
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: u8zvIGVT9Qwv6hZBL0Ov8SpK0QdVRbYuyJ3vIixJulE=
Subject key identifier: AF:88:2F:63:E3:88:93:7A:AC:83:2D:28:74:10:2C:5D:52:93:0F:46
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1DCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D7A
Signing time: Fri 12 Jun 2026 16:05:31 +0000
Manifest this update: Fri 12 Jun 2026 16:05:31 +0000
Manifest next update: Fri 19 Jun 2026 16:05:31 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: Z4jMWd6SGZxAQ9J5rUwbOEgugf0DTV0mji7swH6tuJM=)
2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
3: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
4: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7626 (0x1dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Jun 12 16:05:31 2026 GMT
Not After : Jun 19 16:05:31 2026 GMT
Subject: CN=6a2c2e4b-1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:3b:53:a7:57:fd:3f:9e:7d:f2:49:c9:66:
de:a9:dc:ba:69:b4:b6:c6:b0:95:93:83:13:92:62:
64:f3:3a:e7:94:cc:e2:c8:b0:b7:c3:70:8c:96:a0:
13:f0:e3:b9:12:1f:61:28:c4:47:51:36:59:e8:9c:
74:a9:68:8b:14:57:fd:be:35:d8:57:88:e8:0d:79:
ec:09:02:db:97:d8:2e:e3:0f:c6:83:83:8c:ae:ce:
1e:99:c4:96:a6:a7:e5:a6:40:dd:8f:59:b3:b9:05:
e5:1e:8b:41:84:d4:93:f4:5d:54:f4:fe:c7:93:1f:
9b:e4:43:f1:18:bd:1e:93:a7:aa:4e:1b:7c:33:e8:
d6:80:87:87:7f:03:4b:dc:46:99:13:49:92:90:76:
99:b8:ab:dd:b6:32:d9:e1:c8:60:aa:47:c3:a7:16:
65:77:b6:ec:76:a0:f9:6d:75:ae:7f:f5:5f:16:37:
ee:36:20:fc:86:e8:b2:e4:14:c3:b9:ea:67:fd:de:
99:43:9b:5c:ac:85:a9:bb:da:1c:ad:72:ca:53:80:
bd:4f:66:97:ba:eb:2a:7d:98:a7:ac:f9:b8:3c:1f:
a1:82:4b:26:3c:bb:a5:5b:52:79:8a:47:56:28:28:
0f:f3:75:92:85:aa:44:4d:de:ff:fb:22:ba:15:1d:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:2F:63:E3:88:93:7A:AC:83:2D:28:74:10:2C:5D:52:93:0F:46
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:47:8f:f5:bc:9f:56:bb:04:61:e3:58:1c:ce:87:53:0f:
4f:57:04:39:ac:fa:32:c0:56:a6:c0:ca:61:5f:8a:5e:07:0b:
88:28:31:97:fd:c5:59:00:76:6f:e6:70:19:fa:9c:18:31:4f:
c1:59:ad:7c:de:66:d4:8e:2b:10:23:b5:fd:92:bf:0d:6b:4a:
13:9a:89:cb:27:dd:2e:66:cf:c1:f0:8b:c8:e7:4f:b3:5f:70:
a4:16:86:5b:52:28:24:50:80:0b:8e:45:9e:24:10:8b:1d:b7:
f7:b3:0d:01:aa:76:d2:d9:66:70:f4:9e:e2:e5:d9:db:e5:05:
8b:a7:27:ce:af:ef:14:d3:7a:0b:97:24:c7:7c:03:96:d8:72:
4b:21:d6:08:47:2f:d4:6c:98:d7:53:e2:c8:51:5c:0e:0d:50:
eb:b6:2a:0b:71:bf:f2:c3:9c:a9:1b:e0:64:8d:d1:37:31:19:
92:e2:e8:ff:63:97:5f:35:58:65:b8:77:71:af:a7:19:7d:2e:
99:d6:d2:e2:b6:ff:f5:1d:e5:1c:9a:e9:4b:60:f6:11:e5:3f:
83:70:01:0f:a8:9e:0c:eb:a6:0b:dc:8f:5b:63:1a:a6:1d:6a:
8e:1a:58:91:72:86:3e:b4:d5:e5:25:3a:ee:2b:77:b6:15:b4:
c5:a6:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:09 2026 by rpki-client