
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: 7nueOKUImv9YhnNBicNgIczTfehyN6li96fzhowbPgE=
Subject key identifier: 3C:45:DA:1E:A3:85:53:18:64:2C:43:47:45:55:CB:96:93:4A:E5:18
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 022A
Signing time: Sat 13 Jun 2026 03:03:05 +0000
Manifest this update: Sat 13 Jun 2026 03:03:05 +0000
Manifest next update: Sat 20 Jun 2026 03:03:05 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: fIxgIT+k8KusNqVg3vT1McrFZ8XqIqtyT+b60ctDrBk=)
2: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: GGi4WKr5J/co8rUxY6XhZiQWpGv4cgJGL7H5da+yC00=)
3: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4BghnC9zlIFOkenQJ/GFUUF/OmlIg8plx0INfrm7Jrc=)
4: 33A6923A5FF211F1A6FEF4E07C47A888.roa (hash: ce1zM+kNx50Hy7hwGgA+3iNgny2gcR98bqMoQ6LvwF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Jun 13 03:03:05 2026 GMT
Not After : Jun 20 03:03:05 2026 GMT
Subject: CN=6a2cc869-adfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:12:46:a7:27:80:8c:7a:bc:11:52:cf:3a:
31:47:77:10:e9:2d:14:8f:10:b8:f6:61:4b:10:bb:
48:9e:9c:98:7d:90:3d:b0:97:71:ef:05:fe:d8:cc:
b2:21:5b:e5:6b:76:06:11:84:af:84:9d:1c:6e:13:
a7:bf:b5:d2:31:9f:96:15:f1:6e:da:db:d3:e6:47:
76:26:3c:3c:64:83:4c:39:f3:20:28:07:33:9f:bd:
2c:b6:47:f3:d7:79:51:4e:48:87:94:22:32:be:38:
c7:4d:05:aa:c1:24:8d:3f:8f:92:e7:e9:4f:f6:99:
f1:5d:64:00:d5:85:1c:60:ee:c9:52:31:86:b1:1b:
89:05:6b:83:28:1b:94:58:de:98:a4:49:a2:8f:b7:
e7:9f:ff:24:bc:c7:d3:2a:7c:eb:76:1d:19:c0:46:
50:7a:a4:95:8e:0c:75:6b:0d:cb:87:dd:e5:a1:b9:
15:30:33:9b:05:0e:42:c8:85:28:f0:16:52:cf:1f:
a1:3f:57:ef:85:e0:29:48:3e:64:7a:87:a2:8d:56:
d9:ff:af:49:25:c8:5b:3b:91:8b:54:13:bc:e4:5d:
70:29:13:eb:a0:f2:b9:ba:26:0c:d7:6c:ad:50:d1:
f4:3c:a9:37:1a:d4:12:8e:59:f3:a1:17:c5:b3:18:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:DA:1E:A3:85:53:18:64:2C:43:47:45:55:CB:96:93:4A:E5:18
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:1a:c5:aa:45:80:16:96:cf:64:98:43:ac:0e:86:a1:ea:
83:26:6f:1e:1e:e1:68:5c:18:ff:ac:34:fc:9f:9d:92:37:22:
46:7f:20:30:55:4d:32:7d:f6:ac:db:f5:5d:4f:c0:38:bb:2c:
ab:48:83:5e:a2:5c:4c:af:fb:4b:ff:3b:8d:74:09:15:02:77:
f3:54:e4:09:c4:77:f0:42:0b:dc:f1:bd:9a:eb:c7:21:9e:02:
18:9f:1c:14:3f:be:51:ea:21:ae:a4:41:95:bc:1a:4f:77:af:
b1:8f:f0:f2:ae:8f:7c:f1:f9:88:fd:aa:ff:a8:59:a7:16:b8:
1c:7f:2f:80:c7:49:64:b9:a5:84:b2:94:28:93:01:2a:aa:ac:
17:f7:85:61:04:a0:f2:c6:f6:c8:84:d9:28:8b:42:da:c3:6d:
30:04:f0:48:c1:77:29:91:4e:a5:1c:25:4c:56:f5:21:e7:16:
a2:fe:eb:4e:dc:00:ca:97:71:eb:6e:a0:73:32:15:52:85:78:
e8:18:20:29:5e:3a:92:50:09:1b:5b:75:3d:e1:99:34:1e:7c:
fd:1f:4a:3a:bd:69:fd:57:be:e3:07:8c:28:55:be:09:3d:f3:
8b:2e:49:95:bb:9e:74:1b:da:43:d4:e5:93:6d:46:48:f4:b6:
c4:b9:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:50 2026 by rpki-client