
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json)
Hash identifier: k9BkqV5cAHLsS22xEP/0r2YPs02GPWntQZlSUbXUu70=
Subject key identifier: 08:41:BD:6F:FC:A4:26:B3:4F:3F:E7:57:45:B8:45:CE:0E:01:47:F4
Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
Manifest number: 0128
Signing time: Sat 13 Jun 2026 05:40:09 +0000
Manifest this update: Sat 13 Jun 2026 05:40:08 +0000
Manifest next update: Sat 20 Jun 2026 05:40:08 +0000
Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: W42S/7vlVygoxlMKIfO6MIBZ44rlwMqyGCNF4tz5xBk=)
2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Validity
Not Before: Jun 13 05:40:08 2026 GMT
Not After : Jun 20 05:40:08 2026 GMT
Subject: CN=6a2ced38-0a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:66:df:5c:f3:77:3c:3c:ec:7f:77:32:e5:
0a:5a:5f:48:60:95:33:21:f6:fe:a8:83:85:3f:7f:
0a:46:24:59:e4:0d:36:0d:93:7b:57:d8:fd:ad:1e:
b1:a8:83:70:e3:86:b0:5c:f6:0f:d7:6c:c1:32:94:
32:6b:20:81:a1:a6:1e:9e:b1:5b:b7:4f:92:85:1f:
54:c3:dd:d2:e5:26:4d:74:34:1a:1f:81:2c:25:a2:
83:90:7c:0c:ca:3f:40:a1:b2:7b:0a:b4:30:7d:56:
55:5a:4d:50:19:b7:ea:c8:ff:91:34:12:65:a2:ac:
db:b9:84:30:6e:dd:1f:79:66:ef:75:d6:90:00:8f:
d5:a0:0c:1c:e0:f2:45:4d:81:3b:ae:57:3a:9d:4a:
03:07:78:fb:ee:d7:cb:75:bf:b6:4a:42:42:06:5f:
ed:46:b5:2c:d1:27:d0:a7:72:51:0e:57:67:1f:9c:
1b:14:15:25:77:64:6e:e5:d8:0a:d0:ef:d7:c0:b7:
93:96:1c:ea:13:1b:bf:98:41:95:3a:04:fa:35:67:
d4:d0:65:b2:7d:5a:ba:60:e7:b2:e7:c9:a8:07:b7:
36:10:2d:db:c3:d4:49:af:73:a7:db:ff:44:15:23:
4d:41:b2:fe:d2:1e:8b:d6:cd:09:af:25:ae:fb:80:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:BD:6F:FC:A4:26:B3:4F:3F:E7:57:45:B8:45:CE:0E:01:47:F4
X509v3 Authority Key Identifier:
keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:0b:2e:21:5f:28:09:1c:74:52:24:12:a8:33:3d:d2:2d:6b:
1b:ba:59:c6:e3:86:0f:6b:64:ed:49:48:ae:57:7b:71:2e:b3:
df:09:d4:ae:0c:3a:8a:5c:fd:0d:1d:28:fc:9e:70:03:4b:71:
b4:e1:a1:c9:c8:52:98:da:32:25:a5:37:72:21:1f:af:e4:80:
92:29:48:6c:df:15:37:22:60:16:86:81:28:c7:3d:70:17:cb:
ff:9b:80:94:7b:9d:ca:3e:4e:1f:19:2e:13:a7:4e:3b:22:b6:
bd:e7:65:8e:55:21:1f:66:f8:2b:74:ce:b8:03:21:c2:0c:09:
cf:34:8a:a2:db:90:60:01:ce:e5:cc:9d:5b:c1:77:82:7d:89:
e7:a3:14:94:b3:b7:8b:ac:99:10:6c:a2:7f:ed:fa:02:5b:db:
d1:6b:2f:df:c7:86:f4:18:7f:a1:55:97:8c:02:c8:c1:55:2a:
b0:da:d6:11:b3:eb:6b:8e:c2:69:27:da:60:d3:8a:11:57:3a:
24:9a:2a:8d:b3:78:6a:98:ca:a6:c5:b9:7b:71:09:3d:1a:88:
d1:6f:27:e7:c4:e8:f4:3b:a7:30:81:f9:60:7c:4f:9f:c4:a3:
96:a7:75:2a:e8:1a:3c:aa:21:d1:b5:ef:b4:d2:42:81:e9:c5:
ca:56:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:46:23 2026 by rpki-client