
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: BCZtNvYZt6EhW2c4Ue5udOXIevAe+0ZwaIiIAEmCQwk=
Subject key identifier: 46:36:F0:BB:F7:87:05:36:15:F5:FD:07:C3:4B:44:AB:89:16:9D:EE
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 0A21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 09F5
Signing time: Fri 12 Jun 2026 19:58:37 +0000
Manifest this update: Fri 12 Jun 2026 19:58:36 +0000
Manifest next update: Fri 19 Jun 2026 19:58:36 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: PSHBXPd0VqE4mLE24xqPbjACjmmDSacxjXTwCrkRUuU=)
2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ZZGaP1aMdg0/Z8kpA6IgDd5lfHorn6nSTgSPV8+XGJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Jun 12 19:58:36 2026 GMT
Not After : Jun 19 19:58:36 2026 GMT
Subject: CN=6a2c64ed-6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:fe:32:00:52:a2:62:5c:88:7d:1d:ab:70:
1b:e8:87:9b:6f:74:d6:7a:1b:a1:a4:ed:bf:2a:21:
f4:74:8c:96:cb:9b:9d:97:3f:96:30:04:03:c2:b9:
bd:94:0d:e5:d0:f1:59:c2:82:04:ce:4e:0d:03:e3:
b3:29:92:54:6d:6c:03:36:01:03:b7:9b:c1:1c:40:
ad:c3:22:58:0e:e4:09:bb:4d:cd:09:22:0a:0e:9e:
13:8b:7a:c6:42:f7:0a:c7:2d:49:88:5d:6f:16:06:
1b:63:7a:c7:bf:99:81:cd:ba:24:3c:17:42:45:98:
22:6e:f2:e2:b5:fb:84:ca:ae:c9:db:ae:71:e3:d8:
26:23:01:35:d0:1f:00:84:77:38:01:a6:8a:46:fb:
8b:49:ea:c1:fa:dd:3b:c1:c7:20:f6:3d:70:04:71:
25:0f:e5:f9:8b:0f:fe:6e:5d:20:c2:e2:7f:6c:df:
19:f8:ac:56:22:48:3d:e6:8c:98:90:b3:8f:76:05:
66:88:f3:3a:2d:b8:f3:94:4d:2b:72:ce:a5:d9:d9:
c0:e9:50:83:63:3d:79:33:d3:21:af:e2:1a:46:f9:
d7:18:66:e1:16:32:b7:c4:82:c2:01:25:39:0c:c7:
89:97:fb:b7:94:cb:a8:3f:31:2a:f8:d1:73:1e:21:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:F0:BB:F7:87:05:36:15:F5:FD:07:C3:4B:44:AB:89:16:9D:EE
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:a3:ba:49:f4:69:09:7c:57:ad:06:f6:86:51:53:28:44:
1f:64:af:27:4c:a5:a2:66:dd:72:0b:ab:98:87:18:2f:79:69:
16:c5:f1:83:af:e6:e9:9d:8d:bf:2f:98:7b:94:7e:aa:5d:a3:
c8:7f:71:23:9c:80:f6:44:d2:74:ac:89:76:60:64:24:7c:91:
2d:27:84:a4:b6:59:a4:1b:94:46:9f:31:83:e8:82:3a:9b:ab:
aa:a6:5c:fc:0d:b0:7c:ff:51:a2:cf:25:df:0c:7a:9b:8e:37:
d9:01:36:84:2e:17:e0:d3:97:f4:d2:ab:7d:33:f1:b7:4a:73:
e5:1b:94:8f:10:31:a7:ba:8e:fd:01:6e:f2:71:d0:85:c4:ce:
9f:4b:14:0d:4f:60:3c:74:05:7a:c2:d6:da:0f:62:e7:ee:eb:
77:27:68:21:b4:4e:f6:ac:ce:b0:46:98:68:9c:ee:3c:77:68:
87:c2:79:e9:13:ff:6e:50:ae:e6:ab:47:29:aa:67:a5:af:ba:
fc:04:30:79:b3:fa:e8:a9:f5:da:50:50:ab:cf:7b:3d:0c:f3:
a3:dc:0d:81:0d:32:c3:10:f9:d0:20:eb:9b:48:e1:89:43:12:
03:02:1c:3a:04:b4:6d:9d:74:bd:ae:25:74:9f:18:96:f4:49:
d4:0c:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:26 2026 by rpki-client