
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier: J9W3orpFWg2zINj+24BqVF+Fpt4xOHWwxHboz0P6o9E=
Subject key identifier: 5D:14:89:28:F2:77:5E:E2:60:6A:1C:74:C3:01:D4:95:42:19:D5:5B
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 0FE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number: 0FD4
Signing time: Fri 12 Jun 2026 17:27:51 +0000
Manifest this update: Fri 12 Jun 2026 17:27:50 +0000
Manifest next update: Fri 19 Jun 2026 17:27:50 +0000
Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: rCU9f0aW1Kfd5WecFQ6ULiw+SAICDRyrBXEx6zPUtao=)
2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=)
3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4067 (0xfe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Jun 12 17:27:50 2026 GMT
Not After : Jun 19 17:27:50 2026 GMT
Subject: CN=6a2c4196-b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:fd:29:5f:61:cf:73:ac:54:bb:d1:6b:36:
73:ce:9d:91:a0:26:2f:38:57:31:eb:20:9e:de:e6:
fa:b6:3f:42:a5:e2:7e:0c:63:03:bb:1a:80:87:df:
2f:6b:84:24:53:04:23:34:b0:39:f4:34:d2:f4:be:
a6:b3:26:a4:e1:83:da:d1:67:14:df:f1:87:7d:bf:
52:dc:04:3d:a5:86:29:da:9b:77:82:8b:24:35:48:
d2:82:1c:5a:33:94:3e:04:05:cb:dd:3f:c1:c8:5e:
5f:71:45:74:8e:5a:9e:b4:97:be:94:57:0c:31:18:
e1:f3:26:e5:4d:03:f4:72:36:98:dd:a4:8b:26:14:
61:0e:45:ce:14:83:e9:b4:03:fd:45:97:80:da:43:
83:43:29:48:06:d0:8e:94:71:34:16:82:4f:19:d9:
5f:e4:66:12:95:0d:8b:81:d7:84:98:df:53:dc:65:
d5:ed:81:e1:ca:3e:31:8b:0d:52:3b:ba:1b:ef:ba:
6a:00:16:17:59:af:41:68:40:ba:b7:48:a3:f8:7f:
ee:67:00:15:cc:75:87:72:1f:c7:0a:30:d1:8c:ab:
ae:36:51:a6:a5:55:88:aa:69:59:3e:2d:93:b2:7a:
d4:10:96:55:d2:25:6b:c7:18:bc:f8:e6:a6:94:f7:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:89:28:F2:77:5E:E2:60:6A:1C:74:C3:01:D4:95:42:19:D5:5B
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:ee:44:10:68:a0:4f:04:5f:4c:e6:07:01:eb:1b:9b:d6:
1c:42:36:de:db:c9:9e:60:49:2c:d5:59:5f:e7:27:64:16:72:
ec:37:55:51:39:56:7c:ad:0d:6e:b4:d4:a5:66:34:01:69:ce:
2b:d6:da:9c:5f:53:b7:08:fb:d9:b7:10:e9:dd:83:d4:4c:83:
d1:92:74:fc:31:c6:25:2c:fe:0f:af:34:02:e8:a9:aa:9d:d3:
30:ef:30:6b:60:09:20:c1:d8:cc:15:64:81:27:d0:e6:5f:95:
c2:49:f5:d5:ff:ed:fa:36:65:b8:58:1f:07:e9:6f:ce:f8:30:
fb:d0:a3:0b:37:d5:bc:10:66:02:82:2b:50:2a:75:7e:7c:3b:
b7:40:09:4a:95:4c:39:8b:7b:d9:ab:c5:38:69:b7:f2:9a:86:
b2:a7:bf:e7:bb:c4:bc:47:b4:68:d9:c5:2a:8f:d8:0f:28:8f:
fe:de:a6:e7:30:20:af:74:c5:0b:b6:bf:a9:bd:74:6c:5f:1b:
37:95:b5:22:63:6f:f6:85:47:34:be:a0:fc:c4:ec:86:48:98:
85:9e:42:5d:24:10:06:f7:6c:63:80:70:ae:d4:f8:c3:e6:61:
48:5d:ab:01:d4:42:cc:bd:a1:36:cc:fa:7b:eb:cb:d6:7b:49:
0f:93:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:44 2026 by rpki-client