
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier: Z0T+A5xmYAFSL77CpjR027M5paFjw6HKqIvREZMZYgU=
Subject key identifier: 8F:4F:C7:B7:70:5A:82:5D:3D:C3:27:2D:6C:28:37:69:4E:9A:D3:6F
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial: 08B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number: 08A4
Signing time: Fri 12 Jun 2026 20:37:33 +0000
Manifest this update: Fri 12 Jun 2026 20:37:32 +0000
Manifest next update: Fri 19 Jun 2026 20:37:32 +0000
Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: pKQkOgYl/Q9qtsYDuu6TwKLW4VEirKA92vrm4q5+LHw=)
2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=)
3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Validity
Not Before: Jun 12 20:37:32 2026 GMT
Not After : Jun 19 20:37:32 2026 GMT
Subject: CN=6a2c6e0d-a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:16:ec:4f:db:10:66:59:c9:33:ee:50:87:
ab:4e:21:bc:7e:2a:ad:b4:9c:cb:bf:e1:d1:0a:96:
17:53:09:fd:7b:bd:38:17:05:36:3f:7c:40:37:d2:
a5:a9:42:c6:49:b3:d8:cf:17:ee:25:18:b1:24:8c:
cc:51:88:be:e6:c5:b7:00:b7:36:26:b9:dc:1f:51:
27:01:2b:d8:94:2a:f3:fd:a4:6c:e3:61:fb:70:e3:
3e:54:86:df:45:5d:dd:62:41:e8:c7:01:27:b8:fa:
3e:22:b1:43:61:97:db:a1:60:fe:c7:d6:3c:91:fa:
92:92:9c:99:6a:c9:e7:8f:f6:d8:84:f0:37:d0:af:
cd:40:e1:44:54:8d:2a:4a:a4:57:88:45:86:d1:71:
da:1a:00:8f:be:44:3a:f6:f3:b0:20:4c:61:77:1a:
a4:9b:f0:02:21:dc:5f:73:ca:68:13:77:fb:28:69:
a2:59:42:70:f9:4a:1d:22:56:7f:97:77:94:03:21:
e0:2a:8f:30:c8:02:c7:a8:70:79:c2:d9:63:31:3c:
7f:2b:c2:9f:49:3d:e1:28:bf:88:12:04:40:c7:b6:
75:1a:ad:bd:22:49:b0:95:0f:24:14:a2:87:6a:be:
b3:91:94:75:c4:0d:ca:5d:82:da:6d:9b:ab:19:2d:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:C7:B7:70:5A:82:5D:3D:C3:27:2D:6C:28:37:69:4E:9A:D3:6F
X509v3 Authority Key Identifier:
keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a9:f4:a1:54:7f:43:38:f5:ee:05:78:53:bd:27:a8:0f:ae:
40:10:11:cc:b9:e8:94:29:ab:fc:9a:f0:d4:7a:a9:43:57:1a:
ca:26:87:9b:a8:db:66:f1:e3:91:84:89:a3:af:e2:d3:20:ee:
15:60:84:03:01:77:51:f3:b7:a6:e9:9f:6c:da:0e:74:bd:de:
a9:14:d4:29:a9:e9:a4:f1:c0:b2:07:ad:6d:a1:e6:17:0e:07:
27:10:c9:8b:8e:ee:65:86:26:55:7c:d9:f5:3c:4b:b0:ae:a7:
d3:d1:65:c5:8e:53:ef:8a:47:62:83:7d:f3:9d:fc:bc:4b:f5:
24:19:be:8e:cc:f8:f7:5d:e1:0f:bc:e3:7a:37:de:36:5b:fd:
96:84:0d:e1:3c:ae:9e:af:60:7f:28:57:a0:8d:9b:7a:7d:7e:
42:43:f3:0a:08:94:64:99:4f:a1:48:af:65:bf:55:8f:12:e6:
d1:01:1c:ed:ec:79:81:01:c9:52:ed:aa:ee:b9:6d:1f:6e:aa:
09:e3:7d:04:63:8c:c7:a7:b7:fb:54:24:95:40:ba:46:a0:3c:
59:93:b5:97:60:d0:e5:5f:a3:64:51:34:30:70:ca:aa:b0:e1:
03:0e:ba:5d:10:9f:ad:d1:64:c6:2b:a3:7e:99:fb:40:e4:87:
63:e6:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:49 2026 by rpki-client