
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier: ksbJdd+YUTqfiHpAu6yUhYTlxgyvPCubuS5sLzHNjio=
Subject key identifier: C2:8B:77:C4:B0:5D:2A:29:B0:62:FF:17:DA:3D:24:79:9B:E6:82:9D
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number: 04F3
Signing time: Fri 12 Jun 2026 23:58:52 +0000
Manifest this update: Fri 12 Jun 2026 23:58:52 +0000
Manifest next update: Fri 19 Jun 2026 23:58:52 +0000
Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: ly0b0y7aorgg+8sklPR79DlTyeqSbv+CmbcJLjN7WLU=)
2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: L0bFUWqUd+yYiBxZkG/O4CedjSFjxQ9eMCz4NZl6+G4=)
3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: djqnP2LQeOsKvH3FdDCmYIV4VP7v3SLpxkrs/LZrwvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Jun 12 23:58:52 2026 GMT
Not After : Jun 19 23:58:52 2026 GMT
Subject: CN=6a2c9d3c-c094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:59:8e:c1:78:4f:af:4d:0c:a4:68:4a:9c:
f5:3b:65:8c:7b:8f:66:75:b2:b3:2d:ee:d6:25:e8:
c9:2e:62:df:79:b3:f5:b3:aa:b2:16:b2:5d:2f:fd:
52:eb:a3:57:d5:13:bb:27:77:b7:96:e6:55:96:1d:
52:40:0d:80:32:f8:b6:3b:e9:f0:73:67:04:90:34:
c0:12:80:41:3a:2e:22:54:e3:e5:ba:37:c1:0e:0f:
ce:15:8f:24:e3:73:e7:58:1a:3a:61:7f:2d:8a:1c:
aa:f6:60:dc:d0:42:cc:06:5b:a6:ce:42:d3:fd:ad:
77:38:59:5c:a5:67:f6:3d:89:8b:e9:a0:30:55:6a:
37:98:aa:f8:8e:e3:3d:25:45:94:7b:d0:dd:19:e8:
14:8b:7b:bd:77:02:02:bd:2a:a8:4a:ab:8a:81:de:
1c:9a:1c:94:01:62:2c:89:16:ec:93:7c:c1:6f:a2:
f4:e1:97:0c:58:e1:08:9e:82:72:ec:2a:e6:3b:bf:
2a:29:fb:b2:ab:ef:e0:36:8f:53:9c:8d:09:b3:25:
be:15:95:0b:33:c1:3c:93:4c:89:dd:53:a9:f0:95:
70:52:69:8c:72:f8:95:6e:01:1e:4b:a7:01:f3:1f:
69:b1:5b:d4:26:d1:71:31:55:11:33:c6:d2:5e:b8:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:77:C4:B0:5D:2A:29:B0:62:FF:17:DA:3D:24:79:9B:E6:82:9D
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:da:6c:4c:e2:4d:2a:c5:c3:79:da:23:d4:23:22:58:82:
29:8d:21:cb:36:ae:fc:54:70:61:b3:36:f8:cc:fe:6c:61:5b:
ac:67:37:91:dc:9a:10:e8:a2:43:e3:7e:b1:52:d2:c0:ec:33:
50:7b:71:be:f2:a6:c3:59:9a:de:b2:e6:24:a3:6c:da:43:4c:
02:13:df:60:2b:7e:f3:8b:f4:ad:c4:d4:c2:38:59:3a:62:20:
69:62:dc:22:a2:ed:09:82:66:15:2a:00:e5:0e:c5:da:ad:67:
7d:4e:72:13:20:e7:d4:2c:a6:cb:55:3b:46:87:74:41:51:9a:
ea:2e:83:a7:66:81:7d:f4:8f:23:c3:93:e2:32:00:82:cb:c9:
77:dd:40:54:64:5c:36:25:71:a9:a8:8a:ac:69:9b:32:61:94:
01:3b:77:36:88:3e:ac:2f:9b:b9:b3:86:5c:69:1b:47:32:57:
17:3a:02:50:23:66:83:20:54:1b:b4:dd:30:05:2d:d0:fc:df:
62:13:35:33:e4:dc:07:80:ef:90:31:43:5b:14:06:f2:2b:af:
36:7c:90:dd:97:59:e3:fc:99:e2:1d:c3:cf:d4:13:17:a4:d0:
44:37:b9:0c:80:86:77:07:ab:04:94:ed:01:83:37:0b:61:8a:
b2:ad:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:53 2026 by rpki-client