
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: G3RumgQ0u8ShbAu5mKC7Bx2ge6Y0AuCNF7QKH/c39ik=
Subject key identifier: F6:B0:23:C8:54:6C:60:5D:7C:D1:56:B9:DB:DC:26:C5:6B:20:63:F3
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 2575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 2524
Signing time: Fri 12 Jun 2026 15:44:20 +0000
Manifest this update: Fri 12 Jun 2026 15:44:19 +0000
Manifest next update: Fri 19 Jun 2026 15:44:19 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: PxPlSVhroHHeZrUEhEHQbRJnJGRQh7IGDEqpzXEGfQE=)
2: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=)
3: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=)
4: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=)
5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=)
6: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=)
7: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=)
8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: 4p7xuTRKQKo9EV6xSef1vx2zbkSfZNIDKxG3aW/02qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9589 (0x2575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Jun 12 15:44:19 2026 GMT
Not After : Jun 19 15:44:19 2026 GMT
Subject: CN=6a2c2954-bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:8a:0f:34:2d:01:e9:fb:db:69:6b:29:49:
da:71:56:62:3b:ed:c1:37:34:dc:ed:ad:09:ff:96:
a2:2a:e3:68:87:82:fa:f4:68:b6:6e:e4:0c:ce:5d:
16:ea:9c:cb:14:8b:25:18:b8:62:44:90:80:b8:d6:
07:f4:45:90:78:f2:8e:4d:3e:f2:2b:8e:fc:42:65:
75:f9:e2:09:c9:44:1c:a6:ec:e0:ff:92:27:18:83:
13:d2:22:7f:ca:dd:0b:02:e8:74:a2:9c:d3:a0:52:
95:e8:20:d2:c5:0c:33:17:72:9e:ce:19:9f:62:91:
ac:60:1f:52:7d:29:d7:03:47:94:31:c8:14:12:15:
e7:b7:2c:82:bf:88:d6:63:fb:bf:72:5c:50:5a:c8:
c8:2d:4d:24:c7:b8:a5:23:a9:f1:23:f5:41:62:e3:
65:92:53:69:2e:c3:ce:1a:e4:ad:e7:73:28:9a:9d:
93:68:5e:e0:19:db:92:da:ea:a2:68:c1:9f:53:90:
28:3c:84:0e:4a:92:76:90:ad:4a:06:9c:6c:6f:46:
76:2f:ac:63:fa:04:5d:c7:cc:eb:db:38:c6:26:01:
a9:27:cb:8a:07:46:31:42:93:8f:fb:f4:a3:be:a4:
fc:93:df:c7:6b:a3:6a:9a:2d:03:15:89:af:12:b9:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:23:C8:54:6C:60:5D:7C:D1:56:B9:DB:DC:26:C5:6B:20:63:F3
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6b:67:76:37:81:74:65:a8:39:ae:0f:b1:f2:5e:6e:fc:de:
b6:a8:6e:61:52:e7:44:13:d9:a6:1d:7d:af:7a:be:14:b9:ce:
20:d1:8c:3b:a5:0d:5c:cc:b6:55:33:06:40:a5:d9:f1:fb:fe:
d5:d4:5b:a5:12:45:44:4c:fa:91:19:dd:06:fd:43:a8:63:fb:
d4:2b:a5:2f:95:bf:95:f0:1b:ce:ed:99:63:7e:3c:7d:5b:a0:
5d:e0:7c:95:fc:43:11:96:53:e2:1f:f1:4c:c4:d1:86:13:e2:
2e:b3:30:ee:c0:13:84:22:36:3c:71:4d:de:c5:ac:b2:37:0d:
91:1f:11:ce:ef:df:4e:c7:a9:aa:47:9f:5c:16:d7:83:6d:61:
ed:37:45:ac:c0:80:0c:3f:a7:91:29:94:85:ad:bf:69:85:a2:
42:dd:e6:e4:3a:a9:55:8c:05:6a:ca:fc:69:3f:2c:93:85:26:
4a:12:9b:19:3f:56:33:eb:c7:5a:19:54:12:cf:2f:a7:c1:1c:
52:05:a2:e0:e6:3b:77:1c:7d:a2:f4:16:96:d4:c2:c1:6f:aa:
5b:43:9b:78:ce:aa:5d:62:f2:77:43:42:08:4f:8d:ce:cd:cc:
54:d3:b1:3b:1a:23:57:3e:b6:32:a5:38:95:05:21:95:26:25:
68:9b:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:40 2026 by rpki-client