
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json)
Hash identifier: 3YqUQY293IvNRfIueNl16lB31AjiG48upjU0SSsxORc=
Subject key identifier: 9C:73:E6:16:C4:5B:1B:73:1E:1C:86:92:48:9F:30:17:64:F2:E3:24
Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
Manifest number: 8E
Signing time: Sat 13 Jun 2026 07:32:12 +0000
Manifest this update: Sat 13 Jun 2026 07:32:11 +0000
Manifest next update: Sat 20 Jun 2026 07:32:11 +0000
Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: c+DYGs6GF4WoVRS5vFJcHAKt5W0Gv0ZkGg3iiomy4Zw=)
2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: dtOyJXL7fADe0DAPUWAD6cAvQxtHj2xT44MMlwLS1gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Validity
Not Before: Jun 13 07:32:11 2026 GMT
Not After : Jun 20 07:32:11 2026 GMT
Subject: CN=6a2d077b-a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:b1:3e:0e:58:5e:28:14:36:c8:24:c0:83:
41:36:e0:e6:36:4a:9e:8c:9b:6d:ce:25:4f:b7:d3:
2f:8a:2d:17:7a:57:ad:45:79:41:e1:0e:db:2d:41:
d5:99:79:f1:d8:6b:e6:6f:5b:f4:37:36:94:bb:6d:
82:5b:9d:d4:d5:10:d3:84:a8:70:89:2b:65:e8:af:
99:5d:47:bd:d5:62:92:3f:58:2a:f5:b0:b7:ce:2b:
64:4a:51:22:1f:f3:48:46:66:14:d9:03:10:2c:03:
51:3c:21:fe:2f:35:1c:36:d1:a4:21:d2:c7:32:0c:
21:33:02:99:b2:79:98:92:09:b4:b6:7e:3b:c3:d2:
b7:40:13:4f:ce:6c:35:ad:61:01:1f:d4:c7:cc:36:
41:2b:00:53:9c:5f:11:59:a6:a2:6f:41:09:86:e4:
db:22:fe:25:08:85:32:84:5d:79:87:49:8c:16:7c:
72:e9:16:15:49:ba:5e:85:82:37:49:4f:4b:4a:96:
39:54:84:96:93:0e:a7:72:0c:a1:a2:57:09:02:a4:
cf:c3:dd:4d:ee:41:12:1f:10:1e:2d:02:6b:e7:96:
29:d2:33:7e:a7:9b:17:92:e2:64:65:f5:8a:06:af:
cb:1d:37:10:c6:02:80:9c:b7:7d:56:54:ec:58:17:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:E6:16:C4:5B:1B:73:1E:1C:86:92:48:9F:30:17:64:F2:E3:24
X509v3 Authority Key Identifier:
keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:21:bb:8f:5d:97:84:83:15:28:b5:74:3a:0e:bf:ca:67:7c:
2d:f7:b2:73:df:79:f7:dc:bf:0a:04:c4:88:a4:04:d3:68:c4:
03:ea:97:df:a4:5f:10:3c:84:c4:3c:a3:fc:cf:df:2b:ca:51:
df:94:1d:99:1e:be:f6:5c:1c:d4:57:29:e4:e5:f0:fd:cc:1d:
04:5a:71:1a:2e:55:cd:69:51:e9:07:20:2a:69:92:cb:78:5b:
6b:2c:29:65:ad:95:eb:6f:b0:5b:67:ac:f1:c1:2b:37:f5:32:
ce:b9:68:d2:79:36:5e:35:3f:ac:dc:d2:3d:dc:30:36:fd:95:
e2:7b:30:e8:53:8d:ca:40:69:e7:0d:ff:3d:85:6a:31:4f:4e:
53:4a:84:e7:32:ac:e8:5e:d4:fe:e0:65:5a:a0:bc:0a:c5:86:
fc:70:bd:fe:46:a6:73:5c:87:43:f1:2e:22:70:99:44:f6:08:
97:73:5b:6c:ce:1e:45:69:96:a1:f8:e9:da:58:02:d6:ae:05:
f6:35:60:59:d9:21:e1:67:4b:46:84:b7:99:a4:d0:1c:7e:b8:
78:17:26:8e:f7:88:cd:db:a8:49:5c:1a:3a:db:82:23:cd:a5:
e6:8f:3b:87:fa:64:71:73:f6:9d:55:1d:c5:b6:e3:84:ec:71:
36:4b:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:07 2026 by rpki-client