
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier: 6dix5TOLgbhziORi+p3hDXKmcfn0JeL97Bte88HxcOI=
Subject key identifier: 4D:B3:F9:16:5F:F8:E1:40:8C:1D:F3:8D:08:0F:94:9C:E6:11:BC:01
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number: 0D65
Signing time: Fri 12 Jun 2026 18:00:27 +0000
Manifest this update: Fri 12 Jun 2026 18:00:27 +0000
Manifest next update: Fri 19 Jun 2026 18:00:27 +0000
Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: MK+pvBt+CJyYJNMzi0k/tPdn1QzW+WnmadEEm+s+Kuw=)
2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=)
3: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=)
4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3468 (0xd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Jun 12 18:00:27 2026 GMT
Not After : Jun 19 18:00:27 2026 GMT
Subject: CN=6a2c493b-549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:58:a7:72:e5:7b:90:ac:2b:c0:44:31:32:
d4:ec:12:f6:5c:53:a3:6e:f4:71:ef:14:af:56:49:
2a:e5:5a:a4:95:3c:22:cc:88:21:b7:75:0e:3e:66:
5b:d6:6c:7d:14:33:26:10:9b:79:c5:4f:9f:15:01:
fd:08:6c:3a:65:f9:15:84:09:ca:68:f3:69:6c:f5:
82:0a:8e:53:42:87:a2:ee:74:c9:95:2f:8b:01:e0:
a4:d4:dc:d0:8a:93:dc:82:d3:2c:80:6f:7a:87:ad:
36:81:51:d6:7b:d0:db:6b:50:b8:1b:94:1a:a4:bf:
0b:77:bc:27:a5:22:9d:e6:b3:30:15:46:56:2a:08:
25:23:9b:1b:90:84:18:f1:4b:ac:ac:91:02:98:2d:
63:65:d1:5f:52:e3:0a:64:62:9e:e8:2e:80:13:57:
77:a6:57:16:07:47:bf:e5:7f:5d:48:fb:3e:31:1e:
d1:15:a3:2f:41:54:3b:60:39:ec:00:68:c0:bd:71:
f5:2e:e1:02:7b:36:04:62:b0:d7:94:05:25:58:6f:
f6:24:55:ae:6b:5b:23:16:47:42:f9:44:d9:70:a5:
2d:22:7a:c9:92:56:e3:47:f6:63:4b:a1:65:92:b8:
98:8b:96:2f:56:00:f9:c2:1d:13:dc:dc:a6:d4:e0:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:F9:16:5F:F8:E1:40:8C:1D:F3:8D:08:0F:94:9C:E6:11:BC:01
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4b:8b:54:58:a1:c6:b3:c8:1d:b2:ab:de:1f:d4:b7:3e:6b:
6d:fb:8c:28:c2:89:e5:c3:1f:87:ae:4f:0f:2b:0a:48:f9:ab:
39:96:f2:45:59:fa:7f:0b:2c:da:f5:6e:20:a5:4c:c2:9c:01:
3d:2c:d5:b2:7a:b4:a6:8e:7d:b0:b8:48:0e:b9:75:04:46:64:
f5:07:c3:72:da:3b:b0:3f:02:f1:7c:38:42:a4:66:a7:80:d4:
c8:6b:db:f9:36:cb:af:69:80:95:6f:6b:0c:34:fa:35:18:56:
7c:d5:5e:de:50:c8:d3:a5:f5:64:54:9b:47:4a:67:e5:a2:25:
b9:70:7d:7b:fe:92:95:6d:99:fd:07:f4:fc:f3:5f:dc:43:61:
78:05:0a:33:a9:ff:e4:2a:77:29:75:23:65:b7:39:f8:52:28:
ab:80:d2:94:46:45:f8:ab:a0:b8:3e:f9:c1:70:90:bb:75:58:
b9:8b:15:17:d4:cd:f7:ed:a2:6e:53:a5:50:66:d4:5c:6c:d8:
54:32:a7:f6:d2:ce:b4:cb:31:23:50:f4:d4:b9:ca:1c:70:63:
0b:42:30:7a:78:11:c4:75:26:16:22:1b:e8:50:d2:1f:88:8d:
93:9b:f1:93:df:78:4b:25:a3:11:21:7a:0c:2e:a8:3d:d7:e9:
13:59:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:02 2026 by rpki-client