
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: UB0ueXzvAq473sakXdeMtd3Sgbngjn+s1WcKhGbWEOM=
Subject key identifier: F8:D1:0D:19:8B:EC:EF:52:1A:34:A2:1A:8A:AE:0A:20:05:C6:09:14
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 02B3
Signing time: Sat 13 Jun 2026 01:35:43 +0000
Manifest this update: Sat 13 Jun 2026 01:35:43 +0000
Manifest next update: Sat 20 Jun 2026 01:35:43 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: yeQsefvBeNn+BsBawygjPSX1XS9kVpCpZ6DYzAn8ExI=)
2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jun 13 01:35:43 2026 GMT
Not After : Jun 20 01:35:43 2026 GMT
Subject: CN=6a2cb3ef-016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:ce:2d:58:81:e2:be:30:7b:da:4b:13:dd:
87:c9:08:ec:61:c3:d7:cc:88:30:17:5f:d7:a1:e0:
a8:8f:2e:55:b8:c5:92:67:c2:41:3f:4a:95:eb:8e:
c6:a2:5b:f4:d6:53:81:3e:04:9e:4c:26:0b:6d:f0:
5c:16:6b:f1:3a:8a:a9:1c:44:6b:89:41:9f:9f:a9:
91:01:e8:f0:b6:46:53:12:90:80:7d:57:9e:75:6a:
d8:3e:a8:dd:96:13:bc:e2:33:07:68:84:b2:3b:2b:
14:81:79:15:ee:a4:d6:a3:6f:aa:9e:07:38:71:4e:
84:dc:8c:d3:bc:3b:82:97:0d:b1:0d:a5:5a:3c:f2:
9a:f5:43:27:15:c2:ec:30:99:db:9b:bd:64:cc:8a:
7d:3e:3d:81:f3:a4:2d:07:e8:5b:25:98:b8:34:5c:
3b:78:9c:f5:54:e7:15:79:fb:68:7b:c1:2b:c1:8b:
2f:91:de:ff:0a:f8:13:25:d5:89:f5:e4:32:5a:a4:
c8:7a:82:19:ca:68:a6:a7:2a:de:d0:17:c3:30:2b:
1f:dd:6b:c0:fc:d9:45:dd:06:f6:b4:d1:a5:4e:eb:
82:39:29:01:dd:4c:50:ff:d5:bf:3f:a8:fb:46:1d:
3a:d1:9c:69:e9:ad:70:a0:38:cb:75:83:53:dc:54:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:0D:19:8B:EC:EF:52:1A:34:A2:1A:8A:AE:0A:20:05:C6:09:14
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:36:06:7e:81:7b:3c:42:de:70:9b:22:59:ac:24:73:6c:f8:
52:7b:94:3b:64:3d:e2:8f:0a:0e:a4:b3:cf:c8:bd:23:95:1c:
d4:b6:05:2a:34:e1:10:10:56:7c:f3:e4:67:a9:11:15:54:9a:
29:6b:7f:6a:ef:ef:d6:36:44:d1:72:8d:62:41:89:10:2e:75:
27:91:51:68:39:49:19:33:2a:9e:85:8a:21:c5:6d:4d:d5:10:
d7:ee:fc:a6:47:81:c3:a7:05:fd:73:c3:e5:01:4d:4d:41:7c:
73:e6:20:6e:a3:4e:94:68:a5:78:de:e7:69:cd:c2:cc:ea:96:
bf:b3:1a:fc:5f:e8:0f:f3:94:fa:0b:53:78:13:9e:e7:64:b0:
d8:b9:51:fb:84:af:e0:2c:e5:d4:7f:3b:35:96:f3:f4:d1:b7:
bc:5c:d3:fb:8d:1f:04:6b:a9:db:02:bc:32:d6:ae:b0:f7:4e:
22:a4:c3:c1:6c:57:3c:31:08:ed:f6:1a:34:53:8d:a0:be:f9:
ae:46:51:0c:89:53:12:b3:aa:bb:62:7a:bc:39:95:3c:40:ff:
93:e5:c4:68:6c:37:59:55:7f:06:f6:f4:73:2a:5f:19:fe:f3:
df:12:fc:6d:76:91:21:04:6a:e6:fb:31:45:10:08:63:6f:b0:
39:90:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:46 2026 by rpki-client