
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json)
Hash identifier: 63+QaQwGL9ovn03hdXshH7WWGB/SxT66thtGSSHQUnE=
Subject key identifier: 5E:38:D6:22:2A:5F:6B:A4:B7:31:17:DB:47:0F:25:CF:FD:A3:66:DB
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
Manifest number: 06CF
Signing time: Fri 12 Jun 2026 22:49:15 +0000
Manifest this update: Fri 12 Jun 2026 22:49:15 +0000
Manifest next update: Fri 19 Jun 2026 22:49:15 +0000
Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: YqWX37aPWNkJEdXTyQZhhXacrrvQwAN6H/DBFJ0/kwI=)
2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: ncVMvzPJ7BKlb60UcgyZrrfn0WZQ6WrxuL1LEKNyyZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Validity
Not Before: Jun 12 22:49:15 2026 GMT
Not After : Jun 19 22:49:15 2026 GMT
Subject: CN=6a2c8ceb-880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:ca:6f:b6:88:0e:d9:e9:c2:e0:77:d9:45:
93:f8:bc:3d:b4:81:2f:af:ca:cd:fa:29:47:c6:98:
7d:33:f2:0a:2b:74:0a:68:92:52:4f:1e:78:46:29:
ca:06:e5:5e:3e:95:62:b9:8a:f7:e5:54:81:1c:c6:
b7:6c:3d:0e:d0:4a:58:7e:a1:55:db:75:7d:a7:54:
fa:9c:a4:8d:15:97:1d:e0:2e:15:13:15:18:2e:7d:
fb:f8:ea:99:5c:87:5f:e7:b3:39:f0:70:da:f5:3d:
19:7e:e3:0b:63:00:e5:f8:b0:a3:1c:29:47:66:60:
8c:43:43:1c:19:34:25:5f:2b:c2:fc:a3:6a:73:51:
ea:37:4a:0b:c0:0f:e6:52:c4:56:8a:44:2e:9e:11:
4a:f5:49:ba:22:36:28:56:f5:1d:9a:4c:d2:c1:1f:
e4:7d:97:4f:e2:55:7f:a0:c3:20:10:db:a8:7c:84:
85:d9:21:5f:8c:48:d8:43:ba:56:6a:bc:6a:57:e2:
08:6d:a7:38:3d:52:03:0e:4d:86:29:36:c4:01:05:
11:97:f2:29:a9:7e:36:e2:da:d0:20:df:6e:8d:8a:
20:09:f5:6e:6b:95:89:35:a5:86:6b:04:8c:c0:5e:
21:7a:ab:72:33:da:6f:e2:47:7c:c4:a2:9f:92:be:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:D6:22:2A:5F:6B:A4:B7:31:17:DB:47:0F:25:CF:FD:A3:66:DB
X509v3 Authority Key Identifier:
keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:7b:13:17:99:70:0d:09:a2:17:41:e2:62:f9:0b:ac:8d:
e7:38:9e:55:d8:42:34:3f:51:09:5f:c2:e1:a5:6b:10:ab:92:
28:45:33:4d:6a:ea:f0:eb:fa:e8:b0:d0:0f:25:12:c0:65:42:
18:8a:7b:ed:d2:f2:6c:a8:83:f7:c2:b6:54:6f:f9:f0:a9:8b:
87:78:c7:8a:cb:63:71:03:72:ca:4b:cc:2b:4f:73:f6:12:2a:
5a:d5:a2:22:09:e2:18:f9:db:a9:4e:7e:07:09:74:bb:af:3b:
16:4e:fe:79:1b:e2:f3:1b:66:9f:7b:49:85:f8:31:26:96:00:
fc:a3:87:33:92:0b:63:6a:f5:08:b7:c2:3e:26:15:88:f3:83:
45:fa:ee:48:4c:8e:a1:65:e7:c8:d9:b8:ef:dc:0c:5c:b3:a2:
3e:f6:2d:95:69:0e:c2:51:44:46:b2:72:92:00:b5:94:4e:bd:
fb:ca:e1:84:f4:8c:ca:cb:b4:6c:c1:af:ed:93:bd:e9:19:97:
ea:08:87:8f:ee:1a:58:fa:03:ce:66:f3:05:9e:e0:46:67:c8:
95:0e:71:b0:54:95:68:09:d2:a9:f2:96:88:23:97:81:36:35:
59:e7:01:1a:b7:e1:f3:5e:de:fb:10:4f:38:09:6e:c6:39:65:
b8:73:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:47 2026 by rpki-client