
$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier: zlUxWfO3g4iy8gmjRIuffr8Siuw1WeZFUtM4ByScDCI=
Subject key identifier: 08:A6:9A:49:B8:FF:5E:85:69:B6:BE:F9:64:C2:85:29:32:62:4B:67
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial: 0C93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number: 0C79
Signing time: Fri 12 Jun 2026 18:40:59 +0000
Manifest this update: Fri 12 Jun 2026 18:40:58 +0000
Manifest next update: Fri 19 Jun 2026 18:40:58 +0000
Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: x5uPp7Fx+AP3kV3U2PVes48zB/Brh9+KTLsQhfZeXxw=)
2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=)
3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3219 (0xc93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Validity
Not Before: Jun 12 18:40:58 2026 GMT
Not After : Jun 19 18:40:58 2026 GMT
Subject: CN=6a2c52ba-6e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:13:b8:75:ec:0b:b2:e6:6e:a4:78:ef:a2:
3a:81:20:59:f5:9c:a8:01:17:ff:0b:7a:6d:da:2b:
83:72:ef:bc:2f:ea:b0:d1:27:40:62:0c:98:84:ee:
5f:2c:5b:5f:19:17:2b:31:4a:d6:1b:9c:89:c0:9b:
3f:59:fe:dc:b4:a0:f7:c3:1e:90:b6:ea:f0:fd:e6:
d8:92:e6:a2:76:f2:8f:80:f0:d5:0e:dc:92:91:87:
a7:1f:ec:9e:57:98:57:51:e2:be:ce:38:83:4f:6b:
c0:aa:f2:e1:28:67:4b:15:9a:6a:4d:e1:a7:f2:36:
94:00:50:f2:9f:4e:17:73:7e:db:3a:70:6e:62:5b:
c6:82:7b:64:cc:f6:66:89:f3:b4:ff:67:39:03:81:
a1:82:23:70:27:71:a0:bf:fa:f2:7b:80:7d:11:8f:
0e:b2:c5:96:c7:4d:11:e2:27:d3:1d:33:57:30:cf:
db:9f:70:a7:88:98:38:2c:1c:b6:cf:bd:fb:d3:18:
89:fd:82:28:f4:74:d3:00:80:29:8f:ce:42:0f:77:
89:b3:47:22:f6:68:df:5d:9d:9a:fc:e8:1e:15:30:
e4:ee:c5:9d:70:90:35:6c:a2:9d:fd:ba:0a:9d:2d:
b1:e5:ae:3d:01:ae:e7:05:4f:e9:ef:5a:a6:ff:bc:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A6:9A:49:B8:FF:5E:85:69:B6:BE:F9:64:C2:85:29:32:62:4B:67
X509v3 Authority Key Identifier:
keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:c4:f1:a6:6b:45:cf:72:db:55:b0:3f:6a:5f:d7:11:60:
23:5e:60:05:56:4e:90:27:5f:ac:b0:c7:03:f1:f1:94:2c:d7:
fd:41:ee:c3:01:65:93:0a:d8:50:cc:32:cb:18:89:fc:4c:77:
06:57:0b:8e:9f:43:93:e3:17:36:b0:fd:88:04:c3:f5:81:c3:
1b:a9:ca:81:ae:af:d9:23:80:07:d9:3c:0e:4c:18:77:1c:8a:
95:f5:1a:ce:cf:85:bb:a4:21:19:12:13:55:f3:89:84:64:b1:
a4:e9:4d:7c:36:78:c2:a7:2b:1d:8a:db:91:fd:4c:98:72:90:
e2:a7:97:fd:af:d5:46:27:3b:c2:85:ca:cc:51:96:3b:b9:1f:
b3:e9:22:e1:a8:fc:e3:4e:fc:e8:87:67:59:03:e5:13:ec:b3:
68:d8:9c:0a:40:f4:9f:79:ab:c9:a1:c1:3b:45:61:96:c6:dd:
fb:cd:d2:bf:1b:44:18:d3:d8:11:d4:6c:14:54:b4:4f:5f:dc:
fd:4a:5c:29:2d:53:c1:13:94:b6:ae:9e:13:67:22:ce:dc:7e:
fc:8d:de:65:22:24:e0:3b:51:7d:b2:a0:77:39:06:3f:85:95:
bf:38:27:f0:52:62:c7:b2:a4:f5:5c:e4:15:cb:25:2f:ee:c0:
f3:9b:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:40 2026 by rpki-client