
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
File: -mtidXvK1FesoHClHEgItLfJM3A.mft (raw, json)
Hash identifier: NrZmARYzuU63sBj3vY556OAKR8gIbdDh1dhJIwb+1I8=
Subject key identifier: 78:B2:2B:89:B3:90:17:0D:AF:DD:8D:73:0A:78:6E:A1:75:48:5A:69
Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
Manifest number: 35
Signing time: Sat 13 Jun 2026 08:41:37 +0000
Manifest this update: Sat 13 Jun 2026 08:41:36 +0000
Manifest next update: Sat 20 Jun 2026 08:41:36 +0000
Files and hashes: 1: -mtidXvK1FesoHClHEgItLfJM3A.crl (hash: ruL5fTD4Ew8dwxlDL8lWalFgtobMbQQH5xJ/4bA81i0=)
2: 824F8AD0187711F1AF6111A7363D8C67.roa (hash: /rBFDP4ucRayd+6pogF2vcfXHdX6dh/y/lIPddm4CdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Validity
Not Before: Jun 13 08:41:36 2026 GMT
Not After : Jun 20 08:41:36 2026 GMT
Subject: CN=6a2d17c0-abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:6d:17:8c:0d:a0:1a:9f:7e:a9:6d:23:0c:
60:d0:3f:3f:d7:d3:98:85:69:a2:b5:d8:c5:e6:bf:
53:bc:9d:dd:3d:be:02:89:7f:18:96:20:dc:c3:f0:
76:98:78:54:92:8e:ab:bd:b9:10:7e:81:a1:b0:88:
bb:2e:97:cf:f4:2b:01:2a:80:6f:58:ea:9d:cc:1f:
a6:d8:a2:19:e7:2b:43:05:cf:50:45:9a:86:d8:2e:
9b:13:12:8c:91:4b:4e:8b:76:c2:bc:27:ca:c8:f4:
52:ab:da:a2:f7:a7:b5:0d:9d:fa:3c:29:c9:17:be:
8d:b5:8b:4d:df:5e:93:b6:54:9b:a2:0b:25:fa:2a:
8e:1a:4a:29:d6:9a:41:ec:e4:a0:cb:01:17:a8:55:
63:92:5a:25:93:67:43:ef:39:fb:79:b9:39:54:cf:
3d:ca:71:a0:9f:09:40:23:92:93:14:c1:2a:60:99:
a7:6f:ac:c0:52:c9:14:05:60:91:39:a6:fb:25:ad:
ea:7a:8d:86:8c:57:97:23:f1:1d:b0:08:72:ae:26:
6b:d9:b4:72:f2:fa:8b:b6:af:0d:c9:7a:9b:79:46:
85:9e:c4:5d:d1:be:eb:7a:12:ff:31:41:ff:c5:73:
e6:c4:87:f5:d3:a4:11:57:c1:5e:a9:a5:f9:35:b6:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B2:2B:89:B3:90:17:0D:AF:DD:8D:73:0A:78:6E:A1:75:48:5A:69
X509v3 Authority Key Identifier:
keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d7:dc:44:3f:d7:87:56:e9:9a:83:35:d1:e0:96:64:c3:7d:
ab:a8:47:ef:c3:12:7a:2e:98:f7:2b:97:28:71:be:ed:75:0c:
41:25:c8:56:5b:8c:02:e9:75:86:40:ef:a5:e5:75:f5:e4:3c:
ad:fb:90:97:27:cc:e3:52:6a:18:0e:13:63:42:05:e7:16:45:
3b:0c:b8:13:80:87:19:2a:a4:0b:bb:ec:c9:99:36:99:75:d7:
f5:1e:d1:bb:fd:70:37:c9:03:71:2e:74:73:21:09:22:53:a3:
f0:57:8c:ea:91:e3:c2:68:ee:34:14:ff:1b:6d:e2:90:85:53:
5c:a0:6f:db:fd:5b:79:67:71:db:81:36:fc:4d:8f:4b:a9:c7:
f1:39:c9:d3:8f:f1:c8:95:00:18:a6:ed:15:28:45:8c:a9:8d:
b7:b6:fc:fb:36:fe:c4:d7:a5:3d:54:91:de:d2:02:63:bc:45:
92:0c:16:51:1e:c5:58:34:e0:5d:c4:b5:73:9e:05:e8:39:db:
9e:52:88:d4:e8:42:88:ea:68:96:4a:cd:51:84:4c:04:57:d8:
01:72:ba:86:7a:18:89:dd:30:fd:df:b1:3b:b4:5f:a2:a0:90:
de:3c:fc:91:13:d6:ea:f8:73:03:30:1b:1d:6f:78:6d:c7:b0:
76:81:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:37 2026 by rpki-client