
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json)
Hash identifier: EEPnpeWYx/AP4Ak+X6ohDKvuwpXqeek6o8my+XudWSI=
Subject key identifier: E6:8F:D5:02:AD:C7:65:36:41:D6:4E:7B:A2:5B:DF:79:66:24:C6:9E
Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64
Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
Certificate serial: 1CAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
Manifest number: 1C9B
Signing time: Fri 12 Jun 2026 16:08:33 +0000
Manifest this update: Fri 12 Jun 2026 16:08:33 +0000
Manifest next update: Fri 19 Jun 2026 16:08:33 +0000
Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: A/+CboWmh9CR/0ww47IWK7pEEXrK7AMo5v8u7FWkpQk=)
2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: QCwKUkVOKXGLScCAxDR4Vgfe1Cz3Vfsmtw6cpnZ9ZlA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl
rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7342 (0x1cae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
Validity
Not Before: Jun 12 16:08:33 2026 GMT
Not After : Jun 19 16:08:33 2026 GMT
Subject: CN=6a2c2f01-3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:02:66:96:1b:21:57:6b:b0:55:0e:f4:3e:
77:67:78:ae:68:df:16:f8:d4:85:3e:b7:ce:28:7a:
69:0b:c5:41:3f:f1:33:9d:bd:55:94:da:3c:1f:63:
7c:d3:94:f4:93:f7:36:0d:9f:02:68:8b:f8:12:54:
06:19:72:76:7e:d3:6e:d9:ee:f5:42:20:f7:fb:1d:
29:09:c6:e9:6a:fc:d2:c4:2b:8d:63:58:6e:74:17:
ef:30:10:30:e6:39:28:cf:a3:c2:90:c4:65:4f:5b:
30:ca:72:ec:5e:be:49:fe:cf:a8:3a:c7:9f:55:40:
e3:2f:37:86:8f:8a:38:cc:9d:ec:a6:19:6b:63:40:
0a:f9:b7:c6:8e:4b:3c:53:89:35:66:ab:76:65:06:
2f:10:89:8a:30:05:96:2b:11:4f:de:67:1c:d3:c9:
c2:e4:31:54:b5:6d:1c:5d:2b:0d:7b:5c:a8:50:13:
de:e6:6c:6f:9b:f7:62:b7:46:a1:ee:6c:ab:1b:8c:
b5:c5:04:09:e4:80:b7:6b:ba:1b:65:5e:17:27:fd:
4c:31:0c:4c:c1:52:4b:d0:65:98:da:ef:e9:89:d6:
cb:c6:55:e1:84:64:a6:f7:0a:a5:65:ed:8d:13:27:
5d:81:e5:2e:6d:f6:ae:8f:41:31:ef:0c:83:5c:29:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:D5:02:AD:C7:65:36:41:D6:4E:7B:A2:5B:DF:79:66:24:C6:9E
X509v3 Authority Key Identifier:
keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:df:db:ea:ee:61:6d:b5:c5:b0:7d:27:eb:09:8b:de:6d:
0b:d0:3b:48:18:22:ee:59:a0:29:da:39:81:f1:4b:a1:89:d4:
70:43:8d:55:22:6b:37:2f:d4:a7:45:ad:54:26:6b:33:1a:4c:
17:69:9d:8f:1e:5a:6f:e3:f4:84:6f:5e:14:fc:03:35:97:8e:
2f:03:a6:4f:e3:b5:e9:d6:d6:0d:60:9c:fa:0d:aa:ec:3f:5a:
13:c1:e6:7b:b8:9a:d1:7e:8d:d3:6f:dc:ea:4a:91:f1:67:21:
dc:1b:ac:a5:45:b0:5a:a6:16:f4:00:44:4b:75:c1:95:33:f5:
9b:4c:81:fe:52:31:c3:15:f5:3b:87:c1:7c:48:dd:a2:47:0d:
ad:8c:1e:96:1f:15:9d:ea:ec:e0:25:d1:04:f9:c9:7c:f9:5a:
6f:ad:dc:0e:fb:bd:0b:b9:8d:7f:66:67:d2:ac:1f:14:da:61:
66:ed:23:62:52:f8:81:c2:b9:8f:bc:ff:35:b9:b5:89:0b:8e:
74:8b:0b:06:1e:21:c0:67:c5:78:e2:42:9f:33:7e:88:35:c9:
4e:ba:98:f4:ec:a4:fa:7a:0d:d9:af:3a:ef:54:90:30:8d:0e:
74:dd:0d:dd:45:f5:6d:d6:8a:86:7a:ab:0f:e7:36:f7:4b:fa:
4f:e4:1c:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG
Qjk2NTFGNjQwHhcNMjYwNjEyMTYwODMzWhcNMjYwNjE5MTYwODMzWjAYMRYwFAYD
VQQDEw02YTJjMmYwMS0zZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmxkCZpYbIVdrsFUO9D53Z3iuaN8W+NSFPrfOKHppC8VBP/Eznb1VlNo8H2N8
05T0k/c2DZ8CaIv4ElQGGXJ2ftNu2e71QiD3+x0pCcbpavzSxCuNY1hudBfvMBAw
5jkoz6PCkMRlT1swynLsXr5J/s+oOsefVUDjLzeGj4o4zJ3sphlrY0AK+bfGjks8
U4k1Zqt2ZQYvEImKMAWWKxFP3mcc08nC5DFUtW0cXSsNe1yoUBPe5mxvm/dit0ah
7myrG4y1xQQJ5IC3a7obZV4XJ/1MMQxMwVJL0GWY2u/pidbLxlXhhGSm9wqlZe2N
EyddgeUubfauj0Ex7wyDXCksWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaP1QKt
x2U2QdZOe6Jb33lmJMaeMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3
MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM
cDVtT29paGh1cEQ3bGxIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi9Hf2+ruYW21xbB9J+sJi95tC9A7SBgi7lmgKdo5gfFLoYnUcEONVSJrNy/U
p0WtVCZrMxpMF2mdjx5ab+P0hG9eFPwDNZeOLwOmT+O16dbWDWCc+g2q7D9aE8Hm
e7ia0X6N02/c6kqR8Wch3BuspUWwWqYW9ABES3XBlTP1m0yB/lIxwxX1O4fBfEjd
okcNrYwelh8Vners4CXRBPnJfPlab63cDvu9C7mNf2Zn0qwfFNphZu0jYlL4gcK5
j7z/Nbm1iQuOdIsLBh4hwGfFeOJCnzN+iDXJTrqY9Oyk+noN2a8671SQMI0OdN0N
3UX1bdaKhnqrD+c290v6T+Qcqw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:27 2026 by rpki-client