
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: 3kyb+ZAwa8sfIZDdAgeA4jBktkdo26Gxz3n9LCMBtbQ=
Subject key identifier: 75:1E:15:E6:8E:52:C3:C1:FE:D5:35:9D:FF:0F:A4:FB:AD:22:B2:DC
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0232
Signing time: Sat 13 Jun 2026 02:37:56 +0000
Manifest this update: Sat 13 Jun 2026 02:37:56 +0000
Manifest next update: Sat 20 Jun 2026 02:37:56 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: ARIDzhcoy+s3f2kCtrNXkARSw762Ha2FgUgFaqIq4rA=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Jun 13 02:37:56 2026 GMT
Not After : Jun 20 02:37:56 2026 GMT
Subject: CN=6a2cc284-cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:02:21:72:f7:94:53:a7:82:fc:11:9a:22:
8b:9e:ee:e8:23:76:58:8c:96:22:81:c5:c7:8e:c3:
ec:be:2b:79:64:9b:3c:e1:4c:6b:4c:b5:32:c0:50:
35:c2:11:07:3b:17:65:e0:2f:a9:1f:43:be:77:47:
68:fb:ef:cd:ad:81:65:4d:37:f9:ec:b9:f8:dd:8c:
95:6c:7b:f6:76:da:26:16:a7:88:62:c1:0f:46:02:
72:c9:55:e1:cc:9c:48:97:e6:73:9c:c7:b0:ee:cb:
e3:37:ed:9e:14:31:9a:f7:52:34:20:10:5a:b9:08:
fb:74:ac:62:35:93:59:6a:9d:c4:08:e0:c2:f9:6b:
bb:48:88:d6:96:4f:80:f5:53:f9:07:5d:c6:7f:72:
e8:0e:76:8c:40:19:4d:9a:90:91:44:6d:80:99:dd:
41:f5:66:4f:20:db:9e:ee:1f:78:11:d4:32:cc:1b:
b3:6a:fa:37:a6:2b:a9:af:7d:21:c7:e6:95:d2:5c:
34:4e:b4:6a:a3:87:91:ef:b1:51:e4:ff:a4:77:fb:
b2:21:1a:95:6c:24:c3:48:2b:69:6d:05:f0:db:14:
5a:8b:63:d0:44:04:39:ad:48:33:02:b0:1c:ec:ec:
a5:09:79:ae:aa:d3:36:93:91:65:46:8d:b9:fd:57:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:15:E6:8E:52:C3:C1:FE:D5:35:9D:FF:0F:A4:FB:AD:22:B2:DC
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:66:c3:4f:36:ef:fc:01:18:0d:6a:8e:bc:d9:c6:c0:a2:
71:a4:1d:d0:4e:f3:41:f5:85:fd:9e:de:84:d8:7a:fe:91:43:
fa:f7:76:59:f3:3d:07:1d:0e:e1:85:a2:5f:89:65:eb:18:bd:
f5:ff:f5:10:c8:d1:b0:13:a7:95:54:e4:5d:b7:45:45:5a:61:
a9:22:27:f3:a9:41:dd:c8:a2:e3:12:66:1f:5c:78:1d:0f:4a:
86:40:0d:4e:52:c0:fd:ac:09:e5:fd:04:74:2b:6b:f8:12:79:
c3:41:43:9d:0e:1d:fd:d6:cf:8d:60:82:9b:90:34:9b:97:d3:
28:31:87:66:b2:21:07:93:66:50:d1:92:a9:84:02:be:5d:60:
02:47:a8:35:8c:77:6b:d0:63:83:1f:83:54:4a:a9:01:0d:5a:
ea:c6:d1:3f:5f:e5:d4:4a:3f:67:da:a3:98:43:ae:e0:7d:46:
44:e9:12:ca:4f:3b:58:a6:74:96:d5:1c:03:40:1e:34:c5:a7:
98:e6:90:60:2c:eb:9b:c1:58:b6:4e:87:45:8d:4b:b3:67:bc:
4f:0b:12:02:3d:0f:da:29:d1:a8:6e:33:05:d8:f1:d0:4f:47:
af:10:74:07:bc:00:f6:46:c5:2c:60:1d:90:ee:34:cb:81:29:
85:b7:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:01 2026 by rpki-client