:aa:
9f:fc:b0:5b:9f:eb:ea:a2:d3:61:74:52:34:96:fb:a5:d9:fa:
8c:2d:d3:da:a4:96:8a:80:e0:78:57:75:d2:76:ab:43:71:e7:
23:26:c3:97:e9:1a:0f:a1:99:80:1a:70:82:eb:a4:e4:e8:de:
99:79:78:42:66:87:f4:1f:54:6a:52:3a:f0:19:0c:d8:c0:ec:
b4:03:a7:8b:94:0d:36:13:c0:0b:aa:09:f8:2f:da:85:71:3f:
a6:66:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:14:09 2026 by rpki-client