
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json)
Hash identifier: CY7t+gcZh7c7p308Api0eKDY2wvco7WI3Y7yAKnirgw=
Subject key identifier: E1:CC:82:C6:4A:52:94:0F:50:B5:B4:C1:45:81:92:2D:23:2C:E5:3F
Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Certificate serial: 09F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
Manifest number: 09EE
Signing time: Fri 12 Jun 2026 19:51:51 +0000
Manifest this update: Fri 12 Jun 2026 19:51:51 +0000
Manifest next update: Fri 19 Jun 2026 19:51:51 +0000
Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: AgKaj4YEXvaDnAupnSDHRUcs79xsStfBevy661kXFo4=)
2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: vDZT3DfVTn1W66wuzGllN1nmfcDrVZhrmZ141ppoOSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Validity
Not Before: Jun 12 19:51:51 2026 GMT
Not After : Jun 19 19:51:51 2026 GMT
Subject: CN=6a2c6357-3b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:02:9c:bc:4a:ed:ea:6e:49:67:39:f9:74:
94:db:6f:27:d4:33:56:d7:6c:5f:50:5a:f9:18:c2:
2b:2e:34:9b:bb:22:6c:19:36:71:99:6d:36:f7:c8:
f0:a7:4b:6c:77:78:87:9b:0b:ef:d8:02:2a:91:38:
71:26:fc:f5:25:17:a9:12:86:43:8d:c3:02:15:5e:
f2:17:3f:22:48:bc:c2:12:f1:04:5a:30:69:29:34:
e1:55:9c:8f:c9:75:5f:6b:4c:ee:91:fd:fe:0e:bd:
8a:31:f8:a4:7b:3d:98:48:ae:c6:05:6a:31:47:50:
d8:a8:26:22:b0:a8:2d:bd:aa:1e:eb:41:61:88:4c:
b4:d9:64:43:69:52:75:e0:4b:2c:f9:ef:56:30:f8:
1e:5b:18:0e:98:05:5b:2c:e1:6f:89:c5:21:bb:6d:
2b:66:9d:95:26:c9:df:f7:16:27:b9:71:05:71:ff:
a5:dc:3e:ea:34:81:0f:c9:50:22:4c:bb:5c:cb:41:
fc:ef:86:d9:65:ad:fb:5c:f5:e2:b4:8f:96:98:37:
4a:c3:85:18:ec:20:a8:b0:5c:a9:f3:83:bc:f6:51:
c6:f1:2c:9e:b9:07:c7:53:84:ec:f2:a0:6e:a4:6a:
55:4f:0f:49:e6:58:53:e8:3a:93:6e:4f:36:18:c4:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:82:C6:4A:52:94:0F:50:B5:B4:C1:45:81:92:2D:23:2C:E5:3F
X509v3 Authority Key Identifier:
keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:01:0d:92:57:01:cc:cb:71:14:fd:9b:d3:7e:03:ae:87:a9:
d1:b0:38:3f:b9:6c:43:0a:0e:07:b3:19:6a:31:5b:ae:95:e0:
0a:10:1f:c3:02:0a:f1:ef:8d:7e:bd:51:05:bd:eb:e7:f2:20:
66:20:af:bd:38:77:e2:45:40:18:30:4c:f7:54:97:cc:93:20:
e2:88:08:fc:99:a5:13:86:e2:ae:c3:38:10:b5:c4:6a:e6:f2:
35:01:68:95:11:3a:db:91:a6:3f:67:91:b8:77:98:5c:77:0f:
87:2a:a0:70:2e:93:1b:9d:95:c4:3d:65:51:0e:fd:4e:2e:8f:
8f:10:18:f1:7c:08:13:dd:97:ef:f3:c1:7d:18:92:d1:17:3b:
6f:3b:ef:5f:f0:b7:30:91:46:6b:22:5b:3f:f6:56:50:94:af:
8d:fc:22:92:11:d5:f3:3f:36:7d:64:d3:27:f8:7a:0d:3d:06:
5d:78:75:88:87:54:6b:4e:e0:d3:10:e2:5e:75:63:e2:6d:3b:
5d:67:89:11:51:c4:01:0f:4f:a2:33:73:0f:20:10:67:a4:bb:
41:85:80:ec:c1:c2:3a:1e:7e:93:cc:a6:59:83:f5:34:fc:f0:
f5:a4:46:33:2e:4a:00:2b:8b:75:d9:12:3f:25:cb:22:5b:60:
39:37:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:55 2026 by rpki-client