
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier: sC8j935atOeHCo8y5Y/iB3ezJs2gq+CH+kxRlIpqY44=
Subject key identifier: 62:E4:BB:FD:10:A2:B6:FC:17:FB:0C:AF:FB:FD:09:F2:19:72:53:AD
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number: 015F
Signing time: Sat 13 Jun 2026 00:19:18 +0000
Manifest this update: Sat 13 Jun 2026 00:19:17 +0000
Manifest next update: Sat 20 Jun 2026 00:19:17 +0000
Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: iyav0ph8lhWVTwCZ3u/vmLd3ZnN0RTyhR6n8MLa35SY=)
2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: 0+v8nCnfAC3GP9GgjNFUSOIX0YHSrKCcLJqYU8ao0Gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Validity
Not Before: Jun 13 00:19:17 2026 GMT
Not After : Jun 20 00:19:17 2026 GMT
Subject: CN=6a2ca206-6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:a5:2e:0c:bd:b5:40:73:50:c2:5b:c3:c1:
e2:15:3c:33:94:87:3b:d2:ba:2c:0a:1f:af:fe:c1:
f0:38:6a:c8:ee:0f:0e:83:64:98:9d:e7:72:2c:b1:
f1:da:55:43:34:12:e9:16:da:78:bf:79:51:32:44:
4b:01:35:e6:86:00:83:ed:57:6a:de:25:13:f8:01:
e5:b1:35:c8:a5:dc:5c:74:35:fd:fa:6c:30:a9:a0:
97:4a:06:19:2e:40:e0:0d:41:72:7a:aa:2e:1e:f0:
66:58:5b:18:57:75:47:b7:21:45:91:7a:dd:67:35:
8c:b3:65:74:50:20:2b:5a:57:11:7b:08:b7:94:ba:
aa:64:01:99:7c:fa:df:1a:10:b8:39:73:a1:ce:6a:
b7:a4:f6:f6:e4:d2:a4:93:58:cb:49:68:8f:a9:ba:
fa:d6:e5:1e:36:16:c3:27:9a:02:c9:01:09:f3:db:
d6:47:27:07:3f:de:ee:4e:10:59:32:b4:59:08:6d:
3e:11:ed:3c:9e:c5:fd:88:4b:90:3a:a9:f7:03:69:
da:f2:5d:ef:5e:f4:db:0d:e5:0f:ef:c2:1d:3e:3d:
39:80:d5:cf:27:ec:6e:9e:6a:89:b2:39:de:e8:4e:
cc:7b:f6:3d:34:4b:8d:0d:ae:da:57:d5:0f:27:3a:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:BB:FD:10:A2:B6:FC:17:FB:0C:AF:FB:FD:09:F2:19:72:53:AD
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:bd:c9:89:73:e2:36:27:c5:55:a7:d3:3b:d6:82:43:ac:
19:44:1a:a5:fd:9b:97:0c:51:04:c5:90:f8:e6:89:78:34:ab:
a9:3c:19:0f:f7:b3:77:55:a6:1c:e9:5a:00:93:20:a9:d5:5b:
36:07:09:28:cf:70:24:87:cf:56:eb:a8:61:54:21:5e:38:b7:
88:44:a4:8e:2a:05:4c:ba:10:b7:44:55:0d:0b:00:19:2a:b7:
62:3d:65:d0:9a:93:d4:69:7f:30:b4:6c:fc:f5:e0:13:e0:5e:
00:c6:51:bb:cb:7d:8a:59:1b:16:1f:8d:72:b1:31:11:33:d1:
85:9f:f4:e8:fe:18:81:9b:b6:cc:50:a5:54:93:94:eb:3a:ef:
d8:ef:63:0f:dd:49:73:f4:09:67:8e:36:08:c4:55:fe:06:be:
ed:10:84:3c:05:0c:b3:33:f9:73:c7:f4:7e:1c:78:e9:da:6b:
c1:40:a0:9e:35:d9:4c:54:68:f3:15:8c:56:3b:ef:7a:60:7e:
66:9a:2f:03:b1:c5:0a:9b:ba:8f:7a:d4:4d:07:e4:cb:7f:3b:
88:7c:89:65:64:31:cd:bb:80:d9:ee:a1:60:98:13:1e:61:5c:
f4:da:91:64:cd:ee:53:a1:b4:d3:16:51:3d:cb:b8:7e:dc:ff:
8c:2d:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:24 2026 by rpki-client