
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier: bU26f09pYtTqFoCZJPm5VXSiIPfLMyycZhRiktZ9xpA=
Subject key identifier: EB:35:CF:CA:8B:AF:43:AD:BC:AE:00:CB:91:11:D7:FD:1F:67:A0:7E
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial: 039B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number: 0394
Signing time: Sat 13 Jun 2026 00:45:22 +0000
Manifest this update: Sat 13 Jun 2026 00:45:22 +0000
Manifest next update: Sat 20 Jun 2026 00:45:22 +0000
Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: FeATQM8ZklvzmIjTZoeXm9EPXOPy4w06833DbMFx9AA=)
2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: Xl6LPHCgMIaL4uMyGZdF/u4P23v9oCG6fy6f1O7/cxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Validity
Not Before: Jun 13 00:45:22 2026 GMT
Not After : Jun 20 00:45:22 2026 GMT
Subject: CN=6a2ca822-e330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:50:97:f4:d1:3b:57:75:47:95:ec:70:a8:
ea:e9:0c:42:6a:0e:8e:78:ed:47:2e:81:e0:ad:cc:
01:4b:51:a8:9b:77:9a:a4:dc:7e:87:86:8c:5d:49:
cf:c5:d5:b0:ff:b7:53:f3:7e:d1:66:3a:07:7e:7b:
2c:b9:85:2c:c2:a8:a4:07:d2:f5:af:02:96:5f:95:
9b:3f:08:8d:32:a6:9f:4e:fc:95:b3:35:51:09:30:
b6:0d:ce:25:6e:3b:2c:78:7d:a3:77:fd:0f:32:9d:
56:a0:77:2a:22:90:56:f2:91:8d:e4:a3:5f:3e:4a:
f3:55:8f:dc:f0:1a:05:68:c1:08:cd:cb:69:e3:18:
6d:6c:42:a8:55:e0:c5:44:b8:eb:07:c4:7c:3e:02:
fd:53:17:63:59:6a:37:6c:25:da:69:c7:9b:cf:0a:
f6:fb:d8:f9:5e:e8:70:de:0c:11:98:36:a2:e1:7b:
6d:6d:82:5f:c7:50:2f:61:d1:ca:bb:4d:c2:30:66:
15:c9:4a:88:0c:2e:46:36:b0:74:50:bf:b3:61:64:
d2:2d:cc:00:7a:51:e0:80:12:c7:cb:07:49:8d:6a:
3f:8d:99:85:b5:53:d1:1b:0f:cf:f1:d7:ea:10:e2:
a9:2e:72:ba:55:10:a5:e0:cd:5f:ec:aa:83:4d:ba:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:CF:CA:8B:AF:43:AD:BC:AE:00:CB:91:11:D7:FD:1F:67:A0:7E
X509v3 Authority Key Identifier:
keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e2:02:f9:f5:f3:f2:00:40:41:f3:8b:51:bc:af:b8:2d:21:
f4:a3:03:64:53:e6:ac:ae:24:ca:a0:63:c5:77:8b:8f:68:a2:
52:1e:fd:6e:56:a9:b0:da:30:a9:48:55:af:92:1b:67:c6:55:
6b:fb:4b:2d:03:53:a2:a0:6d:7d:5a:aa:c7:65:4e:0b:4c:73:
9f:f2:76:a0:d5:b1:67:83:b3:8c:cf:48:42:c3:da:c2:c5:42:
4d:b2:75:5f:5b:e8:5f:ea:8a:cf:56:77:e3:8b:80:f9:6b:05:
f2:60:cf:d7:94:d4:58:50:da:a4:0a:6c:2b:c9:6e:60:32:d8:
f2:68:37:30:a9:74:a4:8b:f1:6a:88:a8:76:02:b5:de:a7:4b:
33:80:fd:99:e8:71:ee:6e:9c:31:ee:8f:5e:f0:08:bc:fb:f8:
be:85:f7:45:96:1c:e9:fd:cb:e8:1d:3d:da:80:b5:85:8d:de:
0c:84:eb:02:64:13:09:63:f8:49:5e:4f:9e:2d:61:7f:a8:e6:
9b:eb:c9:ac:04:a8:6b:2c:80:5d:02:d8:c5:19:51:12:06:ff:
a4:08:7f:c4:c1:99:6d:6f:bc:b4:d7:a6:c2:78:e0:28:2c:65:
c5:99:86:1e:8d:c1:0b:f0:f8:82:83:48:cf:69:6e:9e:63:88:
9a:ed:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:52 2026 by rpki-client