
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier: b+Saeg/FrdYcxRlPt5KF1zon502/eXKW7Vz2F4bh7HQ=
Subject key identifier: 9D:CE:22:BC:A1:CB:34:78:A1:1F:2A:1E:3B:27:9C:D8:02:1E:08:49
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number: 86
Signing time: Sat 13 Jun 2026 07:39:12 +0000
Manifest this update: Sat 13 Jun 2026 07:39:11 +0000
Manifest next update: Sat 20 Jun 2026 07:39:11 +0000
Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: nG6iHaRs9ToKVaR91sO96TaE/cRV9amytSUCAgEody8=)
2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Validity
Not Before: Jun 13 07:39:11 2026 GMT
Not After : Jun 20 07:39:11 2026 GMT
Subject: CN=6a2d0920-a725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:1c:69:23:e6:2c:60:fd:70:90:9e:ae:92:
13:d0:3f:84:a7:f9:d3:72:1f:10:43:82:64:bc:d0:
05:bd:20:3a:a9:e6:9b:61:ad:1d:29:7c:f7:c4:0a:
54:ca:e8:51:56:12:92:0d:8e:cd:c5:4e:bb:67:4d:
da:22:58:50:99:18:4e:0b:75:45:08:a4:1c:5d:8f:
f6:bf:5f:85:bb:7e:e4:b4:fa:46:8e:20:10:24:87:
ba:be:b1:5d:04:8c:25:1e:23:33:d4:01:17:20:c7:
bb:0e:0b:3f:b8:a7:50:6f:f1:f6:b4:46:45:d2:77:
e0:af:64:4b:07:ec:a3:a8:cc:34:46:cf:fe:20:18:
55:8e:d1:60:c6:20:16:58:19:00:42:30:66:9a:94:
12:ec:a6:9b:56:01:33:3a:d1:83:22:d0:77:6e:54:
fa:ae:eb:7d:cf:c4:d6:3c:13:9b:f3:66:f5:5d:17:
d0:d5:5b:f8:42:fd:7a:a5:11:60:31:6f:49:5e:ac:
b6:49:81:da:50:94:cd:ba:9b:13:ca:7a:d4:8c:e0:
aa:7d:51:76:c4:db:4c:57:72:b3:5e:da:41:d9:86:
56:26:8e:e1:8f:c6:33:48:1b:f6:dc:9b:12:62:63:
49:45:21:c2:6d:af:96:d1:b1:e4:34:56:ca:ed:9b:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:22:BC:A1:CB:34:78:A1:1F:2A:1E:3B:27:9C:D8:02:1E:08:49
X509v3 Authority Key Identifier:
keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:5b:fd:a9:e8:3f:0a:fc:c4:e2:29:39:aa:bb:aa:f5:07:
ac:0e:1f:98:51:71:ed:66:ee:87:6d:f2:e9:e5:53:15:6c:78:
2f:d3:8c:32:fe:c6:53:ef:47:dd:4e:e5:75:cd:7f:d9:f1:bb:
bc:e7:03:3f:ee:73:00:10:72:48:de:ff:47:51:ac:0f:59:a5:
c4:23:4c:6c:77:cc:19:f5:bf:7c:99:96:1e:44:9a:ee:b9:5e:
41:46:21:82:22:a8:d7:65:fb:c3:0c:90:d6:22:7e:c7:bf:50:
51:a2:04:b6:2b:67:37:84:c1:9f:f0:64:6d:11:f0:7f:d2:34:
ce:3f:e6:f5:ff:dc:35:e8:dd:42:7a:60:c7:0a:39:1b:37:81:
ec:88:a1:89:e4:cc:c1:86:34:56:f0:bf:1f:50:62:9a:ae:ef:
e7:b4:70:64:df:8e:e6:6c:d7:17:d5:8d:a2:1b:05:55:fc:18:
35:24:71:04:ac:75:ea:57:01:30:f9:de:2e:e3:60:82:46:2b:
2c:2f:53:b0:03:86:0f:da:d4:40:d4:20:b8:63:6c:ff:2c:b5:
d0:f8:24:fb:96:ff:a4:b6:bd:9a:ed:21:cc:f8:ee:ee:7f:f4:
2b:5d:59:10:64:67:1a:1c:bb:e3:ec:cf:ac:f3:7a:38:12:65:
3e:95:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:40 2026 by rpki-client