
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier: coBnVTGotFvIS2IPnBVbuTBNNwK1fq2OjpUEp1cYT0Y=
Subject key identifier: F3:10:03:F3:2D:E9:A9:74:1D:6B:92:7F:CC:E3:0C:DF:F3:E7:90:D4
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number: 0225
Signing time: Sat 13 Jun 2026 02:46:37 +0000
Manifest this update: Sat 13 Jun 2026 02:46:37 +0000
Manifest next update: Sat 20 Jun 2026 02:46:37 +0000
Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: mxaE2ssAK7N7CQwN1EpkPm5bywSCLAfBGB8L0eKUhGw=)
2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Jun 13 02:46:37 2026 GMT
Not After : Jun 20 02:46:37 2026 GMT
Subject: CN=6a2cc48d-a594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:77:6c:89:ae:77:d1:dd:c8:8c:78:76:1c:
ff:60:27:d2:9c:b4:37:e8:d9:27:2e:8b:d1:dc:f1:
8a:9a:84:80:6e:0a:66:25:ad:45:7f:27:99:dc:39:
22:0e:70:c2:ee:8e:2e:5f:2d:a1:00:9b:61:07:55:
ae:d4:05:95:79:cb:32:6e:46:29:b1:8e:ee:9b:df:
0d:52:9a:67:c1:62:18:df:b7:02:d8:59:a3:d8:c6:
ff:7c:eb:f5:46:00:ef:ff:2d:f3:7c:bf:5e:8e:99:
e1:4d:f7:f9:fa:02:8d:b7:47:40:db:4d:60:d2:1b:
6d:c1:3a:86:6c:d3:11:b8:47:a9:de:dc:ec:07:9e:
2a:a2:0c:8d:7c:31:1d:0b:9c:25:5e:ff:19:9b:bc:
94:77:55:22:18:89:4e:fc:91:37:51:17:fe:17:9b:
28:d5:4d:e4:96:65:3f:47:49:3a:5f:4a:7d:a3:b8:
02:56:0c:ee:6a:21:c2:f5:db:5e:7c:8b:1a:88:69:
de:13:a4:9f:d7:8a:f2:48:06:c1:9e:cc:39:a9:47:
ad:53:a9:80:b2:7c:fa:0f:ca:c4:83:c1:5d:ae:9a:
bb:b3:75:8b:2b:3e:92:b5:09:57:19:aa:68:e1:5e:
dc:58:18:a0:5b:6e:56:be:93:c2:33:e5:51:79:5d:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:03:F3:2D:E9:A9:74:1D:6B:92:7F:CC:E3:0C:DF:F3:E7:90:D4
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:65:d2:6a:a3:e7:8a:ac:23:29:df:34:25:a3:ac:1d:71:50:
1c:30:03:23:2a:d8:32:3c:f3:ea:76:3a:a2:0a:c6:fe:8d:69:
4d:85:2d:fa:fc:70:68:7d:e7:e9:15:57:1a:d8:68:eb:16:25:
76:73:32:67:64:80:36:8a:1d:7d:f2:78:ab:39:5a:d9:33:d2:
70:65:55:d7:a1:1b:d0:e4:ca:22:72:f2:2e:38:1b:8c:55:89:
81:3a:9b:74:19:8b:b3:09:98:28:de:d5:3e:7c:8a:3d:65:d6:
2d:1e:8c:9e:2d:ad:dd:b9:95:99:a9:da:8a:6f:98:b2:d9:f4:
99:60:5b:f2:03:51:c1:07:d5:45:e1:cf:28:56:c4:db:ed:3c:
f9:33:e1:05:38:45:72:43:ea:c2:19:de:36:90:b5:11:f4:d5:
29:d1:6a:31:aa:a4:50:21:4d:f3:68:4d:53:67:2a:c8:71:44:
31:4a:cc:a4:96:d1:8b:9f:35:90:f7:dc:c1:90:7a:c4:52:64:
98:97:6e:d9:f1:40:07:dc:b3:49:64:24:60:89:7f:2a:ee:8e:
ba:8d:21:2a:6e:61:f2:73:60:50:88:d7:49:14:ea:70:d9:0f:
9d:c6:a9:47:00:4c:21:70:aa:48:8a:ea:ef:b9:0e:9d:fb:ce:
52:f1:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:58 2026 by rpki-client