
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier: A8iDbtoJDHWo4pLaTNqTeCmctNuIW2j1c48c8ytAvo4=
Subject key identifier: 5D:F6:5B:C3:73:F2:85:59:1B:EB:99:13:C6:7B:D9:2B:65:45:6F:92
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial: 0A13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number: 0A04
Signing time: Fri 12 Jun 2026 19:50:07 +0000
Manifest this update: Fri 12 Jun 2026 19:50:06 +0000
Manifest next update: Fri 19 Jun 2026 19:50:06 +0000
Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 0lswuPQCyQmc3aVCvMkup7K5MWfKJY6NZ7//8ic9Ks0=)
2: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
3: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Validity
Not Before: Jun 12 19:50:06 2026 GMT
Not After : Jun 19 19:50:06 2026 GMT
Subject: CN=6a2c62ee-3e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:dc:62:57:bd:3c:1d:23:34:93:d8:49:35:
9d:cb:34:7b:e6:4d:e1:62:13:97:f3:56:ff:82:8f:
90:f2:98:06:f7:26:6e:0f:1a:11:22:ad:2e:73:ad:
1e:f9:a4:be:32:fe:1b:93:f6:e4:a6:d0:f3:8b:f1:
51:2e:90:25:38:cd:44:47:00:06:f2:6a:90:7f:60:
b9:e7:51:8e:23:9b:82:f7:e9:78:4d:76:3a:df:02:
48:98:05:7a:79:22:a6:df:7c:fc:f8:3b:3e:64:81:
70:4a:54:8d:0b:a2:97:a5:96:ed:42:47:e3:4d:54:
25:1d:3b:6c:3d:94:17:b7:ce:2e:bd:ad:a8:68:40:
11:33:b2:11:ea:aa:ce:e0:30:ac:60:ba:65:f3:8d:
1b:5b:3e:fd:ff:f1:46:78:38:87:cb:ff:4f:1b:d3:
bd:1c:07:b7:32:e9:b2:40:69:18:6f:31:dc:6b:32:
bc:38:4b:c8:36:cc:84:b4:a3:25:aa:38:48:9c:7b:
07:6f:76:30:0d:95:f8:f6:eb:d3:c7:35:0e:44:f1:
cf:e0:ae:3d:f8:2b:46:7c:5b:56:7b:ce:99:11:79:
3e:2b:0a:ee:72:7b:f5:f2:fb:0a:ff:8d:a8:09:6a:
42:c1:b4:78:31:60:b3:06:2f:78:07:7c:7e:c3:dd:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:5B:C3:73:F2:85:59:1B:EB:99:13:C6:7B:D9:2B:65:45:6F:92
X509v3 Authority Key Identifier:
keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:b5:e1:d5:17:7e:26:41:c1:bc:65:df:9f:b1:be:6b:d5:
be:92:6e:df:81:2e:a6:b8:a5:3a:a9:3f:0b:ec:7f:91:81:aa:
44:31:ba:03:05:33:95:cb:38:f3:96:bb:8f:57:a0:f6:b3:4d:
9b:83:18:4d:ad:6c:5d:14:cd:6e:a6:c1:ef:6e:a9:80:f7:13:
4c:35:fe:1a:ef:bb:c2:ef:7d:17:32:b2:ee:4d:a0:50:31:ff:
77:17:68:05:03:fc:18:7b:df:36:7c:cb:be:e6:05:b1:39:4b:
c7:cb:ce:4c:55:94:bb:2b:5a:f6:06:3c:d9:0b:d9:32:cb:7f:
be:1f:05:72:b9:4a:07:a3:b6:bd:0d:d3:a8:bd:df:a3:f9:02:
c6:19:17:e3:f9:6c:80:a2:0e:7f:b3:de:f2:62:f4:51:a2:55:
e0:86:c8:3a:ac:11:df:1f:ec:d1:25:13:36:26:03:df:a2:81:
20:a7:c2:b2:80:07:b9:30:d4:64:73:fe:b6:28:b2:83:42:c7:
b5:74:48:76:d2:e4:f5:1b:6f:ae:c4:d7:80:27:ea:1e:17:2a:
b4:6f:8a:6c:81:08:33:ab:82:75:1b:3c:5d:36:58:d2:ff:c7:
01:6a:71:76:de:ea:da:ab:a7:e8:0d:f6:9e:80:68:a4:d8:af:
db:f7:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:07 2026 by rpki-client