
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
File: Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json)
Hash identifier: 7JKqA5G2hm7y1rb5zX/j1rFrr3CC481+LSkn9I5bQyA=
Subject key identifier: CC:56:2F:2B:0E:1F:F8:6E:22:9F:33:87:2E:64:C5:5F:57:39:CA:3D
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Certificate issuer: /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
Manifest number: 28
Signing time: Sat 13 Jun 2026 08:51:13 +0000
Manifest this update: Sat 13 Jun 2026 08:51:13 +0000
Manifest next update: Sat 20 Jun 2026 08:51:13 +0000
Files and hashes: 1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: lA+8kmmDK+/17ocGVDDNG3DjhFM1aRhgtyELrvTqnjA=)
2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Validity
Not Before: Jun 13 08:51:13 2026 GMT
Not After : Jun 20 08:51:13 2026 GMT
Subject: CN=6a2d1a01-c92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:55:bd:9f:99:79:50:0d:5f:b8:2f:ee:cf:
01:d0:f3:7f:c7:63:77:1c:bd:29:a7:c6:f3:e4:00:
45:f0:34:92:82:5c:6a:e9:5b:15:96:9f:b6:97:e7:
39:51:3a:74:31:28:c4:0f:cd:90:56:98:37:7a:00:
7e:f3:c5:27:54:38:96:dc:d7:eb:36:8d:1a:5b:8a:
86:20:aa:c3:90:7e:37:81:a2:a1:6a:9a:54:09:89:
73:cb:49:9a:1f:dd:32:08:d9:49:70:41:a9:61:d8:
96:7f:b3:86:ff:19:cb:54:e3:e1:dd:6b:28:36:df:
49:67:fa:bc:45:c3:31:33:4f:8b:e3:80:0e:49:57:
68:c4:bd:30:40:04:cc:d3:f7:20:91:1e:69:44:57:
71:87:f9:96:6d:ab:6d:f6:d4:2d:50:51:9e:db:37:
46:50:33:02:36:6c:7b:3f:82:95:85:f1:50:19:52:
49:88:9c:03:b8:f6:7d:f5:d7:6a:82:7c:18:be:83:
f7:f3:0d:05:af:cd:dc:8e:7c:a2:ca:b0:f0:95:8d:
6c:f5:a0:b4:b9:c1:ff:33:9a:77:15:1a:e0:5e:2f:
d2:05:aa:6b:48:fc:5e:0a:4f:32:19:93:3a:c1:e4:
24:6f:f1:74:7f:70:ec:07:54:70:8c:b9:3f:05:f5:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:2F:2B:0E:1F:F8:6E:22:9F:33:87:2E:64:C5:5F:57:39:CA:3D
X509v3 Authority Key Identifier:
keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8f:d8:77:f4:17:28:2c:9b:1e:a6:8e:a8:b1:7d:30:0a:cb:
9d:c8:39:58:28:0e:4b:30:d7:66:5f:32:31:14:ee:e8:c6:79:
10:7f:90:b7:df:57:8f:7c:62:2d:b2:36:7e:09:a4:75:f7:b9:
54:68:76:87:48:ac:fd:f3:92:a3:bd:42:05:e8:f1:fe:c4:ae:
71:d1:b3:f9:87:c8:83:12:ad:fa:46:13:a3:67:c7:a7:1e:08:
e4:34:b5:13:6a:35:f4:88:b4:7c:ac:9a:4d:35:ef:86:4e:c0:
fe:07:59:c5:ce:8b:1b:4c:36:43:90:fd:d0:e1:fc:be:3b:ff:
9a:e4:84:5d:62:c8:1b:9c:85:d9:1e:c6:c2:07:2a:21:d6:ab:
0e:75:ed:fb:13:54:5a:31:81:96:f2:eb:67:3b:82:fb:5c:03:
f4:49:86:42:ec:48:ce:88:b5:99:15:06:66:9a:b1:7d:9d:7e:
9c:10:c1:c6:c2:9e:71:14:14:f6:48:20:48:a5:d8:1b:75:0a:
21:bc:bf:98:15:65:5a:b2:c3:4b:14:3f:fa:a3:f9:44:8d:1f:
78:9a:53:48:11:27:b2:df:37:6d:c4:32:f7:42:75:90:04:21:
79:f8:e5:e4:2b:37:fb:4a:1c:5a:1a:66:d5:0c:b0:ba:43:c9:
89:02:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:23:08 2026 by rpki-client