
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: oRxsLrN5JdbFgQBUQTos1LW3Wx4RRoan5jITCr6ytcI=
Subject key identifier: E6:F9:71:54:62:36:F4:75:ED:B2:81:9A:29:9F:9B:96:AF:B9:87:8A
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0E98
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0E81
Signing time: Tue 16 Jun 2026 14:42:10 +0000
Manifest this update: Tue 16 Jun 2026 14:42:10 +0000
Manifest next update: Tue 23 Jun 2026 14:42:10 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: YquXs+SCda/EqUZ2dik4vl1RZl4a3sRW3fzU5kMxc58=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3736 (0xe98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Jun 16 14:42:10 2026 GMT
Not After : Jun 23 14:42:10 2026 GMT
Subject: CN=6a3160c2-f888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:51:a2:f7:e8:90:74:39:31:2d:76:ef:51:
2f:6a:8b:59:6e:1b:12:55:74:c2:6d:72:51:96:8c:
d2:f1:b7:2e:c2:05:f8:11:97:8f:6d:d4:b4:e5:25:
d5:e1:01:2d:6a:3e:d6:c8:3b:f4:c2:82:f3:d4:0c:
6c:19:9c:b0:be:fc:66:a8:4d:fb:bc:e5:a2:71:12:
77:97:8a:92:2d:c9:73:96:28:cc:0f:d6:1a:29:fd:
fc:6b:b0:dd:24:b9:d3:34:2e:2b:81:7a:c1:0c:7e:
2e:a6:9b:25:ca:4f:3c:34:ad:f6:7d:71:c7:4e:0a:
80:8e:a9:ee:d4:b5:1a:07:e4:a0:06:03:02:0b:ce:
7f:aa:ab:5c:95:89:80:4e:ee:b6:cd:0c:67:3d:60:
0a:3f:22:60:35:a2:17:8a:63:5f:0b:cf:ee:0e:68:
4c:01:07:69:47:aa:63:22:fb:37:21:60:56:40:95:
70:ed:4d:0c:32:a1:e4:39:ec:aa:f1:59:32:a3:75:
03:5d:52:dc:7d:8e:88:35:d4:d0:fe:73:2a:8f:f5:
12:e2:0e:bd:5f:f0:f7:3d:2c:eb:d0:a1:03:b6:f7:
95:c1:01:11:09:46:66:ff:a4:cd:92:d1:95:09:52:
ff:d8:08:23:63:02:c3:72:87:5c:47:58:96:30:9a:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F9:71:54:62:36:F4:75:ED:B2:81:9A:29:9F:9B:96:AF:B9:87:8A
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:79:b2:41:f8:bf:cd:90:e9:81:a1:45:b7:5e:8c:8f:d4:90:
6d:00:64:49:68:7e:c1:a1:10:6a:a2:fd:d9:05:4d:ff:04:68:
64:f7:06:c9:2e:95:ad:1d:d0:db:9f:d6:ba:a2:27:d5:16:82:
e4:90:24:22:77:f5:6a:a3:cb:bf:3d:b8:da:74:d4:15:35:ee:
93:ca:f2:e2:91:da:4c:e6:9b:45:49:6f:a0:58:b5:a2:4a:a0:
29:23:1f:3e:24:9f:9e:4c:28:77:e2:35:11:0c:f6:de:cb:a9:
3d:f4:93:1c:4c:0b:97:1d:c4:2c:1c:70:01:5d:94:24:cf:b7:
71:53:95:4c:66:46:a7:df:4c:49:42:73:d6:4f:5f:a4:88:9a:
ad:78:0d:db:4a:43:b0:5a:63:c3:e9:aa:8b:7d:d9:09:6d:95:
e4:8b:66:26:18:12:37:aa:14:a7:ce:12:52:b4:68:8f:8e:9e:
1e:8c:a1:6c:24:8b:88:ff:e9:6b:57:fe:7e:30:8c:e4:65:b6:
6a:46:5d:58:a8:f9:12:ac:7f:f3:ad:d1:5c:cc:a9:56:61:a0:
b6:13:ca:e7:b0:0e:d1:3c:e8:cb:69:70:9b:5c:45:f8:8e:1b:
65:7f:e0:27:c5:86:cc:11:24:14:13:18:b1:bc:7e:37:c5:45:
62:c4:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:39:12 2026 by rpki-client